Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
File: txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json)
Hash identifier: wpjDH9wIud6sr+nW47s8lBZNOVo8pQPZK41B0lFdidg=
Subject key identifier: 9F:CB:3A:70:42:98:F6:EC:5E:C1:7E:9A:02:3B:C2:75:CF:D3:D1:FD
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial: 019A4EF5DCE78D2F6F0F7A216EC854B5EB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
Manifest number: 13D7
Signing time: Tue 04 Nov 2025 13:02:06 +0000
Manifest this update: Tue 04 Nov 2025 13:02:06 +0000
Manifest next update: Wed 05 Nov 2025 13:02:06 +0000
Files and hashes: 1: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: H1DCaMXDE0BByhcWlDys5Aa6gWjAWaOSURuIbdp6aKI=)
2: y7dJRRp79aTyhXJq7SLE893fmyk.roa (hash: QjKSW2+AFDFFoGHFdC8m0Zba5598T5O0nbfB4lqoZ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dc:e7:8d:2f:6f:0f:7a:21:6e:c8:54:b5:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Validity
Not Before: Nov 4 13:02:06 2025 GMT
Not After : Nov 5 13:02:06 2025 GMT
Subject: CN=9fcb3a704298f6ec5ec17e9a023bc275cfd3d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:c2:19:81:b9:c1:77:32:8f:83:ba:50:89:
79:ce:94:ec:bd:7b:eb:c8:03:1e:7c:9f:c4:6f:8e:
ed:0f:e8:15:68:5f:2f:28:bc:e6:12:44:42:54:63:
89:9c:dd:4f:57:5b:31:67:13:58:52:8c:8a:15:da:
c9:1c:37:1b:b7:c8:1e:88:66:25:22:52:bd:c7:f3:
d9:8c:e3:01:17:2d:51:48:a7:8c:b0:fc:be:7a:8c:
39:96:7e:8c:78:89:dd:3e:2f:6c:71:a6:30:cd:3e:
8a:b7:3e:08:85:7b:c9:c6:67:ca:84:c7:15:17:43:
13:40:3e:cd:28:60:0e:ca:f2:7b:b6:0f:78:0a:ef:
96:02:79:d6:3d:c4:4c:58:1f:02:fc:51:e1:1f:28:
cc:ef:83:0d:42:c9:9c:a3:8e:a9:4a:74:1c:ef:98:
73:1b:d1:d3:ec:d2:06:93:28:da:3f:69:09:06:dd:
45:2f:67:dc:f5:c1:60:aa:5a:49:8e:7f:bd:6f:c1:
22:af:89:a7:ad:f9:bc:75:b5:3c:1c:2f:4d:34:bc:
e4:61:98:35:b0:b3:fc:9e:b1:b9:e4:d4:8c:b3:11:
ac:1b:41:14:71:c4:07:87:59:20:97:cb:4e:9d:d3:
ec:27:8e:6c:81:ac:c8:14:7a:44:81:da:2f:1d:31:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:3A:70:42:98:F6:EC:5E:C1:7E:9A:02:3B:C2:75:CF:D3:D1:FD
X509v3 Authority Key Identifier:
keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bc:0e:70:1a:74:3f:2f:9c:cc:fb:85:4a:df:64:62:bf:8c:
ab:bf:25:cb:c6:96:fd:a1:13:39:65:3f:d7:34:e0:a5:c1:c1:
fb:bb:1e:ea:2a:85:4e:50:f4:74:f0:7f:08:2b:12:62:aa:1e:
a6:20:39:56:fd:dd:d2:3f:5c:41:2a:09:27:a0:14:d2:67:da:
30:fb:6c:03:58:d5:40:94:a5:2d:ee:aa:ca:b4:82:98:f8:71:
26:4a:d5:13:26:0b:3d:a3:0a:45:1e:b7:80:a5:7d:0b:43:0e:
d3:ea:81:63:cb:f9:58:f4:cc:8f:cc:80:48:e9:94:c7:f1:d9:
66:d4:75:fb:24:c5:7f:65:68:cc:98:43:d6:af:bc:78:b6:f1:
7a:71:5a:ef:f1:15:42:c0:9d:c4:b9:b7:e4:b0:5c:42:30:3d:
b0:ad:07:f3:1e:00:80:f5:24:07:66:b4:e3:fd:8e:b8:42:06:
ab:f8:d4:2e:76:c9:50:62:e2:af:54:80:98:3e:4d:55:fa:2f:
8b:91:f9:fa:ea:52:79:d2:63:a0:bc:ed:b1:db:e3:9d:31:d4:
a3:b9:15:7c:55:cb:ca:d4:40:4b:69:ba:86:02:4f:b2:a7:43:
85:02:b6:a7:69:d3:77:ca:ad:d5:23:59:6f:32:2e:c0:a3:76:
46:76:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:19 2025 by rpki-client