Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: lpxB1RbVMqZ82ZS4J3Ec2VksB3K92laSVteqcqi0beI=
Subject key identifier: C1:AA:3F:62:FF:C4:DA:E3:C0:73:E5:F7:2A:71:BE:D1:13:DF:BD:52
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 019A4E4FDFF41BA4AEB422F91DB312EB745B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: BFxTAqqqXMD6YQficgCK8BrqB/CjCPUg2h6UqXtEC7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:df:f4:1b:a4:ae:b4:22:f9:1d:b3:12:eb:74:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=c1aa3f62ffc4dae3c073e5f72a71bed113dfbd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:6b:56:9c:c7:ef:13:a1:20:41:a7:0b:0b:
eb:17:e1:2e:d6:e5:ae:37:0d:14:92:76:c1:41:ba:
2f:2e:04:9f:81:00:ec:e3:8d:5f:85:75:94:43:57:
2c:cb:e5:61:27:70:47:86:a8:c2:70:7b:0a:2f:ed:
36:94:fe:5f:cd:ce:11:9a:1a:c9:5c:fa:e8:8b:c7:
55:bc:5d:01:6a:67:b2:28:da:1e:d1:0a:4c:1c:6e:
1d:18:76:8f:57:f4:e7:24:35:3a:11:b5:bb:90:67:
a2:40:6f:4b:ed:bf:00:49:0d:a5:60:32:dc:a6:33:
03:fd:0d:f8:e8:22:02:b1:ae:81:f3:96:a7:25:11:
f7:9f:7c:21:11:7c:62:5e:75:d0:8a:68:97:18:4c:
52:09:22:aa:07:ae:b5:d5:b7:24:1a:f3:72:c2:47:
68:e1:14:5b:17:fd:0e:0d:4a:9d:dc:75:ea:45:a6:
84:7b:d1:53:16:6d:50:1d:7a:46:15:ab:fa:87:56:
c8:e8:f0:15:9d:a1:9d:a6:98:df:f5:f9:ab:32:36:
30:ec:3d:81:3d:36:15:82:fe:0b:dc:f4:71:0b:bb:
27:25:51:1f:9f:0c:45:1d:88:60:f2:b2:3e:1b:86:
56:61:38:20:e6:2c:42:81:4f:b5:88:fa:cd:7a:2c:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:3F:62:FF:C4:DA:E3:C0:73:E5:F7:2A:71:BE:D1:13:DF:BD:52
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ab:9c:72:0b:42:eb:61:32:75:6a:ef:1a:b5:0a:d8:81:a3:
1f:3c:2f:9c:6f:1e:75:4c:9e:e2:cb:a2:87:31:a0:76:06:36:
d3:9a:d4:66:0e:60:e7:3b:39:81:62:ba:5b:a1:22:f7:0e:4e:
da:97:cc:9c:93:1b:9e:a3:a4:87:56:c3:a6:ca:f5:18:a9:c9:
fd:86:c5:f7:48:4b:4e:f9:83:46:ad:41:71:cf:12:d5:de:2a:
99:ca:80:4c:01:79:6e:e8:1e:6e:cf:2b:04:9c:e3:c0:8f:01:
95:87:67:bc:90:2b:95:0c:10:56:1b:cc:5c:73:0d:82:e6:5e:
7f:07:ed:02:f0:0d:fc:c5:ba:ce:d9:63:35:66:cd:84:1c:9e:
1a:5d:be:e3:b5:08:af:e0:31:d3:e3:61:2b:d2:81:c5:18:de:
d2:42:57:01:32:d1:9d:57:38:b6:f6:2e:36:cf:4d:07:09:46:
0b:9f:2d:13:38:ba:cc:f8:d5:91:e9:57:f3:c8:15:11:9e:a0:
7d:c7:c3:b8:54:48:ea:61:76:64:92:1f:73:e0:67:ec:2e:c1:
63:c3:a1:b2:9d:82:49:1f:12:1c:58:5c:2d:df:65:73:89:d0:
97:40:7a:f3:8b:fc:f6:a1:d6:1c:19:96:9e:37:0f:79:a1:90:
1c:74:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:57 2025 by rpki-client