Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: lzhmDAtrvWafqGsOWZBePSYDsvKXnFugMZTd59wZJZk=
Subject key identifier: F3:69:BF:AE:FB:06:10:94:3E:88:5D:0A:27:1D:FA:8B:B2:7B:C6:3A
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019A4D3CF16B4571FBB6929451E2E0008A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: M/HAk44kCniJy5qNGjmKhFAZn1Q84cx53w1C+C/8UBo=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f1:6b:45:71:fb:b6:92:94:51:e2:e0:00:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=f369bfaefb0610943e885d0a271dfa8bb27bc63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:80:db:fd:d4:7a:82:a1:f6:91:57:b5:c4:
f1:0a:be:12:a4:43:ae:43:f5:a5:52:ce:6d:46:f9:
cb:c5:7f:fe:1e:ed:46:03:f6:80:fe:60:7b:58:f6:
60:59:50:0e:bc:93:64:5d:26:8a:b4:9e:9e:00:0b:
cc:68:04:b5:11:7f:67:3d:42:93:06:68:ad:3a:02:
a2:d0:62:40:bb:13:51:21:e3:6b:25:1e:1c:de:bf:
e8:10:70:11:59:cf:fc:b3:9d:a2:16:0b:20:c4:50:
4d:8e:8a:ae:8b:24:5a:25:00:7a:2a:82:65:0e:82:
9b:75:9a:9a:39:f1:9a:3b:96:64:62:b4:83:f9:4f:
ac:4d:17:73:38:00:be:3f:13:07:80:37:c6:82:7b:
1c:c4:b9:79:fd:7d:42:3e:6f:0f:71:9e:97:fe:6e:
73:1a:0b:87:f2:d1:c0:cf:f5:9b:59:00:16:b3:11:
72:4d:e6:b0:2b:90:2c:50:f0:ab:e0:cf:be:85:95:
38:3a:bf:d3:8e:28:b9:2f:05:d9:93:07:07:3c:d7:
6b:2d:59:90:e1:42:17:6b:78:03:78:5d:dd:bb:49:
f0:12:08:2a:c1:e2:16:50:c4:d3:f4:ff:ac:bf:87:
55:5e:83:7a:da:23:b8:25:11:e8:07:ef:01:8e:09:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:BF:AE:FB:06:10:94:3E:88:5D:0A:27:1D:FA:8B:B2:7B:C6:3A
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:7f:51:46:bd:c2:78:d2:7a:6d:41:99:99:5e:96:e3:01:
dc:8b:35:7a:d9:1b:9b:ad:0c:c1:5b:5a:9d:fb:8c:6d:46:75:
25:16:db:eb:2d:5e:33:76:2b:70:7e:be:03:94:68:95:10:4d:
a2:8b:62:a5:34:8c:56:73:51:6e:27:e1:9c:cf:ea:cc:58:4f:
4c:24:39:29:f6:a2:59:ed:67:79:73:c3:76:e0:aa:62:f6:d2:
8d:f7:db:87:4e:a8:5b:fb:1c:27:f4:72:e9:a0:24:6d:bd:f0:
fb:65:d2:fc:5e:bf:be:da:7c:99:49:ff:56:ab:78:5a:6f:54:
53:b4:3d:c6:f0:82:4c:71:9f:93:54:f3:c9:82:6f:61:f0:62:
1d:18:66:a8:8d:a2:43:08:b5:66:7e:5d:ca:83:e8:5e:ba:5f:
4d:ba:33:71:0f:74:91:99:97:bd:9a:f1:9c:d8:76:01:b9:21:
d3:df:68:6f:93:26:12:9d:88:a1:24:5e:f1:b1:5b:1c:dc:89:
a9:8d:05:53:e3:b4:f7:3b:27:f3:aa:d5:24:e9:14:d9:3b:13:
e9:e0:cc:4c:00:30:75:89:f5:d6:56:c3:37:79:e4:bb:0e:95:
40:50:20:ea:77:64:05:f9:60:35:29:b5:71:29:78:fb:2e:09:
af:cb:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:21 2025 by rpki-client