Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: Wa51QIDC2WSL6UAztbUUSieITOnMhoApwx6C/zyYZ44=
Subject key identifier: 7C:DA:05:16:4B:FE:A7:66:34:6C:7B:65:63:84:45:3F:FF:60:F8:FE
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01985CEC0788876E5946C14272D72FAFF9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 20:00:28 +0000
Manifest this update: Wed 30 Jul 2025 20:00:28 +0000
Manifest next update: Thu 31 Jul 2025 20:00:28 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: Rojpg97hyMGlVktiCtgAhCP1128Pyj234A0YPEaHj7A=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:ec:07:88:87:6e:59:46:c1:42:72:d7:2f:af:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jul 30 20:00:28 2025 GMT
Not After : Jul 31 20:00:28 2025 GMT
Subject: CN=7cda05164bfea766346c7b656384453fff60f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:f4:0b:6d:65:55:2f:ee:d2:89:33:74:6e:
eb:9e:2f:6d:2d:53:eb:f9:28:43:f6:31:af:16:94:
5e:f3:ca:3d:7e:77:cb:b0:bc:04:b1:e6:18:44:5b:
95:89:3f:87:b2:48:3d:be:89:c5:07:ee:f9:72:f0:
e0:57:63:fa:27:c3:c2:91:2c:67:dc:2c:bc:fd:b3:
da:f5:41:24:fd:65:b3:29:46:20:85:f0:32:1b:6f:
50:4e:a6:8e:88:d6:64:12:e7:33:8f:93:01:87:e7:
76:86:ac:48:e9:bc:c9:08:e5:1a:b3:00:9f:b1:03:
0c:55:f9:2e:f2:09:da:47:06:97:57:11:bc:50:f0:
7d:af:65:ac:13:2f:d5:fa:0c:bb:0d:72:87:26:b8:
88:1d:2c:2a:35:bc:d0:23:10:6e:1d:fc:59:e1:8e:
0f:90:d4:95:5a:99:0d:f0:6a:8a:82:f5:b9:c1:8c:
26:d1:b7:0c:84:0d:e1:f2:0a:d8:62:70:48:03:1a:
cc:b3:4d:17:73:07:a9:1b:44:43:74:b2:95:b8:18:
7b:8c:f8:a0:b9:35:ef:99:09:0c:95:91:dd:4e:0e:
5e:be:76:9e:5c:29:ed:c3:7d:04:1b:41:35:c4:e7:
5f:ae:1f:13:8e:57:64:08:03:6d:3e:73:c3:8f:9e:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DA:05:16:4B:FE:A7:66:34:6C:7B:65:63:84:45:3F:FF:60:F8:FE
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:e8:e7:e9:55:1a:4c:06:e1:31:05:4f:08:ba:c1:55:fb:
c7:61:6b:65:70:c1:0c:a4:6c:e7:e9:86:8b:a2:08:03:cc:1e:
e5:3d:bb:6d:13:b5:79:f9:81:4e:f7:ab:bf:12:ec:dd:9a:1c:
c5:52:f0:55:b5:d4:02:45:56:2a:c5:55:1f:d9:77:b4:2d:10:
e8:6e:39:86:a5:a5:7f:e0:4d:a9:f5:65:f4:6b:66:c2:c2:9b:
3b:30:5e:ec:ff:a4:d8:de:34:5b:91:d0:de:cb:7d:db:76:da:
e6:5a:03:33:53:65:37:0f:5f:70:3f:3c:c3:d3:9c:41:89:21:
77:e8:de:fd:a6:22:77:37:62:c7:38:28:28:3b:85:86:54:26:
30:94:02:e4:f7:53:6e:46:2f:ba:d2:8a:39:e3:45:c5:55:df:
6d:1a:39:fe:56:b3:4e:dd:e4:5d:08:27:f1:3a:92:55:f7:42:
dc:31:89:05:8a:b3:e3:d4:9b:a7:f0:98:7d:5f:10:55:28:a0:
54:e4:a5:f7:bb:b2:65:52:82:46:0f:c3:f1:39:2d:1a:be:ea:
21:d3:f3:22:68:4f:07:e0:8e:91:78:ac:72:df:67:2e:48:78:
ce:46:4d:f5:d8:ce:c0:51:71:a7:53:47:d0:31:1f:26:7b:c9:
79:25:d3:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhc7AeIh25ZRsFCctcvr/noMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUwNzMwMjAwMDI4WhcNMjUwNzMxMjAwMDI4WjAzMTEwLwYDVQQD
Eyg3Y2RhMDUxNjRiZmVhNzY2MzQ2YzdiNjU2Mzg0NDUzZmZmNjBmOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobb0C21lVS/u0okzdG7rni9tLVPr
+ShD9jGvFpRe88o9fnfLsLwEseYYRFuViT+Hskg9vonFB+75cvDgV2P6J8PCkSxn
3Cy8/bPa9UEk/WWzKUYghfAyG29QTqaOiNZkEuczj5MBh+d2hqxI6bzJCOUaswCf
sQMMVfku8gnaRwaXVxG8UPB9r2WsEy/V+gy7DXKHJriIHSwqNbzQIxBuHfxZ4Y4P
kNSVWpkN8GqKgvW5wYwm0bcMhA3h8grYYnBIAxrMs00XcwepG0RDdLKVuBh7jPig
uTXvmQkMlZHdTg5evnaeXCntw30EG0E1xOdfrh8TjldkCANtPnPDj56eGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzaBRZL/qdmNGx7ZWOERT//YPj+MB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYa7o5+lV
GkwG4TEFTwi6wVX7x2FrZXDBDKRs5+mGi6IIA8we5T27bRO1efmBTvervxLs3Zoc
xVLwVbXUAkVWKsVVH9l3tC0Q6G45hqWlf+BNqfVl9GtmwsKbOzBe7P+k2N40W5HQ
3st923ba5loDM1NlNw9fcD88w9OcQYkhd+je/aYidzdixzgoKDuFhlQmMJQC5PdT
bkYvutKKOeNFxVXfbRo5/lazTt3kXQgn8TqSVfdC3DGJBYqz49Sbp/CYfV8QVSig
VOSl97uyZVKCRg/D8TktGr7qIdPzImhPB+COkXisct9nLkh4zkZN9djOwFFxp1NH
0DEfJnvJeSXTXA==
-----END CERTIFICATE-----
Generated at Thu Jul 31 05:45:52 2025 by rpki-client