Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier: vRE6hhtqwbjynsmnntxpD8IMhQvG0oDeIs+DNeJ/g9Y=
Subject key identifier: EE:F2:AF:73:65:88:5C:5B:6E:65:0F:64:22:B5:A9:58:C1:9F:A5:90
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019928209BDF8BDB8A9E03190A72959D11E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number: 1676
Signing time: Mon 08 Sep 2025 07:00:49 +0000
Manifest this update: Mon 08 Sep 2025 07:00:49 +0000
Manifest next update: Tue 09 Sep 2025 07:00:49 +0000
Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: AH8/5ZIeukl5g7WWZl1Zwl8HFhG3vERwGR8JRPd+c1M=)
4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:9b:df:8b:db:8a:9e:03:19:0a:72:95:9d:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Sep 8 07:00:49 2025 GMT
Not After : Sep 9 07:00:49 2025 GMT
Subject: CN=eef2af7365885c5b6e650f6422b5a958c19fa590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:0b:17:0f:18:5c:aa:27:05:e1:58:12:9d:
89:6a:0b:d3:af:e2:19:22:48:86:c8:da:b6:b4:8a:
9d:c3:2c:f0:47:89:d7:76:45:ca:72:33:70:dc:7e:
1d:ac:c0:22:b9:08:58:66:e6:cf:a2:9f:1c:ce:31:
c0:b8:bc:e6:e5:52:cd:f9:b8:10:2d:da:1e:33:70:
e4:6e:47:57:60:10:2e:3c:9a:cf:a1:56:9a:83:f6:
48:4a:54:3f:f2:03:1a:79:d5:0c:68:eb:8e:d4:d3:
8a:95:3e:09:a8:37:88:1a:fa:6b:1c:1d:b6:02:93:
67:0c:1f:65:b9:60:58:f4:b6:e3:06:c8:29:a1:1f:
c6:c7:a3:6d:11:c6:88:d2:40:b1:23:4b:a3:ce:53:
2e:8d:fb:6e:c3:ad:fd:a7:9e:06:ed:e8:b7:bb:bc:
e3:9d:1b:12:8f:52:41:75:a1:a7:91:e7:1d:1a:1d:
fe:92:92:3f:1c:83:e3:84:83:4f:7b:0d:3b:01:9f:
64:32:aa:a6:d0:a1:d5:b0:fd:60:32:32:cf:cf:d8:
6c:4c:25:27:46:2e:1b:3a:85:0e:3d:f9:8c:7b:2d:
7b:7f:01:48:3a:48:ff:6b:b4:05:72:52:6d:25:f3:
7d:3b:d2:dd:04:6b:72:17:4e:b0:c7:94:1f:82:f2:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:AF:73:65:88:5C:5B:6E:65:0F:64:22:B5:A9:58:C1:9F:A5:90
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fa:d3:2b:7e:6f:01:81:1c:86:8a:5f:06:82:94:2f:1b:b8:
c7:66:1c:2b:d6:36:1c:90:17:4f:65:db:a1:ee:f7:60:c1:fe:
3a:f1:11:8b:71:c1:78:da:05:c4:bf:c2:c7:08:64:6f:4f:26:
a0:1b:5b:96:75:93:18:e0:28:fe:67:8e:05:01:b9:1f:82:42:
78:b6:9b:a5:d0:0b:9b:b3:ca:c7:88:a5:5d:32:f7:38:43:69:
04:58:31:2f:64:36:e8:bc:d3:e1:97:59:f5:d8:fe:27:ea:e2:
8d:cf:7f:b9:d3:61:f9:e1:e3:95:90:13:a2:88:7a:af:41:eb:
5c:70:91:5e:87:bb:d6:c4:fe:96:50:ad:41:f3:40:eb:3a:db:
28:9c:70:c2:fd:69:e7:f7:7e:cf:55:31:69:a3:cd:9f:99:75:
06:e7:9f:90:e7:db:a1:2b:64:da:2d:c3:1c:28:f1:6c:0d:c5:
27:48:8c:57:ce:c9:9d:11:54:f8:66:5a:33:4e:c0:e0:8f:83:
f9:fb:89:4d:32:e9:37:9c:18:0c:15:bf:76:13:47:32:99:b8:
e0:a8:10:27:79:ad:a4:1d:53:d8:54:fd:5d:d2:2e:a9:7b:9f:
9d:32:7e:0a:88:57:e9:a5:50:f9:ab:08:a8:08:f7:a9:5b:24:
92:85:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:21:17 2025 by rpki-client