Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: uLS1OSdkHJ7HPhXYs52vyb9ybt29uIfsQPf97ntEs9M=
Subject key identifier: B9:E1:69:86:45:E6:B7:62:83:FD:09:BB:A6:90:2C:05:FB:F4:68:77
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01974AB147D6AEC2A33CD4F22BA017755FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 14:00:21 +0000
Manifest this update: Sat 07 Jun 2025 14:00:21 +0000
Manifest next update: Sun 08 Jun 2025 14:00:21 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: TTpVSADAuP/d+JwSusy6NVooTDl1VylbVez8JaPXtAY=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:47:d6:ae:c2:a3:3c:d4:f2:2b:a0:17:75:5f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jun 7 14:00:21 2025 GMT
Not After : Jun 8 14:00:21 2025 GMT
Subject: CN=b9e1698645e6b76283fd09bba6902c05fbf46877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:32:34:be:68:a9:1d:26:67:7d:59:4e:c2:
a9:d1:11:44:a8:a5:76:e8:4d:7e:ad:95:bc:8a:d5:
08:8f:a1:8d:b0:0a:8e:db:91:62:b1:98:73:77:fd:
58:4c:8f:0f:57:5e:74:c8:85:fb:be:ad:02:bc:68:
a7:64:c7:d1:b1:10:0c:57:1f:10:b1:d4:b0:ab:f6:
b1:ca:09:e5:33:90:2f:d7:56:1c:16:42:f0:d9:8a:
9a:b6:f2:01:58:fc:c6:00:8f:71:ac:ea:e0:09:3e:
af:b1:ae:42:83:f9:a5:9f:db:a6:f6:16:3c:95:3b:
d3:2b:2e:10:09:a2:65:ad:98:6b:f9:2f:ac:4c:cd:
0a:9f:90:04:dc:53:9c:b1:3b:02:61:69:d0:e3:63:
fc:ab:48:f6:bb:ac:6d:bf:54:19:55:7d:ef:79:33:
d1:d4:f2:94:ab:3e:86:e9:f4:85:95:d3:76:78:0e:
b2:5e:08:0f:29:0b:85:ab:31:5e:7f:42:00:96:34:
39:1a:3d:17:c1:7f:bb:23:c1:55:ed:22:4a:a5:7f:
ad:92:22:71:50:28:f9:62:bf:49:2e:52:cd:0c:1f:
51:5a:20:62:d2:20:4e:f8:d0:48:33:e3:e0:bf:16:
d2:cc:76:44:e7:12:0b:44:0f:50:38:66:7f:fd:78:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:69:86:45:E6:B7:62:83:FD:09:BB:A6:90:2C:05:FB:F4:68:77
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:6b:eb:08:bb:28:e8:74:0f:c0:5a:35:f4:5b:50:5e:0b:
ed:ac:9b:6a:77:64:33:07:e2:e7:2b:3c:d4:72:5c:6a:f9:93:
ac:65:c5:22:6a:65:be:76:3c:ea:d4:cf:83:80:de:56:5c:35:
18:94:44:3e:58:e3:5e:3e:c3:86:78:6f:20:b0:80:e3:6b:82:
ad:22:0a:0e:80:a6:39:8e:51:8d:4e:73:66:58:7f:62:ba:3e:
f2:50:48:a9:0f:42:3e:9a:1f:a4:46:f6:c7:1f:d0:a4:8b:f6:
80:ae:91:ae:ea:f3:60:78:cb:7d:d6:cd:7e:e6:e3:1a:a3:eb:
0e:dd:e8:0e:ab:ea:85:8a:f3:75:73:e0:80:e0:56:2f:e1:48:
c8:98:63:5e:5c:2b:0e:7b:b9:4f:88:64:41:fd:60:42:76:5f:
85:db:c0:53:51:93:04:68:d9:49:54:21:90:76:2c:b6:ee:cc:
63:1b:dc:8d:a8:4c:97:c1:c3:96:af:04:3a:70:ab:b9:d8:e4:
78:ce:89:81:41:8f:44:b2:0f:ed:1e:82:d7:83:26:bf:c6:01:
9d:28:69:12:3a:45:75:0c:ac:17:52:b3:e0:9e:ed:5c:86:29:
76:0e:43:fe:7b:e5:76:48:a5:b4:f7:7f:2b:b5:2a:50:fc:2c:
16:9b:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:17 2025 by rpki-client