
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: HMEcCC23mWkaUvZVD6wcvqEdiNgHOa4yOrAs7qiUHFA=
Subject key identifier: 92:CC:FC:9D:57:AF:0F:FE:4B:5A:68:3B:71:33:3A:15:D5:F1:42:E5
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 0198548D67DF4A72651D9E9575778275DF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 05:00:09 +0000
Manifest this update: Tue 29 Jul 2025 05:00:09 +0000
Manifest next update: Wed 30 Jul 2025 05:00:09 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: o3Ucc4iARv6KgqLsweVjf1TxCFtL2y5BVBq1cj1GoyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:67:df:4a:72:65:1d:9e:95:75:77:82:75:df:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Jul 29 05:00:09 2025 GMT
Not After : Jul 30 05:00:09 2025 GMT
Subject: CN=92ccfc9d57af0ffe4b5a683b71333a15d5f142e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:40:6e:fa:9a:12:5c:1b:13:90:38:4f:62:
35:3c:ab:6c:67:2e:2d:3b:2f:4c:d2:b5:a0:8c:9a:
9c:d8:9c:7a:d0:74:3d:3c:f1:e6:64:8a:8a:b3:28:
b5:36:0b:c9:09:19:c7:ff:c9:84:6f:32:3e:dd:15:
4a:3d:7a:b9:c0:17:3c:70:1d:1b:fa:b4:0a:46:a7:
13:7c:0b:9c:17:90:01:ff:4c:aa:43:bd:6f:65:40:
8b:d1:7e:7b:61:27:e1:1e:17:7e:46:00:bb:6e:b4:
8c:b7:0d:77:cb:3b:e6:9e:50:65:db:6d:aa:43:60:
04:57:0f:55:84:42:b3:7b:be:b2:1d:4b:3d:7e:27:
6b:30:28:e7:f9:6c:a0:2c:a4:60:6f:49:ce:92:31:
f9:0f:6e:b9:a1:30:fe:b2:a7:94:9f:e1:00:22:4f:
25:ea:e1:e5:24:c4:37:01:7b:e6:3a:c4:d6:94:cb:
f2:89:19:c3:b5:1b:c1:d4:ba:ed:4c:6b:e0:0a:45:
7b:6a:ef:bb:1d:13:01:1b:d4:a0:72:a6:5d:95:f8:
49:ce:33:9f:28:07:75:6e:7f:39:78:6a:d4:9f:f4:
a0:d5:29:74:5a:29:d7:85:9f:ad:75:cc:e0:04:70:
32:37:89:3e:1e:ed:82:32:1f:3f:cd:49:15:ce:bf:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:FC:9D:57:AF:0F:FE:4B:5A:68:3B:71:33:3A:15:D5:F1:42:E5
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:ee:ef:dd:4d:aa:95:c0:20:ac:f6:c2:3a:0c:2c:49:41:
d1:82:cf:b4:ed:3b:e3:c3:06:ee:08:5b:eb:14:fe:6e:8c:b0:
4e:5b:fb:46:fd:51:e5:83:82:ae:0f:40:d2:42:c1:db:47:35:
28:0e:5d:e6:71:7c:44:13:a9:0b:35:f2:95:1c:64:f4:8a:1e:
51:c8:2a:30:ce:76:99:e1:77:7d:40:9f:8b:88:f8:c7:85:32:
da:00:da:aa:56:d1:a9:da:a2:14:8e:c8:04:09:de:47:ba:49:
27:11:ef:b0:1b:4e:d3:1d:19:01:29:46:8d:a1:21:1d:5f:48:
ac:b9:64:22:2a:62:a4:50:df:9d:6c:12:be:2e:16:df:02:0f:
59:6d:89:a6:01:98:9b:48:0b:a0:b7:4f:1c:92:37:a9:dd:8c:
c9:2d:6c:a1:62:12:ad:11:08:ad:5e:7b:6b:9d:d6:18:d1:7f:
b8:96:33:b2:b2:a7:15:74:7b:55:b1:9c:20:c6:13:f0:4e:b8:
8d:f8:4b:fc:79:6e:c9:38:01:3b:31:c2:c5:a3:3c:9e:ac:71:
19:c1:c0:26:27:a1:f4:f7:c1:8d:ce:7c:fd:1a:40:2a:01:d9:
bd:92:21:6d:1a:a4:f2:56:e7:64:98:bb:94:11:05:30:82:11:
e6:31:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:35:28 2025 by rpki-client