Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: At+awQDaym/q7fXsvZXpqIeLa3J9e+FyNawWS/v/C/k=
Subject key identifier: E1:98:65:AA:B5:88:63:FE:EF:22:BE:99:A1:0A:5B:B3:14:27:3F:3F
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 019A01B4E2E31D7204D72A6FB279C17967DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 1117
Signing time: Mon 20 Oct 2025 13:00:23 +0000
Manifest this update: Mon 20 Oct 2025 13:00:23 +0000
Manifest next update: Tue 21 Oct 2025 13:00:23 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: 8qCdABlhc6IISK62zIvB6D2025NMA14RwKRYTIGTE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:e2:e3:1d:72:04:d7:2a:6f:b2:79:c1:79:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Oct 20 13:00:23 2025 GMT
Not After : Oct 21 13:00:23 2025 GMT
Subject: CN=e19865aab58863feef22be99a10a5bb314273f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:d9:43:8b:ca:2f:10:5f:8d:2d:7e:28:54:
a9:3b:1a:58:81:c3:ea:dd:d2:8c:b9:0e:2a:19:ef:
6c:02:96:a0:a8:81:96:64:df:b8:93:7b:5f:2c:af:
27:a2:18:7f:2b:1b:73:95:1b:76:b2:21:0c:de:83:
83:f1:c4:d9:65:14:90:30:4d:54:f7:b4:4b:a9:30:
02:ff:51:0d:3e:22:a1:d1:a9:60:cf:c7:72:68:4d:
01:0a:6f:e0:f8:87:ac:07:d1:a0:1c:8d:af:ed:a3:
f9:d0:2e:23:42:e0:6a:91:50:49:62:54:4f:db:a0:
36:53:cf:04:61:15:c3:d6:02:a5:b4:9a:82:eb:40:
ee:49:00:63:f1:f4:c1:e5:35:63:66:fa:c8:86:7a:
99:6f:82:95:ff:24:8e:d5:4e:4b:9e:14:a7:99:e1:
6e:cd:3b:ea:c9:d7:41:26:31:6c:e9:39:73:aa:7c:
e9:ce:6c:49:99:6c:01:c9:90:fe:ed:d6:23:fd:31:
21:ec:cf:c0:80:59:6b:e0:18:ab:38:46:d7:ff:06:
5b:e9:32:5b:18:a8:5f:50:6a:52:09:44:63:a4:b5:
ad:fc:7d:20:c1:5a:27:67:7c:3c:c5:a0:36:06:1e:
18:69:41:e2:a2:79:95:95:f0:49:fa:a8:28:90:48:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:98:65:AA:B5:88:63:FE:EF:22:BE:99:A1:0A:5B:B3:14:27:3F:3F
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:30:b2:4a:03:fe:2c:cf:1f:db:8d:1f:e8:8e:87:67:9c:
53:91:fe:43:c7:1d:5b:1b:b6:38:93:b7:cf:dd:9b:db:a1:3f:
ae:7f:3c:dc:40:b2:11:13:2e:f0:28:f3:a6:8b:d1:c1:15:be:
88:7e:73:b3:b5:7c:df:a6:88:e4:74:96:e0:bf:e5:7a:76:38:
83:4e:74:c4:2c:97:b9:f8:7b:ca:48:3d:a4:ad:68:1a:aa:d8:
cb:9f:98:33:af:77:71:cc:88:33:55:47:e9:75:a1:ed:70:21:
70:21:1a:9c:ff:79:3d:63:dd:82:e9:73:45:7f:06:bd:f1:a3:
19:e1:7a:e8:c7:72:4d:cf:ec:c0:0f:99:4f:df:39:c6:1f:64:
f2:94:94:75:93:f7:b8:a7:35:4c:b8:c7:b7:6b:7f:d0:80:60:
82:8a:ff:8a:e1:45:60:db:3f:5d:61:ea:7b:f2:7b:e7:39:8d:
42:d9:c3:a3:c6:75:6a:01:67:d6:74:c6:08:12:39:d8:b3:08:
b5:fc:f1:59:21:6a:de:c9:28:d4:f5:f4:a9:8a:27:03:eb:91:
96:fc:12:f3:56:88:85:de:48:f5:81:a5:4c:59:c9:cf:be:88:
54:14:74:7c:44:7b:05:cb:be:64:0e:95:48:c2:f7:f1:4f:56:
f6:0c:ef:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtOLjHXIE1ypvsnnBeWfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGRmYzdiYTRkZWMyNjU5NmRjOGFjMjMwNWE5MWVkOGU5
MjljNjkwHhcNMjUxMDIwMTMwMDIzWhcNMjUxMDIxMTMwMDIzWjAzMTEwLwYDVQQD
EyhlMTk4NjVhYWI1ODg2M2ZlZWYyMmJlOTlhMTBhNWJiMzE0MjczZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt7ZQ4vKLxBfjS1+KFSpOxpYgcPq
3dKMuQ4qGe9sApagqIGWZN+4k3tfLK8nohh/KxtzlRt2siEM3oOD8cTZZRSQME1U
97RLqTAC/1ENPiKh0algz8dyaE0BCm/g+IesB9GgHI2v7aP50C4jQuBqkVBJYlRP
26A2U88EYRXD1gKltJqC60DuSQBj8fTB5TVjZvrIhnqZb4KV/ySO1U5LnhSnmeFu
zTvqyddBJjFs6TlzqnzpzmxJmWwByZD+7dYj/TEh7M/AgFlr4BirOEbX/wZb6TJb
GKhfUGpSCURjpLWt/H0gwVonZ3w8xaA2Bh4YaUHionmVlfBJ+qgokEjQIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGYZaq1iGP+7yK+maEKW7MUJz8/MB8GA1UdIwQY
MBaAFExN/Huk3sJlltyKwjBake2OkpxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMt
YjI5ZWZmMDkxYmM2LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMtYjI5ZWZmMDkxYmM2
LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirEwskoD
/izPH9uNH+iOh2ecU5H+Q8cdWxu2OJO3z92b26E/rn883ECyERMu8CjzpovRwRW+
iH5zs7V836aI5HSW4L/lenY4g050xCyXufh7ykg9pK1oGqrYy5+YM693ccyIM1VH
6XWh7XAhcCEanP95PWPdgulzRX8GvfGjGeF66MdyTc/swA+ZT985xh9k8pSUdZP3
uKc1TLjHt2t/0IBggor/iuFFYNs/XWHqe/J75zmNQtnDo8Z1agFn1nTGCBI52LMI
tfzxWSFq3sko1PX0qYonA+uRlvwS81aIhd5I9YGlTFnJz76IVBR0fER7Bcu+ZA6V
SML38U9W9gzvxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:12:13 2025 by rpki-client