Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: 8hyD2Gb7uYCKGnZ/T79EkyaCUgK8X7q2gkGmuW2OZIw=
Subject key identifier: 4C:5E:DD:F9:1C:71:8A:54:07:5D:6F:07:29:8D:37:C3:E7:A8:EE:94
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 019A0DF04126B1A00716FAB36667229BC007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 1363
Signing time: Wed 22 Oct 2025 22:00:40 +0000
Manifest this update: Wed 22 Oct 2025 22:00:40 +0000
Manifest next update: Thu 23 Oct 2025 22:00:40 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: LksUGfWD3sEw2a/vO3U5TYHozh6xDcz1IZd5U9so9tk=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:f0:41:26:b1:a0:07:16:fa:b3:66:67:22:9b:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Oct 22 22:00:40 2025 GMT
Not After : Oct 23 22:00:40 2025 GMT
Subject: CN=4c5eddf91c718a54075d6f07298d37c3e7a8ee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:45:db:0f:3e:3f:a1:c1:51:75:c0:16:3b:
8a:0d:8f:e4:6f:00:e2:b7:0c:a7:3f:d9:c5:39:57:
73:da:b2:48:f6:3a:8f:b9:28:d1:35:66:47:cc:4f:
53:21:6d:94:6b:8a:5e:e6:5d:0a:4f:bf:32:4b:b1:
d7:10:ac:58:35:14:f6:f1:5c:91:1d:c6:83:d5:82:
32:3f:8f:2c:01:27:93:4e:2f:42:e7:32:70:4b:7c:
ef:d8:3d:df:19:6c:f1:51:e2:3d:21:e0:c5:96:18:
c2:45:87:dd:a1:e6:8b:d6:16:33:56:03:53:21:00:
40:b3:0d:8d:74:3a:33:ec:79:30:d9:3d:16:17:a7:
f0:f8:7b:b3:5c:7d:37:d7:c1:5d:ce:91:0a:34:f4:
dc:1e:61:b2:a1:65:42:d7:cb:8f:25:4b:39:2b:c7:
6b:2b:5c:5f:2e:ee:99:c4:8c:85:76:a0:ef:87:a3:
97:19:61:c2:b2:55:b8:09:de:36:c7:7a:93:ec:8d:
9a:87:d4:c9:87:14:d1:d8:c5:94:9e:f8:5b:36:b0:
5c:1f:ea:9d:4c:b6:b3:31:83:42:da:39:f7:8f:e1:
3a:ff:0a:d5:4a:09:78:fa:c3:f2:15:78:14:dd:47:
44:2a:d0:58:16:e5:86:fd:3a:91:3a:65:66:56:80:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:DD:F9:1C:71:8A:54:07:5D:6F:07:29:8D:37:C3:E7:A8:EE:94
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bd:f3:b4:86:7c:ed:b6:5f:04:5b:39:c2:68:f3:7c:62:d7:
23:99:f5:02:ec:62:8c:a1:2c:f5:d5:f0:b0:13:c7:2c:a8:15:
7a:11:b6:12:13:6f:78:5b:af:32:76:8e:6e:0e:5e:48:ba:06:
84:bc:55:2b:6e:7e:f0:d4:63:62:16:b0:c4:19:2d:4e:38:21:
f6:c5:a3:a7:d7:ef:b9:f3:49:0a:c8:f8:1f:5c:fd:83:52:7c:
62:7a:b8:cc:15:49:f0:21:a5:17:e5:22:d8:42:76:6a:b5:8b:
81:a6:f0:19:28:35:7a:f8:ee:bd:78:cb:17:7b:2a:5c:c3:02:
94:53:b0:37:b9:dd:86:85:a0:9c:61:24:c4:3d:59:06:90:5d:
e2:0a:91:d8:1f:1a:e6:71:13:6f:28:ab:6f:a5:64:00:bc:7b:
2a:4e:55:dd:d0:4b:b8:f6:00:22:4f:27:ad:28:ea:4f:66:74:
99:ae:e7:e2:8c:a5:6b:ea:a5:4b:0a:0b:a0:b1:9d:84:47:b8:
0e:6b:6c:24:85:9f:41:69:b6:33:b1:50:bf:e0:a5:a8:74:45:
a9:a0:bd:6d:04:d8:7a:12:fc:da:b6:e3:02:a2:09:7c:60:23:
54:68:a8:c0:60:1e:5b:ec:87:f7:65:b1:ff:f3:83:5d:a8:d3:
3b:a5:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:30:14 2025 by rpki-client