Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: kSu+GzxSeq6BDe0o0WfF1OTW+VPCkUECcoS/GdH2Sdo=
Subject key identifier: 84:F5:4A:96:6D:B5:AD:72:5A:6B:EB:4D:67:16:35:86:C3:1A:66:CA
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 019A4DAB33169A2237ADAB1FB440C83136C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 06AA
Signing time: Tue 04 Nov 2025 07:00:56 +0000
Manifest this update: Tue 04 Nov 2025 07:00:56 +0000
Manifest next update: Wed 05 Nov 2025 07:00:56 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: 2oBQs8IBPDfk0OJA11tLf9YpgRk+QgJW+QfeuYzQMrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:33:16:9a:22:37:ad:ab:1f:b4:40:c8:31:36:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Nov 4 07:00:56 2025 GMT
Not After : Nov 5 07:00:56 2025 GMT
Subject: CN=84f54a966db5ad725a6beb4d67163586c31a66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:de:cb:1a:eb:b9:2e:3c:6e:85:99:d5:53:
e8:15:02:a0:8e:03:21:06:38:62:26:06:79:7e:e7:
04:ce:ae:f7:64:34:a2:f1:c2:86:6d:20:26:67:06:
f4:0d:72:7b:e2:cd:37:37:3c:f7:64:00:31:8a:6b:
53:80:1a:e4:3a:de:f6:2c:b0:19:65:1c:28:f2:e2:
79:e5:7d:23:6f:68:7f:e8:c0:a2:cf:e3:5a:93:93:
e6:5b:9d:ec:cd:92:4c:61:c8:6a:a1:4c:b4:c0:6b:
93:a5:ea:78:9a:1b:63:58:87:7d:4c:8a:3c:a3:43:
8f:be:cf:f8:06:7d:af:be:39:e4:d6:0e:bb:36:a8:
88:82:b6:77:a3:47:a9:93:55:8a:c1:5e:3d:37:af:
64:9f:c3:73:01:ee:82:ec:8e:e9:3c:54:62:c6:3d:
2e:24:f1:0f:31:04:9b:67:48:fa:0b:e9:e0:87:91:
5f:89:87:d8:17:62:18:fa:4e:60:f2:bd:e5:d5:57:
8e:79:24:ad:62:1c:e3:09:9e:e3:0e:b1:20:28:8e:
e3:2d:73:17:83:6d:dd:c9:62:cb:5f:85:dc:b5:3c:
10:ff:d3:39:5f:41:24:56:a4:b1:71:e4:e2:d9:50:
0e:98:83:c8:c5:f6:03:9f:2d:48:6c:19:59:c6:e0:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:4A:96:6D:B5:AD:72:5A:6B:EB:4D:67:16:35:86:C3:1A:66:CA
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:c1:ae:86:12:75:de:64:72:63:49:f0:d9:a8:04:3e:da:
78:fb:12:9c:78:2e:98:39:cc:b1:d4:c2:41:dc:c0:3b:1a:e3:
b3:a3:d8:5f:cd:fc:b3:14:47:5e:e5:d5:d2:12:97:82:e1:2c:
48:45:9b:6c:4e:19:e9:fd:76:c1:8a:10:41:bb:6e:4f:25:f3:
65:d7:a8:cd:80:ef:67:6b:5d:82:82:48:96:03:bb:ab:10:fe:
1f:9d:1b:c0:da:96:fd:b3:a3:fe:d4:e6:5e:67:f7:2e:b5:87:
44:72:4e:14:c9:c6:0e:69:a7:51:34:50:64:02:4c:58:ff:26:
18:c5:0a:5d:16:ae:19:72:5f:1b:de:0e:56:e5:7c:4c:8e:cd:
a4:54:14:86:06:8b:a5:c8:66:86:f2:ce:47:c8:a1:7d:d5:34:
56:c1:b9:8e:51:eb:68:be:5e:4e:e3:a5:ce:bf:a6:a0:32:24:
f9:35:f4:0f:2d:38:83:8e:fc:23:c9:6f:9a:48:6b:3f:a1:79:
83:18:05:e4:ba:45:63:ac:42:cd:72:1b:64:0b:8e:7b:b5:c8:
3f:6d:d0:e2:43:e7:4f:83:65:7b:5e:d3:53:cc:7b:11:60:c5:
13:22:e7:bb:6b:49:3c:47:1a:9d:c5:77:1f:a7:59:4b:cf:d9:
c4:96:a7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqzMWmiI3rasftEDIMTbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZWNlZDY5N2NkNmVmNjAzYzkwZjgwMTg4MTgzYmNlMzAy
MDQwZTEwHhcNMjUxMTA0MDcwMDU2WhcNMjUxMTA1MDcwMDU2WjAzMTEwLwYDVQQD
Eyg4NGY1NGE5NjZkYjVhZDcyNWE2YmViNGQ2NzE2MzU4NmMzMWE2NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPeyxrruS48boWZ1VPoFQKgjgMh
BjhiJgZ5fucEzq73ZDSi8cKGbSAmZwb0DXJ74s03Nzz3ZAAximtTgBrkOt72LLAZ
ZRwo8uJ55X0jb2h/6MCiz+Nak5PmW53szZJMYchqoUy0wGuTpep4mhtjWId9TIo8
o0OPvs/4Bn2vvjnk1g67NqiIgrZ3o0epk1WKwV49N69kn8NzAe6C7I7pPFRixj0u
JPEPMQSbZ0j6C+ngh5FfiYfYF2IY+k5g8r3l1VeOeSStYhzjCZ7jDrEgKI7jLXMX
g23dyWLLX4XctTwQ/9M5X0EkVqSxceTi2VAOmIPIxfYDny1IbBlZxuCumQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1SpZtta1yWmvrTWcWNYbDGmbKMB8GA1UdIwQY
MBaAFE3s7Wl81u9gPJD4AYgYO84wIEDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODIt
MjIxNDQ5MTE4MzA5LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODItMjIxNDQ5MTE4MzA5
LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIPBroYS
dd5kcmNJ8NmoBD7aePsSnHgumDnMsdTCQdzAOxrjs6PYX838sxRHXuXV0hKXguEs
SEWbbE4Z6f12wYoQQbtuTyXzZdeozYDvZ2tdgoJIlgO7qxD+H50bwNqW/bOj/tTm
Xmf3LrWHRHJOFMnGDmmnUTRQZAJMWP8mGMUKXRauGXJfG94OVuV8TI7NpFQUhgaL
pchmhvLOR8ihfdU0VsG5jlHraL5eTuOlzr+moDIk+TX0Dy04g478I8lvmkhrP6F5
gxgF5LpFY6xCzXIbZAuOe7XIP23Q4kPnT4Nle17TU8x7EWDFEyLnu2tJPEcancV3
H6dZS8/ZxJanMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:26 2025 by rpki-client