Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: WbOkxWHJU+zA037JuNSI8W2lNlFB29LTEAQSn0gi4fg=
Subject key identifier: F4:5B:FF:E5:70:6B:7A:61:D1:DB:A2:C8:C0:6A:51:C4:63:AA:CC:23
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 019A4E18CCDECB419688B89612545CD2D6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: tfx4zqExXle+vLakjU5byHYUOsIWK1fAekhtw7h6dTA=)
2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cc:de:cb:41:96:88:b8:96:12:54:5c:d2:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=f45bffe5706b7a61d1dba2c8c06a51c463aacc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:0a:8d:7c:5f:27:6a:09:d5:83:be:b3:03:
6c:56:26:1e:01:09:00:70:51:71:de:a9:53:b5:1d:
24:05:fc:82:d9:3b:9c:64:d0:6d:e6:fc:70:53:d1:
b8:5a:4c:e5:ae:80:3d:43:a4:3f:b4:59:a1:2c:48:
a5:c7:74:94:b6:a0:8f:d8:80:5d:61:1d:7d:67:ba:
8e:01:a2:8b:12:17:c3:ff:55:8a:31:a3:7a:33:d6:
6b:68:9a:e6:09:c2:f4:46:ce:fd:e7:a1:58:94:94:
c3:49:42:be:9f:82:c2:86:df:d8:3d:d2:04:82:df:
c7:fa:2b:fe:a2:8b:44:cc:47:6d:a5:4f:ff:cb:f4:
2a:85:f5:54:8f:e3:83:ac:2e:ae:67:44:5c:ab:88:
e9:6d:06:21:31:b4:5b:60:db:e2:26:21:23:94:dd:
14:3b:41:a1:5f:87:92:83:e9:c8:f8:27:e5:c7:33:
93:f7:33:fb:c5:5e:da:a8:64:8f:dd:e1:13:9a:10:
47:d7:d6:a3:5d:7b:66:f6:e8:61:d1:49:fd:5c:80:
ca:ad:cc:8f:9c:30:cc:a1:b8:36:f8:2a:83:6b:4a:
33:a1:4e:f9:01:32:40:68:48:e1:d0:6a:a0:0c:7e:
d5:80:bc:9f:1e:f0:91:8f:57:82:c9:25:23:86:4b:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:FF:E5:70:6B:7A:61:D1:DB:A2:C8:C0:6A:51:C4:63:AA:CC:23
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:13:72:0c:4f:29:0d:e7:82:19:51:65:59:eb:2f:09:f7:a9:
85:93:c3:38:99:62:91:1b:e9:f2:f5:2f:2a:14:41:15:14:80:
81:77:77:ee:df:99:99:55:f7:fe:fe:aa:53:7d:14:f1:24:0a:
d8:70:b3:a8:c7:11:72:cc:11:b3:05:76:ec:e8:9d:63:32:45:
31:b6:51:30:85:1f:62:5e:0a:09:97:0b:ec:e4:ae:80:36:80:
88:05:1b:e0:1b:67:21:ab:bf:24:cb:d9:e0:a5:9c:b5:5e:f2:
33:1a:04:d7:cb:f6:7d:d0:56:27:f2:46:49:17:56:47:07:87:
97:26:f0:ea:96:bb:0e:9e:e5:cd:59:92:54:f0:53:43:e9:2e:
6a:f2:6e:be:de:ba:c6:2b:51:3a:f9:26:94:95:77:db:29:52:
7d:32:2d:7b:7b:28:21:a2:7a:ef:97:6d:9d:1c:4b:84:17:8f:
cb:77:7d:ff:10:62:73:ba:5b:b6:11:9f:68:5d:31:70:ab:34:
1e:8c:c9:ae:cf:2d:3d:ba:16:f6:25:c5:9d:fc:6f:ef:73:67:
74:63:4e:96:2c:b4:07:e3:ed:36:9f:e8:c6:6d:58:89:b8:b9:
c8:5e:e7:a1:0b:5b:89:6f:87:e5:98:11:8d:c6:c4:dd:e1:eb:
84:41:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:55 2025 by rpki-client