Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: H7q6zrBql8QQEK4fpD9BYHeQg+DzWO17U+0FgOhrZhQ=
Subject key identifier: 6A:03:20:A1:9C:43:0D:EC:02:92:A6:5A:47:8B:11:42:8C:46:AB:8A
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019A0259B82F02469A39C98F19851195D131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 16:00:25 +0000
Manifest this update: Mon 20 Oct 2025 16:00:25 +0000
Manifest next update: Tue 21 Oct 2025 16:00:25 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: aaj/u/sOMDaTZoI0OhQ16Kiqww41oI5E6N0Q70Nbb+k=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:b8:2f:02:46:9a:39:c9:8f:19:85:11:95:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Oct 20 16:00:25 2025 GMT
Not After : Oct 21 16:00:25 2025 GMT
Subject: CN=6a0320a19c430dec0292a65a478b11428c46ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:fa:4a:0f:21:b0:19:99:c8:5f:30:44:e3:
f3:fd:ed:14:cf:94:3f:56:6c:18:27:68:8a:a3:4b:
a4:f5:dd:2f:ca:cb:ef:11:7b:5a:29:90:c7:a7:50:
ed:59:75:7e:34:f8:72:01:ac:b6:4e:3b:ea:71:de:
3a:64:c7:cf:d8:97:06:ff:c1:f0:fb:b5:91:e9:a6:
f1:9a:cf:17:de:0f:a3:9e:a8:da:20:0c:5f:69:b6:
cf:7c:67:d1:e7:fd:70:16:83:ec:bb:91:36:18:ce:
45:79:a4:8b:9c:7c:42:71:1e:7f:cb:85:42:2b:0b:
61:6a:20:ca:15:61:4b:ef:e0:41:3c:af:eb:9d:d4:
0a:0e:5b:c6:a5:b6:52:3c:de:1d:a4:71:03:23:79:
e7:ba:d6:99:9b:c0:ad:48:87:11:95:c4:39:dc:3c:
35:b0:4f:0a:f5:17:2f:9c:06:b6:5c:be:d6:5c:e0:
22:af:25:2d:5a:61:7b:c6:d3:fb:76:33:2d:34:72:
fe:ba:c8:f7:3c:45:36:14:16:4d:7e:5d:13:04:98:
6f:83:6d:62:b8:1b:bf:ac:70:e5:15:cc:86:10:0b:
29:57:79:1d:8f:69:85:93:48:7b:de:ae:9b:f5:2e:
bf:f8:00:70:9d:e9:1b:bc:9b:79:cf:7d:bf:17:c2:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:20:A1:9C:43:0D:EC:02:92:A6:5A:47:8B:11:42:8C:46:AB:8A
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e6:eb:b7:88:0c:3c:c5:74:5a:bf:0b:aa:9f:df:e9:2e:75:
8f:9e:3e:8d:f5:82:a8:81:d2:fb:6e:0a:d0:05:f3:a5:41:e2:
30:22:58:85:0a:66:21:59:d5:0a:59:aa:70:ad:6d:dd:7e:1f:
bb:2f:9e:77:1f:c0:23:50:58:ff:74:22:e4:5a:46:03:4d:c9:
be:81:d3:2b:45:45:30:08:f7:a8:39:10:3e:72:23:5d:d4:fc:
9c:89:9a:d9:7c:47:30:3d:cf:11:c6:55:ac:c0:83:e2:11:62:
58:ec:49:63:e5:dc:2e:90:32:ca:fe:b8:c5:bb:6b:51:31:a8:
10:f4:a0:2a:0c:3d:6f:fa:d0:b5:47:09:a8:02:f9:e3:92:f3:
e9:45:51:f3:c9:31:62:c4:ff:46:38:56:70:e7:15:ab:e3:61:
e2:b8:fb:32:5a:f4:c8:3e:3e:f1:37:84:3a:4f:00:07:a5:51:
b4:cf:b1:c5:6b:1c:a2:4c:da:62:21:f1:5f:1a:fa:60:92:40:
a1:c9:06:fc:34:47:bd:de:2e:91:87:5f:27:15:58:52:1d:47:
63:1c:07:94:b8:55:4a:12:1e:34:be:cd:44:18:e1:dd:3b:fd:
5d:77:66:3e:e0:9c:26:9d:47:cd:9d:8f:a3:46:59:a9:4e:b0:
ca:7c:ac:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWbgvAkaaOcmPGYURldExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjUxMDIwMTYwMDI1WhcNMjUxMDIxMTYwMDI1WjAzMTEwLwYDVQQD
Eyg2YTAzMjBhMTljNDMwZGVjMDI5MmE2NWE0NzhiMTE0MjhjNDZhYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNn6Sg8hsBmZyF8wROPz/e0Uz5Q/
VmwYJ2iKo0uk9d0vysvvEXtaKZDHp1DtWXV+NPhyAay2Tjvqcd46ZMfP2JcG/8Hw
+7WR6abxms8X3g+jnqjaIAxfabbPfGfR5/1wFoPsu5E2GM5FeaSLnHxCcR5/y4VC
KwthaiDKFWFL7+BBPK/rndQKDlvGpbZSPN4dpHEDI3nnutaZm8CtSIcRlcQ53Dw1
sE8K9RcvnAa2XL7WXOAiryUtWmF7xtP7djMtNHL+usj3PEU2FBZNfl0TBJhvg21i
uBu/rHDlFcyGEAspV3kdj2mFk0h73q6b9S6/+ABwnekbvJt5z32/F8J5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoDIKGcQw3sApKmWkeLEUKMRquKMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASebrt4gM
PMV0Wr8Lqp/f6S51j54+jfWCqIHS+24K0AXzpUHiMCJYhQpmIVnVClmqcK1t3X4f
uy+edx/AI1BY/3Qi5FpGA03JvoHTK0VFMAj3qDkQPnIjXdT8nIma2XxHMD3PEcZV
rMCD4hFiWOxJY+XcLpAyyv64xbtrUTGoEPSgKgw9b/rQtUcJqAL545Lz6UVR88kx
YsT/RjhWcOcVq+Nh4rj7Mlr0yD4+8TeEOk8AB6VRtM+xxWscokzaYiHxXxr6YJJA
ockG/DRHvd4ukYdfJxVYUh1HYxwHlLhVShIeNL7NRBjh3Tv9XXdmPuCcJp1HzZ2P
o0ZZqU6wynysuA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:25 2025 by rpki-client