Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: LqqfTNuxa9n5RvPPSfw6SsapPhaYsxDQf6Jt/qUxk/o=
Subject key identifier: C3:04:2A:5D:ED:B5:64:EB:53:16:F7:38:3D:EE:B6:2A:82:CE:84:7A
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0199221E2C1C63AB8D3EE3DE92A96018D9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 156E
Signing time: Sun 07 Sep 2025 03:00:26 +0000
Manifest this update: Sun 07 Sep 2025 03:00:26 +0000
Manifest next update: Mon 08 Sep 2025 03:00:26 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: lhFBy4a8FWQpG4RR4KAnb77c4TOM8GsFNudbzVqiJ04=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:2c:1c:63:ab:8d:3e:e3:de:92:a9:60:18:d9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Sep 7 03:00:26 2025 GMT
Not After : Sep 8 03:00:26 2025 GMT
Subject: CN=c3042a5dedb564eb5316f7383deeb62a82ce847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:a1:48:14:c5:66:f0:51:a5:1b:3e:c6:9a:
7e:8a:b1:0b:e3:d5:b6:55:0a:64:82:dd:6b:d3:39:
d0:12:8d:a8:85:ce:c7:1e:2a:37:2b:c8:fa:4c:fe:
af:08:c2:ff:ac:f9:1f:38:ae:57:69:80:67:eb:46:
b9:05:db:e8:ea:f6:12:58:9a:54:b8:ec:c2:42:56:
e6:50:c0:ea:01:a7:85:1c:1f:e2:ef:9e:15:69:28:
5c:5b:38:50:81:bf:c7:e8:2e:85:a2:ba:78:bc:1e:
a9:db:91:35:ba:2f:49:b9:5a:59:96:b1:bd:34:88:
68:e8:d9:e1:7c:79:ee:18:5b:ca:a1:9d:60:0b:0d:
d1:a1:62:ec:de:52:1d:45:1d:02:52:6d:4b:69:d7:
41:db:c4:1a:85:97:a5:4f:41:80:38:9f:1d:e5:04:
79:eb:6c:4a:01:20:a5:5f:4d:f0:c4:b4:4e:8c:00:
a3:21:64:da:ff:81:8a:88:12:31:da:66:ea:cd:85:
a8:09:75:3c:bb:d3:9f:03:42:0f:aa:51:70:63:6a:
06:3a:98:89:36:5d:2d:63:42:b6:d2:18:43:1c:aa:
89:eb:ba:a1:c7:dc:9e:68:eb:1b:c4:52:cd:ae:d7:
12:43:eb:92:1f:53:a0:a9:a1:73:b9:aa:d9:bd:6f:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:2A:5D:ED:B5:64:EB:53:16:F7:38:3D:EE:B6:2A:82:CE:84:7A
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c2:d8:e3:c8:5e:5a:f1:d6:08:30:48:ef:e5:10:b6:9b:af:
7f:a5:2d:2a:cc:1d:0f:f1:8a:31:be:83:33:4f:00:c1:a0:43:
a1:58:c4:42:71:fa:00:14:64:42:d6:11:c7:71:0b:68:cb:72:
9a:05:cd:8a:95:be:11:3a:c6:72:63:8c:29:6d:33:ed:0a:69:
95:8d:fb:ab:03:b5:67:88:14:f3:b7:d8:0f:5f:06:f1:88:94:
44:f4:23:e4:5c:bb:75:c5:2c:43:e6:6b:7d:60:4a:eb:e4:01:
bb:c8:00:0b:04:a4:fb:43:c6:ba:03:8a:b1:cb:c4:8e:6d:71:
60:63:c6:20:92:e0:4f:71:84:e8:bd:3e:20:67:b7:a7:5a:4b:
a1:c1:29:44:30:fa:ce:63:b4:f9:71:b5:3e:88:2f:9f:b3:c5:
3f:29:8e:1f:58:f2:d3:46:8a:d8:71:d4:b8:18:9a:4b:79:d0:
f1:06:97:ee:91:bd:4f:d7:d8:0b:62:8e:a8:24:f3:96:5b:9d:
56:69:73:c7:a9:12:94:7a:04:c6:bb:39:1f:bf:33:45:0e:b1:
36:06:74:08:1d:60:d0:08:7b:c3:ff:c6:a7:60:97:19:8c:8d:
ac:2e:e0:8d:08:c7:fb:f9:d3:f3:75:03:b4:08:f4:00:93:71:
e9:86:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:02 2025 by rpki-client