Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: 6cUuQWlPO199wwCMW2gtMKaqtkvDMkzm08ECCKxoEPo=
Subject key identifier: F3:4A:8B:80:AA:35:3E:47:BF:82:55:9F:7C:D6:7D:87:16:DC:9A:8B
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 0199FC8FBE26F2F0E571EAD3867633AB21E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 0680
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: D2L0BrL6VADI61X3XF9thbJeDjzMay6p6eSD/E1lm1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:be:26:f2:f0:e5:71:ea:d3:86:76:33:ab:21:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=f34a8b80aa353e47bf82559f7cd67d8716dc9a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:ee:33:c3:dd:90:e5:d5:b5:67:b3:f7:dc:
4b:f3:a1:f9:97:e4:43:26:21:73:c9:b3:f2:d1:9d:
81:08:ca:6f:ba:fa:19:e6:54:42:f7:8c:37:1d:f7:
28:7d:1d:44:5e:f8:87:89:71:0f:3b:0d:ee:81:b4:
ef:69:82:ed:ea:1d:96:9d:9c:bf:c6:47:4c:d7:1d:
b2:fb:99:c5:4f:30:b9:6b:b9:61:84:73:f7:6d:32:
9c:39:39:9e:34:81:dc:08:4d:8f:f4:80:06:a5:f3:
45:dd:96:f7:5f:d9:fb:6a:25:c6:57:17:ce:e5:ed:
49:95:58:bf:03:c8:24:79:1c:d8:6d:b4:2c:4a:2f:
bd:8f:1a:81:37:d1:71:38:8f:32:17:9b:ee:86:2f:
e8:1b:f8:87:96:a1:2a:3c:1c:ac:4a:b2:0b:17:72:
98:e8:71:af:18:23:f1:62:e9:f4:83:57:3f:63:3a:
36:4d:e8:dd:fa:8b:ac:ab:1a:35:d2:33:b2:b5:9c:
c0:78:2f:4d:9a:f6:03:27:85:4d:52:47:19:ff:b3:
20:fd:91:c7:3c:eb:2d:a9:9f:b2:ae:eb:55:86:f7:
7d:f8:e9:c6:ea:a4:6b:ed:b9:13:00:3a:f3:42:e5:
da:3a:49:d1:e2:cf:36:5e:a0:92:97:8a:33:9d:63:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4A:8B:80:AA:35:3E:47:BF:82:55:9F:7C:D6:7D:87:16:DC:9A:8B
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:55:cc:4c:16:06:83:5b:d3:ae:54:86:85:53:a4:2a:c1:
25:ba:9b:1e:28:85:1e:6c:c7:74:3c:ff:a2:f0:1a:d8:44:77:
c1:62:91:0b:1e:d8:2b:47:36:0a:e4:56:9c:08:e0:03:6c:a9:
82:bc:81:74:53:2d:4d:cd:5d:ad:15:82:1a:cb:c9:2a:3c:ed:
86:05:c4:3f:3d:cc:86:cd:95:23:5a:ae:d1:1a:99:97:d6:82:
b1:30:3f:a3:a3:b2:3f:15:19:1c:3d:9a:ba:23:01:d3:06:25:
cd:db:de:31:be:96:c3:86:94:69:eb:29:ef:56:97:c0:7c:11:
49:e2:1b:79:ad:1b:b0:72:51:39:4b:77:32:67:55:e4:8a:f2:
3b:28:c6:58:3b:25:42:72:7d:9d:b3:35:88:c9:64:4f:69:a0:
e4:74:30:67:19:d5:bb:1a:75:c8:2a:c0:7d:7d:44:bd:61:87:
4a:c6:ff:84:de:f6:02:73:87:26:46:e0:96:59:3a:99:07:96:
29:5d:b8:12:11:2a:ad:13:37:53:c0:a0:39:1f:fe:76:1b:8c:
da:62:e8:58:3f:f4:da:7a:fe:99:51:ad:b4:8b:c2:77:c9:d1:
52:9d:d9:46:5f:e1:36:d7:ff:d7:0d:bc:56:23:3e:65:a5:95:
03:74:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:48 2025 by rpki-client