Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: TyeB+qUqWNw+QkoUNwA5b4JIb8UQm09rB9F9z/5f6VA=
Subject key identifier: CD:22:97:F4:FE:7E:7A:3A:FC:78:D0:31:31:03:DC:09:65:DB:09:A0
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0199FC58A62469FFA1CBAFDC6432563F04EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 15DF
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: VJB/RAeoPEx/l+MTJhIOtF609mE7h2SMjtndoQRwhMQ=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a6:24:69:ff:a1:cb:af:dc:64:32:56:3f:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=cd2297f4fe7e7a3afc78d0313103dc0965db09a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:ed:57:9d:a9:73:98:d2:25:7a:55:34:e0:
22:66:63:14:24:02:60:00:f9:00:06:4d:05:e0:bc:
82:ba:94:4b:c0:6b:37:53:42:5f:2b:6b:b6:30:d9:
4f:75:94:a4:23:a5:6a:cb:5e:09:51:7f:97:ab:de:
27:11:58:98:83:0b:01:c2:3c:3e:77:e7:58:ab:7b:
59:52:00:7e:4c:b2:a4:4d:06:b3:7e:f2:85:c9:fd:
87:a9:53:d6:5c:17:8c:b6:0a:4b:20:c9:94:e4:de:
39:22:fa:a4:5a:81:4e:d3:f5:f8:5d:04:1e:4e:6a:
01:1f:da:22:7d:b5:e3:ed:fc:d5:8d:8d:7a:94:f8:
9f:5b:66:92:cc:68:f2:9e:d5:a7:34:d5:3f:55:af:
f1:f1:72:e0:40:9c:43:cb:a5:04:d4:4e:b1:30:b0:
6b:ba:37:7c:fb:ed:97:c3:1a:ef:14:8e:11:fa:fa:
0f:61:46:95:72:5e:68:f1:21:f5:a1:8f:85:7a:e9:
86:41:49:fc:84:15:b6:f4:27:4f:68:2a:af:aa:96:
22:e4:af:84:e6:7f:96:26:74:e1:14:a0:47:4c:c9:
7f:e1:13:61:94:6d:31:17:27:49:83:65:72:c3:19:
13:1d:01:14:d2:0e:6c:f5:bd:95:e7:d2:0a:d5:80:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:97:F4:FE:7E:7A:3A:FC:78:D0:31:31:03:DC:09:65:DB:09:A0
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:3d:9b:c1:e3:5e:97:06:7e:a3:33:4e:75:f9:a6:a2:8f:
f5:78:04:68:fc:b9:dc:3d:c9:1d:94:2c:6f:b0:c1:be:e0:71:
a5:11:cc:03:d5:10:88:21:b8:76:0b:5a:e3:d1:05:3e:b5:f7:
f9:a4:93:59:fd:50:91:5b:c7:4b:b3:d0:88:03:0a:92:07:bc:
86:b7:54:52:e7:1d:45:62:0d:4a:e4:48:00:bf:d9:a3:cc:f8:
74:4e:f7:74:97:2d:a0:a4:2b:6e:5c:b2:5d:f8:ce:8e:19:24:
1e:36:8a:72:c8:ba:1a:e3:8d:3c:0a:64:dc:bc:0b:75:e2:e0:
c5:15:02:85:46:ca:65:f7:71:8f:c0:7a:98:2f:80:9e:04:38:
16:f7:8b:70:f5:80:3a:19:ab:67:f7:fb:1d:be:1f:e1:3d:bd:
9f:53:0c:f6:24:41:73:a1:26:3d:5e:f8:03:94:7f:87:a9:0c:
d2:95:90:dd:a5:05:06:e1:24:45:ec:9c:f0:5a:a9:30:ca:0e:
37:94:4c:ef:4e:83:94:56:cd:90:86:c1:59:9a:2d:cc:4c:5e:
d5:75:dd:e0:ab:61:d3:4b:1d:b4:3f:72:bf:0c:ee:00:c4:37:
68:4d:07:cf:f7:3c:a1:43:f3:77:c3:e9:00:b6:77:8f:a9:81:
02:fa:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:07 2025 by rpki-client