Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: NbjfxslTLzgA7EjYH+jmDqZI042udsR0+qSx3OxE2Yo=
Subject key identifier: C5:BB:41:5B:9D:AD:10:14:0E:C1:B0:59:10:C4:33:8E:C9:10:87:02
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 0198D6CDB1FCBC028F5CAC15F5E600215D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 12:01:01 +0000
Manifest this update: Sat 23 Aug 2025 12:01:01 +0000
Manifest next update: Sun 24 Aug 2025 12:01:01 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: WegaoccCdOfJdXTPElO4MR197Bd2TJRtQ3zIs7XI3Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b1:fc:bc:02:8f:5c:ac:15:f5:e6:00:21:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Aug 23 12:01:01 2025 GMT
Not After : Aug 24 12:01:01 2025 GMT
Subject: CN=c5bb415b9dad10140ec1b05910c4338ec9108702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:29:38:e6:b8:76:43:38:11:1d:85:cf:86:
bb:12:cf:86:97:4c:cc:26:33:76:c5:42:c7:b3:92:
35:44:ad:b5:97:91:aa:80:f7:a7:27:65:c4:d8:c9:
fc:3a:ac:07:25:37:8e:76:3d:59:77:bb:a0:42:c1:
09:21:82:46:80:38:75:45:6d:3c:e2:65:c7:42:ed:
97:93:c2:f5:f8:1e:1d:6c:48:74:06:95:96:64:8b:
0d:dd:0d:6d:95:0a:a0:b1:6d:67:a8:7c:e7:ad:28:
b6:67:4f:d4:a6:c9:b4:33:2a:6e:73:db:42:00:17:
ff:f4:6e:f8:2a:88:01:25:96:11:5d:b5:b1:0e:17:
7a:58:58:78:4b:96:df:14:a0:7b:6b:4b:7c:2a:5d:
07:c7:49:7e:e1:32:91:70:f5:56:09:88:e2:64:e4:
df:08:06:c0:7d:63:c6:8f:fb:5d:1c:a2:d2:8c:e4:
99:41:03:5d:7d:95:e0:0c:90:6c:d6:8f:c4:a2:ed:
e3:f1:ed:97:7d:2e:9b:51:e0:93:67:f8:10:b9:3d:
69:ec:1d:03:1e:f6:32:84:4a:42:aa:8f:92:c2:d8:
df:fb:31:ef:36:d3:90:b2:41:c9:06:30:76:74:e0:
39:71:20:5d:ba:87:75:8a:4f:f9:66:cc:07:af:eb:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:41:5B:9D:AD:10:14:0E:C1:B0:59:10:C4:33:8E:C9:10:87:02
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d7:26:fe:13:63:2f:77:c0:f2:6e:04:a6:75:0c:de:de:86:
d5:62:df:db:e6:df:11:35:08:f5:4c:e1:84:74:e1:50:29:b0:
ce:c0:3b:0a:26:98:c1:ac:14:2c:aa:aa:89:70:10:00:db:00:
ba:6e:80:e0:1d:0b:01:c9:e4:fb:18:ad:1f:db:e6:1d:e3:ef:
02:30:d9:1a:82:72:21:78:24:d5:5e:9a:62:a3:e6:85:a1:b0:
42:85:57:39:e4:79:e4:5c:74:d2:94:48:3a:39:0e:96:6b:89:
88:a8:5e:29:40:6c:6d:d9:a7:72:1f:c7:e0:78:51:23:d4:1c:
74:4e:a5:d1:2a:95:b5:1e:a4:53:34:8b:78:3f:c5:bd:7b:9c:
cc:1e:d2:4d:87:ab:8e:5d:56:b0:33:dc:66:e7:77:3f:b7:02:
53:0f:52:9b:c0:1b:d1:59:ef:9b:b4:b0:83:e2:cd:2f:06:a4:
71:6a:c0:ac:cc:5d:4d:40:eb:7a:06:6c:ca:c1:62:1a:80:3a:
98:9c:43:a6:28:62:e4:db:80:d2:8a:bc:ad:0a:7f:cd:fc:6e:
3d:b8:ea:df:6a:ee:c0:75:13:c1:6d:f6:96:cf:12:d3:ed:b4:
54:9a:38:1a:43:e8:ea:1f:78:1d:30:ca:7e:01:65:84:89:21:
11:e0:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:35 2025 by rpki-client