Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: rH5pLO9yz9FmAtayLCkCdIxs2nZtK9gEFXq38Acy070=
Subject key identifier: 3E:1A:51:1A:00:63:33:2D:D1:C9:AC:CD:BC:A9:6F:E6:12:3B:75:70
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 019A4FCFCE9B16A8E490240F008ED5DABF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: AdrDTyZb28ilSV43Y9rjov6yCnCzcNMyEyhs/vMArXI=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ce:9b:16:a8:e4:90:24:0f:00:8e:d5:da:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=3e1a511a0063332dd1c9accdbca96fe6123b7570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:e2:f2:10:cf:6c:53:db:63:ea:74:72:38:
51:99:18:38:df:75:56:0c:b8:f4:55:f7:73:ed:0e:
64:28:63:58:ad:c8:60:10:14:6e:6f:d6:8f:89:f3:
fb:da:a9:dd:4b:2b:dc:1f:1b:a4:68:8b:54:e7:a5:
e5:d2:dd:df:43:ca:17:02:32:93:ab:4d:8d:2c:8c:
5a:f0:8d:12:04:dd:3a:45:7c:ec:82:87:66:2f:5d:
e3:df:37:68:50:b5:ba:73:a5:74:65:85:2d:ee:38:
43:4e:f6:96:b3:9d:1d:b3:3c:f7:9a:32:6f:7b:04:
e1:3a:ca:0e:d5:bb:b3:24:2f:c6:02:8d:82:ac:c8:
19:00:98:dd:b2:c6:b1:0a:f6:d7:95:34:94:fa:98:
11:58:45:01:0c:25:46:cc:68:f6:74:7c:95:5e:88:
83:2c:ac:24:e4:6f:d1:9a:de:db:36:6e:5d:f0:49:
3c:b3:9a:63:36:79:76:5d:21:cf:71:74:6e:41:ef:
3a:ed:09:b3:fe:3a:aa:82:68:46:53:17:5c:f4:00:
64:e2:30:bf:19:8c:a6:5e:4d:0c:cd:3f:f3:01:ea:
a4:ea:da:e8:40:96:98:95:fb:13:e9:83:f0:f4:ff:
e2:ec:7c:73:6c:c9:27:0a:df:f6:5f:94:bf:e4:8e:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:51:1A:00:63:33:2D:D1:C9:AC:CD:BC:A9:6F:E6:12:3B:75:70
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c5:84:bc:30:d6:3c:be:d6:28:9a:87:9b:f3:c2:d0:9c:d2:
01:ac:71:a7:d8:09:d0:00:43:38:24:ab:74:b2:72:20:83:2b:
40:fc:6f:60:b4:9f:5f:ec:d9:35:d4:9a:77:9a:5f:c7:23:a7:
30:1f:ed:f6:3e:c1:cb:56:2f:74:6a:6b:f2:68:6e:1f:4f:f6:
f1:38:75:ff:72:72:d1:94:2a:9c:1b:57:4b:36:ce:ad:db:24:
4c:12:b9:ec:d6:c0:0f:a8:5f:c3:64:bd:2e:4b:a4:aa:26:b1:
b9:0c:c8:55:ba:67:61:0f:20:8b:21:1a:f9:a7:36:6b:e0:90:
b2:b3:d4:5c:cd:66:ec:68:9d:df:29:3c:0b:c4:1e:dc:38:1f:
cb:6d:f8:ce:5a:66:c6:66:c4:2d:72:b8:ea:60:ce:7a:9d:a1:
d9:de:d8:f9:f2:2a:a2:a8:2a:9f:af:23:25:21:e1:b0:78:a3:
32:dd:61:bd:e0:40:d4:19:88:61:16:96:e7:01:30:3f:f8:71:
44:c1:9b:05:0e:fb:7c:15:20:b1:2f:90:8d:09:8c:8d:ac:02:
ef:54:bd:2b:13:8f:e2:34:84:aa:95:1c:09:05:e2:ad:eb:0f:
eb:18:c7:59:7d:15:d4:96:a7:b4:8d:20:50:38:94:31:7a:a5:
9a:56:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client