Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: CnEVWjVmuwTiNjTYEvGLXSDIzryZc1HGRsIcFUIVshI=
Subject key identifier: DB:C7:26:0D:2D:0A:CC:8A:78:1F:53:A1:25:73:BC:C1:63:02:A8:02
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 019A7149DE80FC6BEEA551A92F53DB86D843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: romV29VAykc0idzI1WpRr4/ppEwftcpZKqx4F2CQa9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:de:80:fc:6b:ee:a5:51:a9:2f:53:db:86:d8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=dbc7260d2d0acc8a781f53a12573bcc16302a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:30:b3:70:30:4b:5f:33:c5:9a:86:dd:6b:ae:
6e:f8:ec:c5:07:57:be:d5:24:a8:22:0b:9a:40:6b:
4a:6e:a7:36:b2:10:f4:3f:0c:5b:1d:53:9c:1a:29:
96:61:ee:e6:bc:4c:de:7d:53:2b:33:1c:ab:02:8f:
48:ba:a2:d2:a4:35:38:90:07:12:de:91:df:1d:3d:
7a:e2:47:f2:d1:21:a4:42:52:38:f9:cc:be:93:65:
18:64:7d:7e:4f:e9:f5:6f:a1:b6:2a:e4:ee:72:8e:
cb:a9:2b:4c:b9:19:cd:50:38:14:29:13:41:06:f5:
9e:1c:9b:a3:f8:f6:c4:52:e5:3f:f9:f6:9f:72:bd:
a0:b3:6d:41:76:4a:31:48:61:dd:16:1b:98:f8:ba:
0b:c3:63:86:82:f0:a6:56:6e:53:5f:67:d5:49:ff:
b2:47:c1:6d:b1:18:16:bc:ce:3f:38:78:3e:bf:05:
88:04:bc:23:0b:99:e9:32:3a:92:32:77:27:d8:08:
13:51:b7:c0:47:d0:0a:d0:00:b4:76:76:f3:40:39:
d2:b1:75:ca:e5:11:43:98:cf:ee:d0:34:fa:cb:f2:
b2:fd:e3:fa:f9:64:63:c7:cb:9c:c4:75:a1:6f:8f:
2b:cf:2f:39:38:a9:16:67:73:7c:6e:27:ee:01:f4:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:26:0D:2D:0A:CC:8A:78:1F:53:A1:25:73:BC:C1:63:02:A8:02
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:f9:d8:81:3b:d3:d5:3d:5e:7d:6c:58:50:21:57:9c:2a:
67:c0:13:95:4e:f7:9c:86:0e:09:d1:ec:e1:f2:bf:5f:04:42:
09:83:02:7d:34:1a:88:86:d4:2c:7f:50:62:2c:ef:75:99:00:
dd:be:4e:56:3b:24:e0:ae:64:91:e7:86:b8:91:50:8e:f2:62:
a2:a0:a3:f9:e7:2d:66:75:bd:d4:b5:3e:de:06:96:fb:ff:a6:
b0:7d:3c:d7:a9:c5:1a:72:b1:57:20:da:0a:f0:92:22:d5:7c:
a4:37:49:20:03:eb:8b:d0:26:c3:d6:9b:59:5e:28:1e:19:31:
ec:f0:d9:ca:a3:bd:4e:c2:5f:54:76:81:ef:ce:c7:ae:fc:67:
a5:d6:e4:6b:2e:e4:3e:dc:cd:9c:89:c7:fd:a7:02:05:8f:db:
bf:f2:a4:85:57:9d:b3:77:18:2b:22:24:4a:a1:c6:4d:14:f0:
52:58:55:f3:a3:41:15:68:d6:34:40:85:15:20:83:15:27:e2:
7c:aa:dc:ad:b3:e7:47:4c:89:5e:22:bc:c7:33:81:12:ed:f9:
84:6e:9b:5b:a3:df:f9:04:8c:45:ab:9d:4c:6c:1f:b5:42:a3:
77:25:2c:d7:63:42:b3:ef:03:e8:59:8b:be:4e:01:a6:42:9d:
8c:d2:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:28 2025 by rpki-client