Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: L+yjgecjwhWy7ni1TEr43rZ3DMHMq+SaI1eh3g6q3IQ=
Subject key identifier: 59:4E:B1:12:3B:49:5B:EB:3A:EC:DE:B9:88:40:E5:E3:50:EF:83:C9
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 0198D5F1D58E374A55131A3C43F4648F6A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: gaWKnin2FrqqDOO3TBiLKKLg/nnJvWlnS1GUJcxlQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d5:8e:37:4a:55:13:1a:3c:43:f4:64:8f:6a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=594eb1123b495beb3aecdeb98840e5e350ef83c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:1b:d7:50:53:6c:60:1f:61:a9:73:2b:64:
90:b5:7f:2e:35:80:b8:19:f0:c2:5a:0c:14:b2:81:
bb:2f:32:f5:36:29:9d:5c:f0:82:45:1d:e3:bc:9c:
8b:26:aa:8e:44:2a:06:5a:09:4c:23:8f:46:87:f0:
51:51:80:66:10:ec:80:a9:d4:74:2c:ab:93:bc:b9:
33:5e:06:50:08:c2:2d:3d:f9:db:4d:59:e2:a4:00:
e6:4a:a9:96:6f:9f:cb:63:d3:38:9d:cf:7d:24:18:
6a:70:d0:3e:9b:d6:40:2c:23:88:70:0b:0b:35:03:
08:7b:aa:37:84:c3:0c:0c:f0:97:ba:95:6d:48:ef:
fb:14:f5:bd:1b:39:04:91:9f:85:3c:ca:a8:11:e5:
1f:62:4e:7a:c9:b6:59:3f:10:01:73:bd:a0:f9:3b:
79:77:e9:37:cd:b7:d4:14:21:07:5a:ce:f7:45:74:
4c:fe:7a:b6:91:ef:38:10:39:d6:31:9d:6b:56:12:
bc:46:53:70:e3:7e:4c:e0:6d:65:fc:2a:e9:db:e8:
61:2f:36:c3:40:95:b0:f9:f9:85:cb:7c:bc:27:f8:
27:de:2e:5e:1e:72:ac:c6:09:7b:bd:e4:65:5d:bd:
9b:34:da:96:30:71:03:13:2d:09:d6:97:87:12:57:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4E:B1:12:3B:49:5B:EB:3A:EC:DE:B9:88:40:E5:E3:50:EF:83:C9
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:50:aa:89:d3:09:3c:3e:c7:14:ac:29:26:94:00:5e:45:
fd:ed:c4:a0:40:93:90:b1:6a:c0:f0:4a:5b:95:1a:b2:89:86:
7e:a9:f5:04:7f:56:35:f4:7b:c2:a2:01:fe:24:d0:33:0c:48:
93:d0:84:c4:12:37:b0:93:5e:b7:57:0a:91:04:40:ea:ed:d4:
d4:e8:c4:4a:6d:02:ee:d8:92:34:2a:40:5d:45:7a:7a:52:d6:
10:94:b5:2d:ee:2e:f1:35:4d:bb:a3:28:ad:2a:8e:eb:97:27:
a3:bc:cb:7f:d6:bc:ac:d0:7c:02:b2:57:22:50:4e:f0:de:14:
7d:78:73:26:69:eb:a0:be:e2:be:f8:25:98:91:b9:88:75:e9:
8f:7a:b0:5c:b2:98:d5:76:98:44:71:3e:53:b6:cc:bb:b0:34:
f8:66:08:cc:6a:a4:09:e7:c9:ce:da:2e:83:97:43:de:45:66:
85:e2:5e:7a:d5:c3:57:51:a0:88:b0:ef:ca:d9:64:f1:9e:a1:
fa:d3:46:29:32:9d:1c:3c:ee:e3:91:83:b8:62:7a:bd:4f:93:
d6:fa:5f:b9:6f:b3:b0:0e:c9:ff:39:b6:24:29:21:d8:31:5f:
c5:c2:f8:14:91:14:9d:f6:8c:6a:21:d3:60:07:4f:fc:0c:76:
c5:ea:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:34 2025 by rpki-client