Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: ggyQAUQQn5FRCRTPj/XgTDVxVYqcVF+2TMnRkqAuDk0=
Subject key identifier: B4:D6:7A:87:CC:A9:C4:30:92:64:EC:F0:6D:3E:CF:2C:4F:CC:D6:00
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 0199FD6B50F3BAC10C31E1E1E3A9BD744ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: 3mv2exDKFzG3c1egyb4IEWS93c7O/Y4RjjTss7vaHhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:50:f3:ba:c1:0c:31:e1:e1:e3:a9:bd:74:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=b4d67a87cca9c4309264ecf06d3ecf2c4fccd600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:30:db:ca:8a:05:71:ec:7c:ef:02:e6:bc:
ee:ba:58:fd:78:c4:53:ba:dd:ae:89:95:32:fd:33:
d8:2c:b7:c7:bd:00:d4:1d:fb:ed:5e:58:40:f7:c7:
70:33:f4:f6:59:bc:ac:0a:d7:56:2e:f5:37:a1:d2:
d8:07:d5:94:ec:c7:a2:79:f3:5e:e0:2c:41:b4:93:
a8:d5:dd:c5:45:b4:77:ba:e1:27:ce:c5:66:fe:b6:
37:74:27:24:2c:cc:cc:0f:33:97:31:3d:dc:fa:79:
05:c8:dc:80:42:8b:25:2d:db:e7:20:6a:17:a3:20:
c2:90:72:3b:c7:4f:07:be:a9:08:ac:b1:65:f6:4f:
56:5c:83:7b:b5:e2:1f:e0:ec:91:fa:b4:49:e4:b9:
e6:b9:8c:62:d8:93:98:d1:c0:5c:82:d5:ea:76:90:
57:50:16:6e:72:70:0b:21:4c:77:d4:ba:f2:5b:4e:
b8:f2:a8:87:6a:cf:f9:16:c9:38:68:e5:54:05:bc:
29:89:1b:a2:49:bd:f5:62:d7:ec:6d:72:52:73:21:
e8:44:d8:f8:63:06:5f:30:5b:38:b9:fb:20:f8:86:
ce:bb:39:b3:a3:c5:b1:08:f6:bd:c8:61:b8:b3:47:
7c:5d:b2:8c:75:86:37:d6:6e:9a:84:3d:cb:3f:fa:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:7A:87:CC:A9:C4:30:92:64:EC:F0:6D:3E:CF:2C:4F:CC:D6:00
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1d:a0:76:f0:8a:5d:c2:58:52:cd:ac:91:c7:97:77:64:24:
b0:28:03:e5:84:7b:bc:1a:0d:61:5e:8a:ab:0d:76:2e:15:6b:
d7:98:c6:48:01:11:9f:0c:ef:42:76:dc:24:0b:9f:a3:46:6e:
e2:cb:74:0b:22:b2:1f:97:dc:ad:1d:61:0e:9c:94:fc:bf:88:
9b:71:3b:58:4d:d4:87:21:be:a7:0e:38:18:d8:05:6c:58:b5:
c8:01:02:02:6f:25:7d:63:ec:8a:44:a4:01:30:32:c5:80:6b:
c3:96:ca:6c:85:a3:ee:40:41:c4:4a:0f:03:e9:9a:75:77:ca:
c4:a1:34:93:33:81:58:53:4c:3a:5f:8c:e3:44:c3:52:d2:7c:
d8:ff:4a:81:b3:d8:dc:b4:0a:44:4c:25:0d:e7:df:f9:45:77:
b2:57:c2:ac:cf:44:96:a0:89:89:07:86:0b:52:32:55:9d:ac:
e0:e5:c8:87:7f:43:04:eb:9c:bf:99:ee:a2:f6:48:57:5d:f4:
e2:09:c3:55:6a:14:bb:c4:85:26:87:4d:de:05:97:56:ff:46:
bc:32:0c:0b:b1:66:21:78:f9:44:4c:9d:d8:c3:5b:af:3e:53:
cb:d0:64:7e:64:a1:4d:63:50:82:da:c0:68:df:ce:27:b1:d3:
9e:df:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:07 2025 by rpki-client