Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: co4duvNp547nWqmhR2BUpvZOILx8KelpQqETCrB/Ua8=
Subject key identifier: 81:E5:71:99:DC:8C:26:71:CC:B4:F9:16:B5:EB:97:31:34:09:F5:13
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 019A4E86B705B99085400BBCF396EF07137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 0401
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: x4w6SW9vPWk1pQZ2IR3xHlAq+kFwKxTTMV1AY91l23A=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b7:05:b9:90:85:40:0b:bc:f3:96:ef:07:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=81e57199dc8c2671ccb4f916b5eb97313409f513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:25:1a:d6:1d:86:5e:d9:03:f7:9a:a2:27:
94:46:b8:19:db:05:0b:d1:29:c4:f8:6c:40:92:82:
d8:e6:35:f6:93:c5:7f:99:f1:9f:3d:8b:90:70:55:
91:19:95:ca:e0:6f:fe:9a:18:d0:1f:af:c4:56:32:
fb:37:dc:ed:76:f0:1c:27:5b:8c:66:d9:fd:6b:89:
b0:40:3f:a2:c5:87:28:df:ed:16:d3:1f:8b:48:14:
68:65:04:ee:9a:31:9a:cf:0a:91:26:2c:65:6d:1b:
70:9c:fd:6f:ae:9f:be:71:95:e5:60:fe:67:a1:5c:
f7:2b:4b:c8:a7:f1:28:ea:f2:c9:e5:86:e2:ac:7f:
e1:38:f0:23:fb:cc:b7:48:88:6b:0c:79:1a:f9:3b:
b9:91:6a:c2:5b:ee:1b:4e:2e:f3:7e:a2:0f:22:6f:
39:7b:22:55:46:7d:6a:5c:85:45:cb:60:03:52:7f:
c1:36:f8:80:f7:73:bb:c9:58:03:34:42:68:fb:b4:
3c:e9:46:f4:7d:f0:21:40:45:ed:cb:e5:b3:12:31:
88:58:cf:41:90:1c:d5:9c:67:cb:f2:24:5b:d5:f8:
40:48:60:85:b5:4c:69:a7:1e:60:2d:93:d5:c5:95:
c2:1b:12:33:8a:b0:e9:3c:5c:30:5c:98:7c:43:af:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:71:99:DC:8C:26:71:CC:B4:F9:16:B5:EB:97:31:34:09:F5:13
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e3:4d:89:57:a6:ca:2b:98:5b:57:c3:47:a4:d8:96:c8:e0:
cb:63:4a:4b:75:21:5a:20:d3:47:b0:cc:8b:33:d3:99:b4:0b:
70:72:4c:6d:f2:33:f2:81:0b:9b:f6:b9:b4:17:e2:64:9c:91:
75:01:fc:d9:3c:38:44:30:63:d0:2f:00:9d:ab:a4:26:51:e5:
d3:ae:83:65:53:df:e7:0f:ac:5f:56:e3:fc:db:83:85:31:42:
ee:f8:e4:06:a0:0a:19:f2:24:c6:46:8a:90:7b:b7:44:87:2e:
3a:19:36:3f:e7:24:74:aa:6b:71:57:1e:0f:d8:f9:5c:d6:56:
75:8a:02:20:14:bb:d0:0a:dc:6d:0c:d4:6a:e9:e6:c4:e0:23:
ef:0d:9b:bc:78:c7:69:98:38:d2:d3:3d:af:16:7b:6d:26:c6:
5e:7d:05:c2:44:4c:5a:fb:94:0b:dd:87:29:25:67:1c:ab:e3:
86:96:80:b5:e6:95:87:77:50:bb:a3:9b:f0:b5:79:ae:94:3e:
84:e8:02:92:f9:81:9e:ba:18:92:58:12:4e:3c:74:50:d6:00:
72:5a:8d:80:59:ca:35:24:a3:f2:e5:cc:50:bd:98:b5:5a:3f:
b6:ed:fc:25:3a:36:82:cb:3c:44:52:bf:8e:e7:29:02:5c:0a:
ec:c4:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:07:52 2025 by rpki-client