Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier: x4QRgDQMZWxX1WGertQfZKRD1JZFd/TL6d5hkY+Gyw0=
Subject key identifier: 4B:3C:0D:0F:15:24:BF:0C:2F:E5:CA:CB:03:5A:44:C4:70:0D:35:C9
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 019A71B8B089F03992F454930DB3AADB47BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number: 0866
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=)
2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: 2zhE2En3sGRQ0D/rlqCtJrIZnFmAn2zUkMBGMc2XyVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b0:89:f0:39:92:f4:54:93:0d:b3:aa:db:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=4b3c0d0f1524bf0c2fe5cacb035a44c4700d35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:bd:e3:ab:e6:a5:e3:1c:e0:58:9c:e4:d5:
7f:63:e4:11:57:3d:21:e3:0e:fd:3a:f4:e9:c0:75:
90:2c:f1:ed:26:b6:5b:28:f7:34:5c:93:12:70:5f:
a2:3e:4e:b3:28:1e:b2:8d:d4:26:da:00:7b:a4:50:
74:9a:a6:32:0e:8f:47:85:fc:95:f3:f3:e3:59:bd:
16:b8:4a:07:d3:46:80:0e:b1:80:5f:f1:64:38:8e:
84:1a:78:d3:9f:4c:3c:c5:2b:ce:35:15:6e:10:7f:
2e:c1:74:2b:6e:ce:cc:2e:0c:41:75:c3:4f:c2:15:
9f:b5:35:ae:a4:0b:01:44:58:bf:f9:4e:98:f2:5b:
ca:f1:88:c7:f0:65:d5:70:61:2d:f9:25:25:17:f2:
b1:fd:26:83:a3:7c:ef:7a:3b:60:2b:bb:af:fb:1d:
e0:47:3a:4c:cf:14:97:4c:91:8d:43:9d:f5:4a:35:
80:54:8e:36:e7:a5:56:d7:2d:7d:95:3f:5c:e2:0f:
d5:42:b5:60:82:95:85:1c:be:2c:34:da:ed:a1:5d:
a9:23:46:97:ff:0e:96:4d:c6:4b:11:58:33:47:ee:
0b:5a:79:f2:80:67:bd:ad:94:b2:d1:d5:7d:e1:91:
3d:1b:b7:56:c4:cd:30:49:6e:1a:2d:22:1e:ac:84:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:0D:0F:15:24:BF:0C:2F:E5:CA:CB:03:5A:44:C4:70:0D:35:C9
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:c6:2e:68:3b:4f:c3:a4:e5:f1:f6:fa:59:b6:2e:25:7e:
37:dd:e2:20:eb:a8:3d:88:2c:99:bc:95:0a:05:4d:a4:93:8d:
3b:1c:4f:63:44:51:4b:55:74:6f:f3:73:e0:50:cf:99:2a:b2:
f1:07:ac:ec:68:9f:3c:6b:5f:8c:c2:fe:18:16:3d:72:72:7a:
e0:37:c0:6f:3f:10:5a:fa:f9:26:7b:a9:c8:81:35:ea:22:9e:
65:b3:b8:00:f4:a5:05:3b:76:b2:f9:3e:53:38:cb:8e:6a:24:
d8:e9:9d:07:1d:14:cb:eb:c3:9b:26:80:5f:f3:c4:f7:f8:5f:
c6:4a:21:da:7a:14:e4:a1:d8:a7:ff:96:38:38:37:17:b4:62:
02:05:33:9c:f9:4f:ae:e4:cc:a7:f5:05:af:e1:af:c9:7f:a8:
e7:74:4e:45:a7:75:3d:86:eb:a7:b4:b6:f0:25:cc:84:c4:cc:
3e:6b:c4:15:06:ae:4d:c8:ba:4e:7d:87:65:a5:32:ca:80:50:
0d:3d:ab:f9:ce:2c:91:13:fe:b8:1d:27:1a:b1:89:c6:0d:4e:
a4:46:c3:70:24:75:69:2f:b9:65:0d:18:56:c5:ea:c6:19:32:
1e:30:af:a3:7e:71:57:06:f6:7c:da:15:9b:b9:a3:15:44:d7:
bb:3f:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client