Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: iyFmfHdK1PfVT1Zg09ZT+XDY2y6E13AyzVMEQhrV454=
Subject key identifier: D9:37:6F:05:60:1F:2F:44:DB:0A:30:07:73:69:F6:CB:51:25:53:B5
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 0199FC21448570D66E1421727DB370B9FFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (hash: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=)
2: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: wo+dPVkSiC8qAZflSJLTjUwZO7rWYYq8BXgGO2hM1F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:44:85:70:d6:6e:14:21:72:7d:b3:70:b9:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=d9376f05601f2f44db0a30077369f6cb512553b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:42:91:f8:d8:17:66:84:35:c7:55:75:bf:
8a:25:ed:5f:21:98:20:d7:51:64:bd:9e:17:0a:90:
4e:5b:d3:f1:2e:b2:22:cf:fa:8d:df:7c:95:73:1a:
85:7c:37:e8:cf:46:b3:15:57:62:45:47:42:01:6b:
87:92:95:44:f0:f4:7e:16:49:4a:73:6c:4f:c3:00:
8e:2c:00:40:b9:94:0e:b1:a8:b6:54:b4:92:6d:34:
6f:3f:32:83:c4:2a:a4:a0:5a:ec:63:fa:ac:4e:d5:
80:a1:3f:0f:c3:9e:3f:37:66:50:14:1d:70:11:67:
a1:da:3e:94:fc:4a:56:83:bd:c5:8d:62:5c:07:11:
96:8a:71:46:9b:81:bb:f5:8f:75:69:10:56:21:73:
79:3d:88:67:9e:e6:91:1d:38:3e:28:56:e6:23:e5:
fc:46:92:85:b3:bf:18:a4:a3:74:96:ef:a3:7f:3a:
e1:ea:2e:c1:4d:61:90:83:3b:f4:2a:37:d8:26:c4:
eb:88:b9:d9:2a:f8:cd:7e:41:98:ab:4e:22:d7:0c:
a8:ba:61:ba:ce:de:36:39:20:9b:24:ee:bd:92:49:
fd:69:c8:40:79:60:c1:d1:e9:c3:f0:87:5d:48:de:
08:dd:e8:cc:9c:a1:7c:f5:0f:d7:0e:89:d4:d1:d0:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:6F:05:60:1F:2F:44:DB:0A:30:07:73:69:F6:CB:51:25:53:B5
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:ab:c1:6d:b9:b5:d9:66:4c:6f:90:15:4c:df:ac:d7:07:
8c:06:62:4b:b1:93:47:b3:0a:08:ca:fa:92:27:b1:b7:1d:9c:
c4:fc:46:ab:ea:66:45:99:2d:20:9a:d0:99:9f:87:8a:f4:a1:
f0:7b:d9:ce:67:46:d5:29:fa:79:cf:a7:e4:28:fe:bc:7d:37:
2c:9d:17:90:e6:5e:8c:40:e4:5c:94:24:33:8d:29:c7:8e:e4:
00:36:a6:1a:24:22:f5:e3:78:96:d2:cd:25:a2:3c:d6:d7:ce:
ce:1f:5b:aa:61:3e:01:73:ef:0f:8a:83:b1:bf:c4:48:74:9e:
96:25:64:5a:39:b4:71:ce:aa:61:ea:be:85:66:6d:04:d3:9f:
64:b7:00:00:fa:50:03:68:b3:a2:8f:52:22:f3:7a:eb:54:f2:
44:2e:97:3e:b1:a6:bd:aa:e1:be:69:42:66:95:79:40:cb:22:
53:66:d2:0c:61:5e:55:0c:e8:bd:83:d8:e7:e4:bf:86:5d:64:
91:b5:bd:90:ae:5c:ba:94:ce:81:4c:13:f9:aa:b5:3a:06:86:
58:ab:3d:b8:12:85:1a:e3:96:9e:f6:e1:b4:42:a1:c4:52:4a:
d1:df:66:49:a6:c1:8c:fd:74:31:b6:a6:7d:d5:f1:68:67:40:
f9:14:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:34 2025 by rpki-client