Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: rk7Y0KpImBFAfKoTRuFrVp3gWao0jtkaIzDjefBPnzk=
Subject key identifier: FD:E2:2B:46:DF:B0:3D:85:8C:39:05:9E:3B:4F:73:88:E8:2C:09:61
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019A4E187902D4C3CFD681B073D3EC7AA4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 106B
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: g2j3rQPTmnSGM/xF5PSfL98/SJIvmrJVjf0UjfcZJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:79:02:d4:c3:cf:d6:81:b0:73:d3:ec:7a:a4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=fde22b46dfb03d858c39059e3b4f7388e82c0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:de:af:cf:16:a7:f0:6d:5a:a5:c4:c0:9a:
6e:3e:17:c1:47:95:9b:2a:90:a4:f4:f6:a9:19:d5:
45:62:75:68:1e:ec:4e:a2:7b:a3:91:04:e3:c7:fc:
be:b3:28:22:c9:cb:8b:1e:f8:05:f4:bd:3d:f8:29:
87:16:d9:8e:e5:50:5a:6f:8f:1d:ad:b8:dc:67:dd:
6a:ec:22:5d:a3:f1:98:a9:5c:85:64:d4:fd:83:2a:
81:b2:76:86:d8:a0:f0:da:4e:4c:71:09:d7:ca:03:
69:68:45:c6:83:26:09:12:86:e0:fe:6e:7d:86:a8:
f5:2b:f4:f6:df:da:54:19:af:01:ab:08:3e:3f:dc:
52:98:17:73:45:61:40:01:5d:8a:75:d6:7b:fc:2c:
42:a3:7b:4c:7d:c8:55:ed:4e:e2:c6:87:95:ab:73:
d6:c5:c3:40:59:56:fb:c2:96:6b:5f:cf:5c:4d:e6:
5f:9c:19:b0:4e:c5:1d:bb:21:70:83:f6:10:7d:b3:
07:d4:58:25:dc:60:ce:a7:f1:71:86:39:99:a4:e2:
2a:ef:c8:df:ec:48:08:74:23:c5:62:9f:45:9a:a2:
1d:2d:36:8c:a4:ab:e1:bf:15:b6:58:cf:90:c8:83:
40:95:ae:29:2b:74:1e:f4:dc:f3:65:7c:7c:78:79:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:2B:46:DF:B0:3D:85:8C:39:05:9E:3B:4F:73:88:E8:2C:09:61
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3c:1b:fa:61:98:06:84:77:71:b2:38:e5:d6:e8:80:fb:2e:
09:d1:14:f4:d3:89:09:32:83:e5:20:5f:af:5b:de:8b:49:39:
98:2a:11:9a:1a:18:1c:25:4b:ed:37:e4:cb:8b:81:51:be:23:
27:6d:a1:53:e3:71:bd:fb:2b:92:3c:f6:84:d6:f7:a0:f5:fa:
90:6f:94:a3:2d:46:4c:aa:8f:50:9f:22:51:6d:26:bf:c7:55:
e3:8a:88:3f:cf:57:7a:bd:af:0d:3b:8b:04:52:dd:df:fc:f5:
68:7f:75:f1:06:2a:28:60:fe:72:e0:20:2a:fe:a7:65:1c:8f:
e6:ca:66:a5:f7:4b:be:ca:97:a7:e3:74:5d:82:c1:cf:d9:70:
fc:d5:5c:0d:cd:16:d9:3e:2d:aa:a3:53:4e:d0:98:0a:e0:fa:
48:b9:02:b0:23:d2:12:e2:b7:72:d4:78:a5:61:d2:ed:f1:f6:
c7:5f:4a:38:2d:db:9d:42:e0:7a:50:f8:1b:0b:2c:7e:48:2c:
ec:0b:84:fa:28:63:b7:14:8c:46:87:ce:1f:e0:20:96:35:de:
84:75:ad:00:1e:4e:69:d6:91:3d:99:61:28:7d:7e:29:be:27:
e0:46:73:e8:0e:36:f6:a9:d3:21:4a:07:90:ce:6d:9b:9c:93:
71:79:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:40 2025 by rpki-client