Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: tvv6Z6D7WS6ujOspcN9Krjj5TSiSQSaj7prhplt/UMY=
Subject key identifier: 3A:7B:BA:C7:EE:85:30:79:A5:BB:FB:B5:F3:92:FF:0C:75:6F:99:66
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 019A4EF5E78F8F5F0F32D3C285681CEC0546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: da1cHuozroldI/mw3CboIQafpWukKhCY0ENQZY5ycIU=)
3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e7:8f:8f:5f:0f:32:d3:c2:85:68:1c:ec:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=3a7bbac7ee853079a5bbfbb5f392ff0c756f9966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:72:f2:2a:65:46:28:d0:8c:1b:00:69:f0:
55:a5:07:4e:7e:a9:c4:f1:7a:21:1e:3a:4d:39:bd:
8e:03:41:18:ac:09:b9:d3:cc:29:36:28:9e:7d:f8:
b9:c9:43:64:ff:6c:80:76:78:cf:4b:5d:a9:63:70:
2c:89:4f:99:9e:5c:2a:19:46:dc:d7:ad:03:62:5d:
6c:9c:f5:22:1a:0b:88:5c:c2:cc:1e:1e:cc:f8:90:
aa:57:d9:e6:58:f4:ab:65:ee:8e:e2:be:c7:d9:4e:
ca:3a:63:77:30:bf:a4:39:3d:5d:9b:c6:be:1a:30:
ab:ef:1f:6e:dd:c4:21:3f:06:bd:5a:a0:c9:c9:52:
a9:2f:8e:a2:47:4f:85:8e:2b:98:59:50:82:12:11:
ef:83:b7:42:be:50:af:32:8e:ac:6f:4d:d3:4e:2d:
f3:42:d0:d4:ca:29:80:95:42:52:0c:36:89:05:76:
54:d6:fa:c7:7c:90:36:3b:0b:05:5b:2e:02:ac:03:
12:a9:59:fb:78:71:83:de:a0:d1:07:6d:88:af:14:
c7:ed:60:f4:62:a2:47:1b:af:98:d7:70:8c:e6:1c:
f4:5d:40:34:75:77:f2:15:32:82:85:96:65:c3:47:
f5:75:8f:d8:ab:a6:a1:dc:a2:38:81:f2:ac:4b:76:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:BA:C7:EE:85:30:79:A5:BB:FB:B5:F3:92:FF:0C:75:6F:99:66
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:59:4f:06:df:93:0e:f7:11:02:52:7a:cf:96:75:ff:43:15:
91:5a:34:7e:cf:4b:58:25:76:90:9c:ac:4f:8e:c9:0c:95:e3:
92:6e:e2:bc:6d:7d:38:3a:d0:70:7b:24:b8:22:71:46:0d:f2:
dc:dd:e4:04:dd:4f:90:c0:0d:70:ce:18:f1:b7:94:7b:f1:c6:
57:ac:f5:3e:42:17:b7:45:8a:cb:2b:ef:ec:55:df:c0:6e:f9:
66:59:a0:75:70:56:5f:ef:55:7c:03:51:94:e3:a1:a3:11:b6:
2c:7e:27:5a:49:eb:fc:64:65:b0:cd:f5:8e:ea:2c:3d:72:92:
bb:5d:28:e4:14:eb:e6:54:1a:82:18:64:cd:02:0d:c3:32:96:
00:2e:c2:01:67:e2:e1:6b:a7:7e:13:76:76:f9:36:e6:f3:d1:
63:2d:df:50:77:1f:a4:0d:5c:8b:8e:f9:c7:54:cf:20:e4:64:
30:34:3a:30:08:69:6c:f7:29:7e:88:db:eb:2b:7c:d5:fc:8c:
e7:0f:2a:a5:97:22:24:18:11:85:d5:c8:30:51:bc:8c:0b:6c:
5e:0c:bf:f3:d0:d5:69:19:ce:f3:45:33:cb:38:d0:7d:66:47:
98:fa:f1:2c:4f:e6:fb:70:79:61:2a:93:e2:92:9c:6b:58:b5:
95:c8:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:29 2025 by rpki-client