Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: uE0E8A5nuRN9wg5uit4NH2OBQ/Ebq/w4M5nPI68kqVE=
Subject key identifier: C3:8A:E3:8C:7C:49:03:E7:FE:DC:7B:ED:2B:43:96:3E:0A:8B:8A:4C
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019A4D74213EC14939EF2C90D2F215BDF6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 0501
Signing time: Tue 04 Nov 2025 06:00:47 +0000
Manifest this update: Tue 04 Nov 2025 06:00:47 +0000
Manifest next update: Wed 05 Nov 2025 06:00:47 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: cm+ZFh8Lk+aPqozIM0VIbi8MKaUYJf6+cDFuAHXm62c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:21:3e:c1:49:39:ef:2c:90:d2:f2:15:bd:f6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Nov 4 06:00:47 2025 GMT
Not After : Nov 5 06:00:47 2025 GMT
Subject: CN=c38ae38c7c4903e7fedc7bed2b43963e0a8b8a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:70:bf:6a:9c:ca:00:57:27:62:e9:c1:47:
59:89:75:6f:d9:ce:e2:82:0a:e2:62:fb:41:d1:92:
84:db:63:4e:6e:15:fb:41:fd:28:cd:6b:94:54:5d:
38:80:d5:e2:b6:89:e7:4e:ba:01:22:df:bd:42:77:
87:49:b2:de:b6:2b:9b:91:92:42:2c:ac:8c:f8:44:
b1:d2:03:5b:78:4f:81:7e:3d:1d:ca:87:68:65:2a:
74:6f:30:89:4e:78:82:2f:68:ab:11:7b:af:4e:5d:
d8:a1:5f:a3:02:df:4b:96:97:a6:43:b9:75:38:09:
99:d3:6c:9c:a9:23:e0:ac:8a:25:b5:e5:1b:99:9a:
f9:a6:9f:d0:7f:3c:88:0d:a2:5b:26:ae:88:16:c5:
21:de:99:2f:2b:a0:dd:a5:94:07:db:48:98:f1:a9:
3e:97:dc:a4:0a:15:4c:14:8c:c7:5a:f8:ff:b7:f2:
01:a8:87:91:7c:e0:5c:8c:40:c9:f0:64:ef:6e:fa:
ed:19:a0:40:06:d1:84:52:aa:08:68:14:5e:a5:f3:
2c:85:ca:89:5f:43:8e:2a:f9:f9:a7:b8:b6:f1:0e:
a4:22:20:a1:15:af:6e:41:f5:d7:17:00:22:2e:d6:
f7:bb:1c:c0:de:f1:33:5c:9d:f1:97:b8:fd:37:c1:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:E3:8C:7C:49:03:E7:FE:DC:7B:ED:2B:43:96:3E:0A:8B:8A:4C
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3d:02:49:bb:b1:5c:fb:22:29:cb:7b:3b:1c:c8:19:6a:b2:
47:ee:83:fa:ae:11:d8:7f:9e:cf:3d:7b:51:1a:9f:41:90:27:
c7:24:03:68:75:6a:1f:60:08:33:d4:20:3c:04:54:27:87:eb:
2a:5c:3c:de:1c:56:aa:aa:ec:86:40:74:56:62:95:48:49:db:
6a:f4:31:c8:2d:c5:a6:24:6e:e4:b5:32:ee:00:cd:62:57:ce:
35:da:27:9f:1d:c8:ed:e6:87:1d:c0:2a:68:38:1a:e0:b5:22:
2a:39:0c:e7:d0:f2:7b:4a:69:95:16:b0:18:c2:75:ef:36:a2:
b4:f9:c5:44:5f:4a:79:75:b8:df:08:07:77:97:09:23:86:fb:
e1:3a:bf:87:a8:01:43:34:d6:21:25:e1:32:d4:f8:dd:ff:32:
5d:19:69:85:86:0e:fe:b7:17:f6:7a:f3:dd:7b:b9:b7:4d:58:
9c:cc:fc:f1:b3:eb:de:33:22:06:1b:4c:d0:8e:f5:07:0b:a4:
b5:bd:13:16:a7:65:ed:40:43:a9:5e:b4:c0:b3:8f:f9:76:9a:
5c:7b:1c:55:ad:78:c9:b8:b0:c2:86:b9:68:c5:dd:93:fa:5a:
4e:a1:c8:38:ae:97:b4:e1:ed:1a:e1:8b:64:23:60:e5:96:52:
e6:7f:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:04 2025 by rpki-client