Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier: JCvDMhx5a87IP0CKR2C1yvXMOqoG8MGYlqeTQsyqj5Y=
Subject key identifier: B8:77:22:84:7B:1C:4B:D3:95:52:73:DA:62:FB:1A:4A:CA:7F:EA:D1
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial: 019A4EF502292ECE70B9C2953AE2509061BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number: 10F6
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: mGzhovEQQSiiQTpaMSXSZSCbE2H/d3TIQEXy4mniTTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:02:29:2e:ce:70:b9:c2:95:3a:e2:50:90:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=b87722847b1c4bd3955273da62fb1a4aca7fead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:27:07:41:7f:9c:18:e4:cd:a0:5c:a6:cc:
4e:d2:8d:6b:0f:ac:b1:99:23:67:f9:5b:18:f5:f0:
f0:b1:14:f0:7e:b7:7b:21:ea:75:ed:0f:50:49:51:
a6:49:93:a9:cc:2e:b7:76:65:58:36:97:71:47:0a:
eb:44:61:8b:fe:0a:6b:5a:61:50:9b:af:07:58:51:
ef:e0:74:3c:32:e2:37:2d:d5:40:6f:ad:52:4e:56:
df:00:55:b2:50:90:14:98:6a:d6:d1:05:00:de:09:
a2:19:50:67:46:22:da:e8:a6:c0:7c:ae:5d:f9:5c:
25:e1:66:57:54:c5:a0:16:44:86:97:d8:23:3a:c7:
ac:d9:52:e9:2d:5c:61:59:85:61:58:74:e8:86:97:
33:61:0f:04:7e:9e:58:0b:68:02:fe:5f:82:4a:2b:
9c:21:9e:e7:d6:52:3f:7d:ba:a1:af:41:b9:9e:16:
67:97:d2:8d:f8:da:35:98:07:f3:ed:a9:8f:96:0e:
c7:25:fd:4d:fd:6e:51:49:75:73:7b:31:02:08:6b:
6b:54:15:a5:72:03:f6:09:a7:4e:50:50:30:25:68:
d8:28:10:7b:1b:f9:08:e2:e4:7a:3f:5e:14:8b:4e:
e1:e5:5e:8f:8a:0b:1c:e6:85:7a:dc:95:f7:b7:20:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:77:22:84:7B:1C:4B:D3:95:52:73:DA:62:FB:1A:4A:CA:7F:EA:D1
X509v3 Authority Key Identifier:
keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:75:e8:9d:eb:89:80:e5:39:6e:e8:06:c9:39:de:2c:44:14:
d1:14:a2:78:8b:89:17:25:47:94:9b:44:2d:76:71:a2:ec:8e:
cb:fb:5c:e8:08:7d:b6:b7:dd:c7:cb:4f:22:a6:3c:11:3d:f4:
7c:49:86:2a:84:34:ac:34:71:17:c2:83:d1:bd:95:aa:a9:70:
cc:d5:fa:7a:4a:a2:c2:68:66:da:dc:2b:b9:51:70:32:be:b6:
a2:50:ed:19:f7:89:c6:06:15:93:e9:53:0c:2b:d4:58:f5:57:
2d:c9:3f:70:bf:2e:bb:a5:85:5f:7e:0e:87:7c:b4:e0:16:5e:
bf:6c:e6:2b:8b:cd:a6:7a:50:46:89:b7:06:44:a5:1a:a6:c4:
80:7e:b0:28:0f:5a:cd:6c:96:24:9f:7f:31:2c:4d:c2:69:c3:
95:02:79:f7:af:2b:7b:c0:e1:eb:c8:87:2a:11:1c:c7:76:37:
f7:c6:75:b0:e6:35:9a:fd:27:f4:3b:c4:1a:b5:ea:08:23:10:
5f:62:5e:54:ea:d0:af:69:ae:0b:92:43:7c:14:87:4b:a1:62:
8e:1a:f0:fd:f0:4f:7b:15:1a:3d:93:de:6d:ae:28:1d:55:27:
fd:10:e1:f8:fb:06:13:54:c2:97:37:5a:5c:b1:99:b7:94:c6:
ef:60:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client