Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: TRFGefr6c8/nN9f2Au6OODNc6K1yzVaA0Xirxh/b1oo=
Subject key identifier: AA:B3:A1:E9:2E:4D:4E:E9:B9:D4:B5:24:E7:27:6D:63:00:E2:A9:3E
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 0199FDD8D38CBB321C90AE8395CE83553775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 082A
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=)
2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: 7Bzh6NF6fQ40cg9JITxudrZt0ICSK+7YZ9WpIHAkiJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d3:8c:bb:32:1c:90:ae:83:95:ce:83:55:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=aab3a1e92e4d4ee9b9d4b524e7276d6300e2a93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:47:f6:16:57:09:a3:49:47:21:00:a3:79:
5d:06:98:65:b6:20:1c:25:81:68:c5:9f:9a:1f:3c:
30:61:65:f2:3e:6a:7e:3f:27:4f:85:db:c4:a4:06:
08:e6:23:db:0f:17:8a:36:3e:81:35:a1:95:0f:6c:
44:04:29:c3:70:9e:52:31:a6:8c:54:a8:a4:84:fb:
99:d6:28:f8:84:ca:fa:2f:1d:93:7b:eb:4d:ae:87:
4d:cc:48:e3:8c:f5:8f:6f:7a:7f:e8:b2:da:6a:c0:
58:99:a1:35:db:c3:a7:dd:a7:e5:e4:3c:4b:86:ca:
c7:bc:52:61:55:e9:ba:f1:a3:2c:8d:6d:63:6a:88:
bb:84:d0:95:05:9c:0c:bb:1b:f6:6f:b1:90:df:1e:
f3:9d:18:b1:a0:d2:87:10:e1:b3:52:a8:35:b8:b5:
6d:94:f0:42:73:d1:9f:29:43:07:a0:69:b8:b7:ea:
78:bf:bf:2f:0e:7e:38:14:a7:9f:bb:58:11:d2:8b:
4e:a5:92:f5:44:1c:fd:18:38:22:01:41:f4:2a:c8:
21:59:e1:ad:6d:43:55:ae:3e:98:6e:00:63:7b:90:
db:52:83:49:d2:21:b6:10:55:f3:3d:bf:3c:64:e8:
b5:89:58:85:93:00:ac:bb:c9:b1:74:d9:e2:ea:01:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:A1:E9:2E:4D:4E:E9:B9:D4:B5:24:E7:27:6D:63:00:E2:A9:3E
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:fd:c7:90:5d:80:1b:3d:48:fd:9d:1e:bf:ce:9f:2e:1b:
37:5a:cd:cf:66:e1:c7:ac:99:c3:dd:bc:2e:71:e1:7e:1e:e0:
c2:c7:05:71:04:2e:bb:44:39:8c:16:24:30:4f:bf:d3:92:c8:
22:e9:4c:a4:f9:19:0c:24:28:f0:62:05:8c:12:4e:c2:0a:22:
57:34:25:a0:bd:4a:bb:c4:8b:a4:a9:85:3f:6e:73:a6:1a:0d:
84:b6:b4:3d:0e:d5:14:7b:00:e7:19:c4:9c:8d:b3:1c:f7:3d:
34:6b:48:d3:2c:ef:65:2e:0d:44:94:e2:1d:1a:e4:ab:ac:56:
e4:4a:cf:73:91:30:61:9c:65:d3:ad:d5:52:80:c6:42:73:a8:
f0:1d:e9:ab:a3:5d:11:2c:70:cd:68:df:d0:77:cd:01:93:bd:
e7:33:22:93:dc:32:10:a2:af:a3:8b:3c:58:21:23:b6:97:27:
2a:51:09:83:de:34:81:a6:ff:71:49:f8:95:96:53:1c:03:c0:
c5:7f:20:0b:7b:72:21:b7:fc:3d:db:a0:cc:c5:03:c1:89:dc:
57:e5:2a:0c:fe:03:10:2c:30:58:c2:fb:98:2b:b5:69:65:a2:
cd:a7:b1:79:a3:8c:0b:0e:91:8f:05:3c:1d:da:12:f6:fb:bc:
5f:10:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:57 2025 by rpki-client