Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: OGxKkgOE783Wqk/sjbyfZtopSc+V/EWUte62wnGPaQw=
Subject key identifier: 13:C7:1E:9F:1C:53:C9:B7:79:7E:43:E6:5E:6F:A0:1D:20:D4:F8:BC
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019A71EEE050192C5BB91928030B5BDC97D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: SifAUxa7kFxnYWVNDVPRsk63MOZu37bB2tLbGOg3XEg=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e0:50:19:2c:5b:b9:19:28:03:0b:5b:dc:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=13c71e9f1c53c9b7797e43e65e6fa01d20d4f8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:49:09:e0:7d:0e:38:53:10:fd:d7:28:a4:
d9:7e:80:57:c0:83:27:81:21:3d:9f:f9:24:77:37:
b8:d2:84:7e:a5:6f:8e:ff:74:81:68:ed:0e:0a:e6:
02:e3:69:dc:ce:42:ae:43:d6:85:bc:73:5a:e6:a4:
2c:66:48:cc:13:8f:af:61:38:4d:c1:f6:fa:25:64:
04:23:6e:a4:ca:9e:43:17:52:f9:63:94:c1:84:05:
df:fa:15:17:4f:01:88:8b:34:c3:85:61:5d:3b:c3:
23:47:ae:e2:c5:97:d5:5b:c7:0e:68:ee:7f:4d:16:
c4:f7:09:fb:fe:48:e2:a3:8c:0e:83:60:d9:a9:1e:
e0:3b:ae:c6:46:1a:a5:7a:a7:7f:54:7a:c7:11:41:
4b:92:fd:6a:17:88:2f:37:64:6b:8d:70:d1:f3:d6:
91:1b:a4:96:d2:51:55:90:d5:be:7f:08:01:23:73:
3e:7c:56:17:e7:ca:62:33:7a:82:1b:a7:fb:35:f7:
ed:20:0d:05:c8:ae:38:4b:66:09:71:f2:cc:9d:f4:
d3:63:b6:cb:2f:35:8d:13:d3:4a:10:14:ee:ca:37:
5f:87:42:db:a7:a3:85:50:bf:d1:cd:c3:77:70:5c:
fd:da:61:c7:75:1c:87:3e:e3:14:2a:45:41:cf:7a:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:1E:9F:1C:53:C9:B7:79:7E:43:E6:5E:6F:A0:1D:20:D4:F8:BC
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:b9:49:3f:dc:d8:3b:6b:b4:5f:92:2d:77:4f:b1:89:c9:
04:73:e7:05:28:f5:c1:5c:1d:e0:df:f5:d4:32:f6:a5:3f:d0:
a8:ad:fb:b9:d7:6a:a4:fa:c2:9f:7b:66:33:35:b8:83:1b:cf:
64:43:e2:e8:e1:ed:28:23:2b:e5:7d:47:f9:08:2c:15:b1:02:
5c:45:fc:0c:d7:f5:50:c8:41:33:f9:f1:f9:f1:89:51:b4:1d:
6e:99:4a:5d:dd:cd:e9:23:35:d3:36:97:43:02:5f:33:9a:60:
3f:25:c5:ea:96:51:0b:dd:b0:9e:f1:80:9c:e9:b0:07:63:6b:
37:c7:a3:78:d0:fe:50:10:92:10:84:00:2b:62:03:d8:99:3a:
2c:c6:84:a2:b6:fe:ab:31:f4:bf:d2:aa:4b:73:41:c4:31:d7:
7d:51:ef:ce:fd:c1:8e:ce:f5:f8:24:5c:0f:c0:b6:cb:db:60:
d1:40:19:fe:c9:96:65:fc:86:22:af:89:3b:60:d3:dd:36:64:
b8:1a:ff:d2:0d:de:51:1c:20:ac:4c:8b:e3:14:75:0b:d0:0b:
dd:7b:fd:9e:85:c4:78:f1:4f:78:3d:5e:0c:6a:6c:ba:e4:b6:
d6:7d:fa:84:0b:9e:ee:f7:2c:c6:d8:f2:e2:c2:cd:b3:ae:08:
4f:58:f6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uBQGSxbuRkoAwtb3JfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUxMTExMDgwMTExWhcNMjUxMTEyMDgwMTExWjAzMTEwLwYDVQQD
EygxM2M3MWU5ZjFjNTNjOWI3Nzk3ZTQzZTY1ZTZmYTAxZDIwZDRmOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYdJCeB9DjhTEP3XKKTZfoBXwIMn
gSE9n/kkdze40oR+pW+O/3SBaO0OCuYC42nczkKuQ9aFvHNa5qQsZkjME4+vYThN
wfb6JWQEI26kyp5DF1L5Y5TBhAXf+hUXTwGIizTDhWFdO8MjR67ixZfVW8cOaO5/
TRbE9wn7/kjio4wOg2DZqR7gO67GRhqleqd/VHrHEUFLkv1qF4gvN2RrjXDR89aR
G6SW0lFVkNW+fwgBI3M+fFYX58piM3qCG6f7NfftIA0FyK44S2YJcfLMnfTTY7bL
LzWNE9NKEBTuyjdfh0Lbp6OFUL/RzcN3cFz92mHHdRyHPuMUKkVBz3qOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPHHp8cU8m3eX5D5l5voB0g1Pi8MB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABua5ST/c
2DtrtF+SLXdPsYnJBHPnBSj1wVwd4N/11DL2pT/QqK37uddqpPrCn3tmMzW4gxvP
ZEPi6OHtKCMr5X1H+QgsFbECXEX8DNf1UMhBM/nx+fGJUbQdbplKXd3N6SM10zaX
QwJfM5pgPyXF6pZRC92wnvGAnOmwB2NrN8ejeND+UBCSEIQAK2ID2Jk6LMaEorb+
qzH0v9KqS3NBxDHXfVHvzv3Bjs71+CRcD8C2y9tg0UAZ/smWZfyGIq+JO2DT3TZk
uBr/0g3eURwgrEyL4xR1C9AL3Xv9noXEePFPeD1eDGpsuuS21n36hAue7vcsxtjy
4sLNs64IT1j2tA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client