Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: ioDaqrFZBftzw0CdlMyctOQfO8Nv/yDoBDZ47wp60n0=
Subject key identifier: D3:27:FA:61:13:7C:BE:92:C9:F5:AB:5F:15:8F:9D:6C:16:75:C9:06
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 0198D6982F064E189F7E6D4B2C55BC23EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: QPpHeZgfLykWOZjOwzH+IRxw3hc3zrl6Rk+4NvuBW5o=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2f:06:4e:18:9f:7e:6d:4b:2c:55:bc:23:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=d327fa61137cbe92c9f5ab5f158f9d6c1675c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:f4:8c:18:26:d6:b8:65:63:42:27:cd:13:
5e:57:63:6c:88:22:37:13:6e:d4:bb:02:dc:26:58:
f1:83:71:82:da:83:5e:6d:60:7f:2f:9c:f7:10:4f:
64:ff:08:11:3a:4b:f4:d9:e0:73:ea:60:d4:63:77:
9b:4f:46:aa:98:2d:3f:82:60:97:57:86:ce:26:d7:
b9:19:d4:36:b2:7a:a6:e5:4a:8b:f3:69:39:c9:42:
48:4f:ca:ab:06:f8:d0:16:ba:fd:0f:3a:0f:19:e5:
e3:0c:b7:c0:b4:7b:fe:42:9e:be:33:55:0f:72:17:
9f:29:c3:f6:3d:02:11:21:eb:b2:2f:f8:f0:b5:ea:
b3:86:1d:d0:6e:7e:d0:ac:dc:b3:50:2e:2a:e9:dd:
24:06:6e:df:b6:d9:1b:d2:47:10:14:62:2e:0b:ee:
db:c1:f9:ea:6e:79:22:2d:2a:ed:66:86:4c:ec:54:
94:5f:e6:7c:35:38:1c:7a:f4:d2:2d:9a:3f:0d:04:
91:99:e6:ee:7e:e1:9f:a9:39:ad:51:b8:9b:b8:37:
13:8f:7e:bd:32:38:b1:0d:42:21:34:7c:d0:9d:98:
44:1d:7b:f9:24:8c:86:55:59:68:f3:05:5a:c5:f0:
05:28:fe:07:f8:64:06:1b:83:de:de:3b:8b:ec:e2:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:27:FA:61:13:7C:BE:92:C9:F5:AB:5F:15:8F:9D:6C:16:75:C9:06
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2b:c6:4b:0d:22:67:62:ca:3d:81:68:5e:b0:90:40:f4:28:
7c:71:e6:cb:5d:94:31:5e:8b:79:a5:fc:ca:ab:8f:72:1b:24:
3e:a8:a0:9a:c6:37:53:8d:54:d8:9e:3a:3e:4f:67:94:26:1c:
b4:2f:d6:93:8e:f8:7c:f1:4b:d0:c7:c9:3c:fe:84:f6:fb:3b:
64:e5:7e:89:96:06:d4:f6:4a:53:63:a6:bc:3f:4d:d5:a5:a5:
50:89:b9:bd:5e:55:ba:e9:8b:9e:01:98:aa:09:35:43:58:2a:
ba:18:2d:14:79:11:fd:a3:24:60:af:77:80:e3:10:e7:4f:c4:
cf:b2:9d:cd:4f:29:08:f3:03:bf:1f:8e:cd:2f:6a:b1:d5:24:
9a:eb:16:d8:21:a1:2e:56:cb:53:d2:4f:55:17:9d:0a:02:77:
2c:7b:38:4c:72:95:6b:1e:66:41:6b:98:01:6a:9e:73:7a:4d:
ae:b8:88:d9:fe:52:b0:e2:69:bc:8e:e2:1f:c2:ab:a8:d8:6e:
19:ad:19:a3:7f:1a:65:44:49:e3:60:bc:e3:93:e8:b7:10:36:
56:a9:de:54:64:f9:6a:19:69:15:af:f7:c4:3f:92:31:9c:09:
1e:b9:00:c6:8f:b8:d0:3e:6b:97:f0:6b:7f:6c:4c:1c:95:b0:
ad:63:63:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmC8GThiffm1LLFW8I+4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUwODIzMTEwMjM0WhcNMjUwODI0MTEwMjM0WjAzMTEwLwYDVQQD
EyhkMzI3ZmE2MTEzN2NiZTkyYzlmNWFiNWYxNThmOWQ2YzE2NzVjOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm70jBgm1rhlY0InzRNeV2NsiCI3
E27UuwLcJljxg3GC2oNebWB/L5z3EE9k/wgROkv02eBz6mDUY3ebT0aqmC0/gmCX
V4bOJte5GdQ2snqm5UqL82k5yUJIT8qrBvjQFrr9DzoPGeXjDLfAtHv+Qp6+M1UP
chefKcP2PQIRIeuyL/jwteqzhh3Qbn7QrNyzUC4q6d0kBm7fttkb0kcQFGIuC+7b
wfnqbnkiLSrtZoZM7FSUX+Z8NTgcevTSLZo/DQSRmebufuGfqTmtUbibuDcTj369
MjixDUIhNHzQnZhEHXv5JIyGVVlo8wVaxfAFKP4H+GQGG4Pe3juL7OIBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMn+mETfL6SyfWrXxWPnWwWdckGMB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyvGSw0i
Z2LKPYFoXrCQQPQofHHmy12UMV6LeaX8yquPchskPqigmsY3U41U2J46Pk9nlCYc
tC/Wk474fPFL0MfJPP6E9vs7ZOV+iZYG1PZKU2OmvD9N1aWlUIm5vV5VuumLngGY
qgk1Q1gquhgtFHkR/aMkYK93gOMQ50/Ez7KdzU8pCPMDvx+OzS9qsdUkmusW2CGh
LlbLU9JPVRedCgJ3LHs4THKVax5mQWuYAWqec3pNrriI2f5SsOJpvI7iH8KrqNhu
Ga0Zo38aZURJ42C845PotxA2VqneVGT5ahlpFa/3xD+SMZwJHrkAxo+40D5rl/Br
f2xMHJWwrWNjwA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:10 2025 by rpki-client