Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: m6/buo+tNZ+FAiWW3Dhnk5WGQ8fWvt2ijBeTnDq4SRs=
Subject key identifier: E9:71:76:B4:7C:C6:D3:26:4A:B6:CD:B4:54:FD:D9:97:E6:7C:1B:04
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 0199FE7DBEE057C185E8C3D753DB40DFFA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:17 +0000
Manifest this update: Sun 19 Oct 2025 22:01:17 +0000
Manifest next update: Mon 20 Oct 2025 22:01:17 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: T8joga6pS8ZGdvBn9JdU8rhxC6E2oJO3DeEBruKet1I=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:be:e0:57:c1:85:e8:c3:d7:53:db:40:df:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Oct 19 22:01:17 2025 GMT
Not After : Oct 20 22:01:17 2025 GMT
Subject: CN=e97176b47cc6d3264ab6cdb454fdd997e67c1b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:2c:52:a9:ee:a8:88:25:be:06:09:48:d0:
da:28:1b:ca:d7:be:12:d7:5c:b5:7d:7e:b7:bb:e0:
b7:02:fd:e4:bc:55:d7:4b:01:91:0e:76:d3:77:a3:
92:60:6f:3a:06:1c:e8:50:4e:65:be:93:66:14:ec:
c7:d4:40:6a:74:09:30:d5:ad:d0:65:c9:84:7f:a4:
76:0e:09:6b:6e:0a:dd:7f:07:d6:3b:5e:e0:3c:d5:
75:87:c5:74:ac:93:c5:18:a0:95:bc:9f:96:a0:cc:
3f:47:75:2a:08:d5:24:45:18:2d:54:4e:82:1b:48:
ed:95:94:6d:76:e2:06:c1:dc:5c:9c:73:1a:ee:b2:
fe:00:e9:31:6d:f5:7f:ff:50:06:68:95:84:8b:79:
6c:fd:03:bf:3b:94:2e:b1:51:cc:05:68:50:65:80:
ad:de:d9:9b:88:99:18:4f:55:c6:b7:06:06:01:1f:
1e:9f:ab:0b:cc:da:d3:4d:ca:ee:26:09:3c:91:44:
f3:3d:b0:ca:f3:12:1e:6b:f5:d7:60:06:b2:6d:66:
fb:15:ad:a9:e8:e6:07:68:e6:f5:0e:f8:37:6c:89:
6d:6c:80:29:d6:c9:b4:c6:09:37:3b:9a:78:36:1b:
5a:ff:78:c9:8e:ac:54:4a:b0:09:f1:d4:95:42:33:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:76:B4:7C:C6:D3:26:4A:B6:CD:B4:54:FD:D9:97:E6:7C:1B:04
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e2:75:25:97:9e:23:3b:1a:aa:94:e3:0d:7e:71:e6:cc:7f:
d9:66:69:83:58:1d:28:a2:73:7c:b9:92:cf:2e:1c:28:6b:2a:
c7:18:c8:a0:d8:75:08:4b:68:7f:90:de:9e:0b:db:42:7a:25:
1a:75:9c:03:7b:1d:0a:97:7b:89:4b:57:64:82:a1:1f:73:78:
4a:f4:18:6e:98:9d:ba:20:bd:9d:87:1c:e0:4f:fa:63:66:51:
97:73:1e:db:fb:e6:9f:4d:b1:c2:c1:c7:b3:40:ed:29:63:00:
57:43:d7:97:2d:0e:05:c8:21:63:90:0f:a2:66:ee:ef:54:d0:
5c:8b:4f:06:10:4d:27:bc:c3:3e:8b:28:38:6e:24:2c:13:a2:
e2:16:8a:19:1a:f8:5c:c3:41:22:53:71:fc:f1:d1:dc:7c:e9:
f9:35:2c:15:05:4f:32:5c:0a:6a:49:69:f7:c5:8e:ea:64:b6:
20:a1:f3:94:4d:60:9a:fa:23:97:7a:90:6c:67:a9:83:5e:82:
2d:ee:96:5d:3f:00:fb:10:34:b0:f9:59:f7:1c:fc:5d:6e:85:
ef:8f:f8:ab:45:aa:7a:35:17:b3:c7:46:c0:e4:8a:97:27:96:
7c:b6:1a:2f:16:f3:d7:19:3b:9f:66:b0:39:bb:20:51:ab:c7:
cf:d7:94:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:20 2025 by rpki-client