Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: 96dqOV10d0kZIFeesA1HBPj6A6LAhi2GAQzHQ65BEXE=
Subject key identifier: 38:48:CA:68:72:D0:EE:E1:4C:77:D4:C2:F6:A4:54:09:9B:24:61:8B
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 019A23653641AC498AE6D71E9FDE066DD8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 02:00:26 +0000
Manifest this update: Mon 27 Oct 2025 02:00:26 +0000
Manifest next update: Tue 28 Oct 2025 02:00:26 +0000
Files and hashes: 1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: YpuDvx60u/Z0EO+knfpFZYrfkTDug9NBvEpPA6YjwMU=)
3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:36:41:ac:49:8a:e6:d7:1e:9f:de:06:6d:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Oct 27 02:00:26 2025 GMT
Not After : Oct 28 02:00:26 2025 GMT
Subject: CN=3848ca6872d0eee14c77d4c2f6a454099b24618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:e9:70:97:38:5c:1f:c1:50:0e:3c:a7:94:
31:76:92:09:d7:0c:78:21:e2:c6:b0:90:2f:e8:76:
92:51:50:2b:fa:d7:e3:b3:be:4d:80:cf:12:3e:ef:
0c:84:89:bd:bf:2e:16:b8:e7:9c:b8:b9:80:ce:4e:
ee:a7:67:69:d0:a1:3f:31:c4:78:df:a8:1c:3e:49:
82:6c:6c:25:c4:5e:d3:e2:51:30:a7:aa:50:0a:8a:
c1:d5:ae:9e:b5:a6:83:5a:f2:4c:7d:e0:2b:90:45:
bf:9e:76:dc:26:3a:6c:21:c4:54:c0:68:10:18:13:
a0:7d:5c:8a:e7:0e:5a:b1:0b:31:2e:72:77:36:ff:
ce:24:3e:54:3b:20:b5:0d:e0:00:14:5a:21:c8:7d:
f1:80:37:d8:03:90:2a:61:b5:82:87:21:a6:14:0a:
42:32:65:da:b5:17:24:17:4f:ed:ba:f0:1d:6e:20:
c2:b3:41:56:10:a6:2e:d0:d1:4c:e5:aa:cc:ff:2d:
8a:31:5f:2e:ee:81:d9:d2:f4:7e:1d:8c:d6:a5:41:
f8:2b:5b:b5:a6:d3:c8:e1:4d:6c:bf:5c:32:78:2d:
72:ab:07:c7:ac:28:54:c4:23:22:92:27:56:fb:53:
22:60:31:3c:4b:a0:04:2a:37:23:c0:c4:4e:49:f2:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:CA:68:72:D0:EE:E1:4C:77:D4:C2:F6:A4:54:09:9B:24:61:8B
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:ec:8a:c3:eb:74:9c:15:fe:3c:d0:16:a6:95:91:f9:45:
04:b8:a0:0e:ac:43:97:be:e9:5f:ee:6d:1f:e2:4e:49:30:8d:
06:ed:f3:72:82:56:5e:b2:6c:0e:d9:52:74:5e:3c:1b:57:1e:
ed:81:1d:80:6d:72:04:78:e4:70:ec:6b:5c:2a:d6:fd:dc:13:
ef:33:17:f8:8d:fd:7d:25:57:bb:6e:66:60:a5:d6:be:02:89:
67:07:d0:13:f1:dc:9f:0e:4a:3d:52:fa:1d:ab:36:7a:a2:af:
6b:e9:51:85:9a:64:f1:81:2c:a8:3b:3f:bf:9b:4d:06:50:50:
c7:f1:5f:b4:0a:b0:ae:6a:46:7b:ff:11:7f:0b:8a:60:21:b3:
3a:2d:ff:40:7b:b4:95:4f:1f:42:5c:0f:f3:c2:a4:35:70:8c:
eb:c1:b0:75:96:aa:fb:12:9e:3a:a6:ed:17:8b:cb:bb:f8:ca:
5e:9c:f1:46:fa:69:ff:03:57:53:b1:e4:ab:b3:7c:91:d8:33:
3e:fb:70:fe:56:4d:78:95:e7:2d:97:53:5b:a2:4d:37:3c:28:
73:4f:64:72:2d:f9:56:bf:94:9d:89:e2:ea:bd:d3:e3:31:bd:
4a:bb:52:ba:c5:c0:06:40:f0:a1:b2:b4:7e:ca:05:bd:d1:50:
6a:62:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:34 2025 by rpki-client