Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: Vn8ws7RiDIs1aVZNW0bJ8gSS0fUFXtWVykz540RiRTk=
Subject key identifier: E0:F8:1A:CA:03:63:C9:66:00:BC:39:52:C9:D7:C3:5A:82:DA:E5:D3
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 0199FC219295821B1076751A0E2FA8543B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: xJZ3lIa1ol/MP3PpgrfUP/Bwk2mrjJUF033MM2URNKQ=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:95:82:1b:10:76:75:1a:0e:2f:a8:54:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=e0f81aca0363c96600bc3952c9d7c35a82dae5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:b1:23:1c:e2:04:0e:24:75:06:fe:f3:9f:
bb:73:34:d4:91:53:29:38:e4:fb:51:d5:d7:ff:c7:
c9:94:3b:65:77:9f:da:84:ca:70:2e:aa:45:d7:17:
3b:fb:71:b4:13:30:f6:00:fa:25:6f:27:96:e8:8c:
af:bc:70:9a:ef:84:77:03:94:f0:4f:7d:67:fe:90:
4b:be:db:12:2d:15:77:1d:4b:56:6d:6d:15:e7:86:
36:b0:34:91:c4:f6:3d:8b:1f:b0:24:c7:fd:28:b4:
a5:ff:1e:98:62:b9:46:63:4b:99:a9:ba:63:ed:49:
c7:77:06:b6:5e:c9:9d:38:28:14:15:a3:00:d6:05:
9c:2d:cf:de:3c:ef:23:3a:c2:b1:51:44:61:f0:59:
ed:b6:ff:e4:2c:4f:69:47:52:36:92:46:da:10:06:
9a:b3:8b:47:de:2b:b0:e4:0a:49:e6:e7:5a:d5:6a:
60:89:63:11:bc:34:73:54:ae:2a:61:35:62:f4:ca:
e9:50:5d:3c:a3:c4:eb:fa:a2:d2:10:82:61:81:e8:
63:2b:c9:46:4b:3f:5d:c2:a2:18:ed:b1:32:77:2d:
fd:1b:70:15:ba:ff:5b:b4:e1:02:a0:ea:63:bd:15:
56:bb:ed:88:db:a4:5e:54:82:5b:44:35:1e:d4:b8:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:1A:CA:03:63:C9:66:00:BC:39:52:C9:D7:C3:5A:82:DA:E5:D3
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:90:12:b6:0f:5a:65:3c:38:74:c7:fb:22:be:92:a5:05:
81:7a:6b:37:f0:5a:38:04:11:72:cd:46:7d:c5:37:24:f0:90:
75:f5:e6:5c:cc:da:4b:c4:ba:86:ca:fc:2c:da:a2:6d:ff:fe:
99:79:c2:ec:5b:2f:f2:0e:cc:5f:fa:50:37:9d:aa:56:c2:e7:
6e:f2:dc:33:a7:5a:40:f9:0f:1e:8b:4b:6b:f6:35:bf:e7:14:
1f:89:0f:ce:99:0d:d5:fb:60:1e:06:9f:0d:dc:ab:8c:b6:f6:
f3:c5:a9:33:60:85:6f:af:ff:ee:63:b0:d6:74:1e:1d:2d:8d:
2b:17:de:23:21:fd:66:09:9c:70:3c:0e:42:52:d2:80:15:b3:
c1:9b:ff:92:d3:9d:f2:ec:62:a5:c1:27:e3:2c:62:5c:93:59:
0e:e2:ac:a3:eb:a2:11:43:6b:13:23:92:cb:14:06:b6:31:2a:
e7:22:4a:04:5a:4e:dc:8f:66:a9:4e:56:a4:53:a7:e5:be:b1:
07:d6:05:29:f1:de:3e:78:2b:ca:d2:94:40:72:e5:cc:8b:e5:
4f:6b:c3:b7:4e:37:05:e2:5e:af:06:16:48:ba:25:21:3e:ee:
eb:5d:ee:4a:fe:83:03:a8:e5:35:c9:c4:03:87:ff:5f:66:08:
56:50:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:30 2025 by rpki-client