Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: yoAOQMQnZzXj4KnAXKicQsRwyYm/NyBrGh7hmHDuqTA=
Subject key identifier: 05:FC:15:A2:44:44:5B:6A:61:0A:3A:8C:04:F0:C2:FF:BA:77:5E:02
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019A1B7463A6819DB0A8CA8B12C9A901D2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 13:00:03 +0000
Manifest this update: Sat 25 Oct 2025 13:00:03 +0000
Manifest next update: Sun 26 Oct 2025 13:00:03 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: BcghYccgEkYm/tv9CdRyhssq8dHkXrVqsOlzWOzmwPQ=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:63:a6:81:9d:b0:a8:ca:8b:12:c9:a9:01:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Oct 25 13:00:03 2025 GMT
Not After : Oct 26 13:00:03 2025 GMT
Subject: CN=05fc15a244445b6a610a3a8c04f0c2ffba775e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:bd:fe:0c:9f:f0:ed:cb:72:d5:44:34:49:
29:29:70:66:87:85:3f:c5:10:1b:72:6a:d1:5d:73:
02:12:c7:31:4f:f8:77:ce:45:75:65:5a:b9:15:57:
05:d4:91:ea:f5:59:81:39:4d:8c:e5:86:72:d8:2b:
34:4e:80:e3:45:49:f9:17:d4:6c:89:83:b2:da:73:
da:eb:ea:1c:a0:f5:ea:10:7d:df:55:b5:d1:8b:56:
24:98:45:fa:11:2e:e7:69:13:a7:52:60:20:cd:20:
99:55:ee:16:f1:b0:ec:4a:ec:f6:59:8d:6a:84:f2:
2c:c2:07:f6:2f:13:16:6f:65:f2:d0:c9:dc:b3:86:
03:b7:00:50:45:d9:73:c5:e7:a7:d8:7e:58:e2:70:
82:af:ed:c7:85:cc:a4:9b:4e:d0:7f:7e:21:5c:cb:
39:fb:fb:6d:bf:64:6b:14:c2:4a:41:bb:ee:5d:15:
24:16:62:b2:6e:f1:47:45:ee:7a:e7:36:09:08:49:
2d:fa:e9:ab:a5:ad:74:b4:69:66:86:f2:dd:11:6f:
89:e9:ca:1d:55:25:38:60:0a:82:ee:a7:0d:e3:df:
66:c0:ac:1c:42:c4:d7:69:df:b8:5b:17:5d:3b:3c:
37:64:54:9e:ca:b1:5f:73:be:30:82:6b:24:23:e4:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:15:A2:44:44:5B:6A:61:0A:3A:8C:04:F0:C2:FF:BA:77:5E:02
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:fa:3a:0a:0a:a4:b2:ea:b8:c0:48:07:e9:09:62:e0:53:
d6:0a:7c:54:2a:dc:59:f1:05:89:2f:2a:f6:62:55:75:18:dc:
e5:f2:e6:69:08:7f:5d:69:62:72:31:78:e6:d1:3e:14:71:c2:
ac:ca:9d:68:2e:49:0d:d7:db:ff:ab:33:e4:c6:91:39:26:b0:
da:93:6f:b5:55:b5:10:f6:c4:10:6b:42:9c:7c:d1:9e:c1:5d:
a9:56:f5:61:e8:82:8a:da:c3:f0:5f:1f:dd:5e:cd:aa:9f:ab:
e5:00:06:ce:2f:db:8a:54:8d:9d:25:30:e8:55:2d:85:d3:4f:
06:43:ed:7a:c1:b1:77:57:35:69:c6:44:f6:7b:5b:1c:cb:c6:
87:4e:90:86:21:fd:89:19:79:b3:64:5d:9b:36:c6:e3:26:3f:
f8:99:b7:c0:1e:75:05:2b:6b:ca:79:86:1c:92:79:0e:79:9f:
96:05:1d:46:59:42:cb:c7:71:74:df:e9:da:68:d2:7d:f5:a4:
e6:ec:84:b2:c3:d1:5b:fb:7a:44:5f:a2:36:22:78:b2:2b:0f:
5f:c7:14:a4:62:aa:b4:fe:22:2c:e5:41:59:90:57:8f:7e:81:
03:d3:fe:9d:14:ca:49:ad:50:05:b4:df:7f:d5:38:9a:b1:4a:
96:20:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:59:21 2025 by rpki-client