Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: jbRzs7obwwEidwQeNuV+mQ6FrOYLnG9ADjXtV2vObZ4=
Subject key identifier: 0F:64:10:AA:81:51:CC:67:FC:67:5B:CB:E4:85:4E:32:4D:5D:E0:65
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 019A26D49A42366F91592D66D61E9E6C67B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 15F5
Signing time: Mon 27 Oct 2025 18:00:58 +0000
Manifest this update: Mon 27 Oct 2025 18:00:58 +0000
Manifest next update: Tue 28 Oct 2025 18:00:58 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: ++2HXTwNnIIuxZnsZhqOR5p2MGmpgZIBrfXSZdGOdnY=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:9a:42:36:6f:91:59:2d:66:d6:1e:9e:6c:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Oct 27 18:00:58 2025 GMT
Not After : Oct 28 18:00:58 2025 GMT
Subject: CN=0f6410aa8151cc67fc675bcbe4854e324d5de065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:93:05:7d:5a:7e:56:f4:4e:a9:02:c6:7c:
35:36:8d:b1:71:b1:d0:63:f4:52:47:f6:a1:e6:5a:
78:0d:75:58:f9:75:00:98:42:cc:04:41:3c:d3:d9:
9d:30:12:59:8c:d5:8d:8e:a8:bc:46:d6:0d:0a:03:
8b:48:c9:25:d2:0b:7c:b6:2f:e9:40:30:bd:8a:e9:
03:94:88:9d:d3:e3:cf:5e:fd:5e:2e:68:65:c0:4a:
a2:25:ae:1a:76:4b:5c:e1:40:13:91:dd:a0:26:a5:
77:96:e1:f0:03:61:a5:d8:7d:3c:c3:46:40:1d:da:
6e:46:c7:c3:fe:f3:77:ae:f8:de:0f:c0:53:dc:26:
13:e1:bf:36:f2:ca:11:85:29:f7:66:9b:d8:8c:58:
9a:45:e7:a8:0f:3a:35:15:bf:57:45:4e:63:98:ba:
77:02:a5:a4:22:8d:a3:f2:93:d9:c7:7d:2e:17:77:
0e:c2:e8:61:95:0d:72:e2:80:5d:66:fe:65:5a:6f:
3c:e5:3c:5e:a3:61:13:75:e1:ab:39:33:55:75:38:
f3:38:0d:1b:91:4f:29:5e:b1:96:98:f2:04:94:ae:
53:77:2c:fb:9a:78:55:32:1b:74:63:83:16:59:54:
88:8e:fb:87:8c:b6:f7:bc:99:90:39:50:d8:e2:99:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:10:AA:81:51:CC:67:FC:67:5B:CB:E4:85:4E:32:4D:5D:E0:65
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:af:b4:ef:33:ef:a0:c7:6b:e9:d0:ab:74:16:e0:47:30:53:
ed:04:5d:fa:c5:2d:35:14:6b:75:22:62:7b:7e:cc:cb:01:14:
f1:47:21:e7:88:18:aa:b2:72:90:ba:9a:a1:95:3d:c2:45:2b:
38:d3:39:5c:2c:05:c4:25:b5:28:f1:47:f5:a2:eb:12:d9:e7:
2b:46:cd:61:ce:6f:4d:c0:cb:06:6c:41:5c:4d:7a:28:c3:4d:
57:04:92:a7:df:cd:90:4c:bf:4f:ae:14:2e:b1:d0:f3:92:02:
5e:73:98:99:21:d5:e7:34:2e:52:c4:a9:7c:00:a7:f2:8d:e8:
30:c6:c6:87:24:78:f9:e3:e0:69:11:d2:e7:e7:d8:6b:1c:c4:
07:bb:b1:36:25:3c:50:0a:6b:8a:23:b0:8c:59:6b:84:4c:9f:
eb:77:ab:3e:ff:f4:5c:6a:4f:2e:ab:25:e0:19:43:5b:36:e9:
80:ed:e6:9c:08:e4:09:f5:01:ff:2c:00:46:bd:33:28:c7:13:
a7:d3:6a:d1:34:f0:10:27:5e:4f:63:9d:15:40:fa:7b:95:bd:
9c:62:92:47:2e:6f:5e:c2:af:85:c6:a1:9d:1a:34:f6:50:29:
d6:d2:43:16:45:dd:53:46:40:86:b1:6a:16:e1:d1:fe:b8:26:
a4:14:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:42:52 2025 by rpki-client