Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: EZk21wXnGXddfOq7GzNXR2QLm/nWTr1TeFFq788Ugko=
Subject key identifier: E1:EB:AE:5B:7D:AA:34:94:34:67:C1:22:86:84:5C:8D:4F:1D:03:71
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019A5075320B036121F1EE03C0E663E412A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:49 +0000
Manifest this update: Tue 04 Nov 2025 20:00:49 +0000
Manifest next update: Wed 05 Nov 2025 20:00:49 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: +HYmJpNqKrYfT7ID38tPTsN7026TV3XNguOBfNxk5Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:32:0b:03:61:21:f1:ee:03:c0:e6:63:e4:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Nov 4 20:00:49 2025 GMT
Not After : Nov 5 20:00:49 2025 GMT
Subject: CN=e1ebae5b7daa34943467c12286845c8d4f1d0371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:28:81:19:5f:2c:75:e9:ed:b0:90:92:2d:
ad:5b:75:39:f3:b6:4e:68:31:01:eb:43:a9:84:f5:
86:51:d9:e1:c5:6f:db:29:fc:08:52:18:40:39:fe:
51:be:15:ee:c6:f4:e7:39:fc:29:c7:2a:4c:08:78:
4b:81:0c:63:86:fc:68:76:a1:6d:a2:e0:b0:ca:f5:
eb:9d:d2:b2:cf:a0:49:67:aa:5b:a3:9b:8c:88:8a:
48:ed:74:23:ca:92:97:20:2b:4e:a4:a0:1d:e5:41:
12:e9:83:98:d9:e0:62:1d:eb:39:2b:a8:26:aa:79:
da:16:2d:21:7b:f4:45:67:2f:1b:84:c2:15:6e:8e:
20:d5:0a:de:f2:eb:0b:cf:41:ab:b4:10:9c:5f:71:
86:fe:f8:7c:a5:27:bf:21:b5:c0:2e:63:40:13:83:
9b:fe:cc:9f:44:f5:52:f1:ed:ce:1d:03:bf:c1:37:
9d:b1:cc:80:b9:66:d4:be:34:20:5d:e8:77:41:5e:
2b:2c:69:b4:16:62:4d:f4:92:4b:33:d0:87:f8:d4:
1a:d6:09:bf:3a:72:9f:d0:b6:93:b7:7b:76:cd:b4:
6a:e9:dd:81:0e:99:1d:b3:7c:96:c6:33:f7:53:2f:
d7:e9:e3:0e:9d:32:d1:23:fc:89:61:78:1d:3c:3e:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:AE:5B:7D:AA:34:94:34:67:C1:22:86:84:5C:8D:4F:1D:03:71
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:59:86:67:1f:5e:99:86:d1:64:cc:6a:84:ac:d6:97:cf:
42:ec:74:42:c3:e1:8b:f8:b2:2f:9e:bb:6b:45:a7:46:6d:33:
4d:7e:51:5e:2e:83:3f:f1:aa:7e:dc:c9:58:dd:db:f6:35:49:
32:85:9b:78:5b:81:b0:d0:46:0b:9f:53:11:bd:fe:82:bc:40:
fb:77:8e:25:40:c2:5d:f4:e3:5a:15:e4:23:34:28:d5:93:ce:
48:44:68:6b:9d:58:d4:77:6c:5a:6c:4d:9d:cf:7b:e2:2d:7f:
2e:6c:3f:1d:48:8f:8e:a8:45:c4:59:e3:b6:97:fc:6b:6f:e1:
39:64:4f:b5:41:27:d7:7b:53:4c:ba:72:c3:81:cc:bc:9a:09:
c9:3b:1f:df:2a:cd:05:b8:16:ad:ba:b0:81:a7:56:88:f9:e4:
6b:d5:f5:7a:89:ce:0d:96:75:0d:c3:88:82:88:db:8f:c9:b2:
15:a3:25:e0:b0:e5:fa:9b:07:a1:45:f0:ac:76:93:26:c0:85:
01:73:d7:64:5b:36:15:a6:71:84:6e:bf:df:5c:25:89:ae:67:
96:4f:9f:d5:30:e3:86:7f:f2:2f:29:a6:d6:30:b4:23:ac:1d:
2e:a6:ba:4b:88:87:13:70:65:9c:67:28:12:3f:80:36:b9:96:
d5:f2:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:58 2025 by rpki-client