
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: Ca63/bduDg2z+/7eCfbv3XxoHkIopMwmHyCRVS+ntIA=
Subject key identifier: FF:43:48:49:63:0A:98:E1:30:3D:A2:83:3D:79:74:0D:DF:76:18:E9
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 01984B549314978F436489F6394713259399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 0749
Signing time: Sun 27 Jul 2025 10:01:30 +0000
Manifest this update: Sun 27 Jul 2025 10:01:30 +0000
Manifest next update: Mon 28 Jul 2025 10:01:30 +0000
Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=)
2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: HROIiYPjS7ZLLrTqf7Y7ix7ubJx3K0QiQ1P1XOCyQlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:93:14:97:8f:43:64:89:f6:39:47:13:25:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Jul 27 10:01:30 2025 GMT
Not After : Jul 28 10:01:30 2025 GMT
Subject: CN=ff434849630a98e1303da2833d79740ddf7618e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:85:d8:01:8b:29:61:ff:f0:e1:a2:58:5a:
7a:d3:f8:49:5f:d2:ff:4d:90:53:64:db:6d:fb:30:
20:9a:45:ec:85:1d:d2:7c:99:d1:39:4e:df:32:5d:
c9:a6:f0:53:0d:a8:95:8c:9b:1a:59:c0:b0:52:e1:
04:75:15:af:c8:f8:ee:5d:c1:4d:13:ce:64:49:aa:
4f:1e:9d:3a:88:de:47:10:c5:63:56:19:7b:a5:a8:
b0:83:a7:07:de:92:21:bc:33:eb:ea:e8:32:9f:03:
95:c6:a4:0e:fb:ab:f8:a2:d1:84:0a:79:d7:1d:53:
7e:d1:f1:0b:f9:c6:aa:02:cb:31:be:85:1f:d1:95:
89:39:0e:f0:91:3a:19:71:68:27:15:f0:31:f8:1c:
5b:8b:3c:f3:5d:17:6f:17:8d:21:4f:0e:00:e0:cd:
df:fa:c3:8b:8b:b2:cf:79:8f:78:6f:17:e9:9f:28:
42:41:5d:37:03:37:46:59:50:c5:e9:4f:82:7f:ac:
48:13:ea:23:a8:c6:23:4f:45:de:e1:18:b7:44:74:
7a:66:be:39:92:cc:06:f8:27:e1:be:0a:b2:21:a8:
aa:a0:2b:11:a1:ed:f3:e0:76:9f:03:78:e0:1a:b9:
da:79:b4:de:f7:1d:99:8f:40:6d:d8:48:18:19:24:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:48:49:63:0A:98:E1:30:3D:A2:83:3D:79:74:0D:DF:76:18:E9
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:46:8a:f3:f2:e2:bf:a4:af:f5:bd:1a:c5:97:14:1a:ec:
01:ea:aa:96:a9:a1:bf:e1:5d:26:0f:14:05:70:84:19:88:1f:
0a:87:86:4a:27:13:e0:3a:14:24:21:ea:aa:da:59:07:f9:43:
c9:9c:27:ba:17:d4:56:fe:bd:db:0b:1f:6a:6d:ed:31:93:16:
a9:4c:13:8d:ad:9d:2a:71:26:2e:1c:d3:6f:13:a4:ec:e3:e6:
89:af:d3:34:e8:2b:50:93:e1:57:cc:96:a0:ac:d7:e9:d8:25:
2a:31:96:c0:c4:a3:7f:ae:c6:6b:ab:2f:bb:19:73:ae:2f:e6:
17:98:b8:88:80:d2:52:ce:7c:08:0a:99:94:65:0a:f7:7f:44:
5a:b7:8c:9f:c4:b8:21:9a:56:e6:47:65:f1:c8:07:11:4d:02:
90:bc:31:d9:72:e7:47:08:2c:96:e0:e3:c3:7a:38:b9:6c:09:
1d:f0:ea:f0:a8:80:79:2d:51:49:d7:1b:e5:d7:e9:70:03:72:
8d:8f:64:bd:f9:c3:c3:3c:f0:1d:a7:1a:9c:5c:8d:dc:1d:ad:
bc:dd:18:f4:ae:24:85:84:c0:85:4b:e3:34:6c:b8:d2:3c:ab:
52:a3:71:07:30:2f:be:03:67:c8:6b:e8:a4:8d:2a:f7:7c:4a:
c0:b6:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:39:32 2025 by rpki-client