Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: OINIHGpFRcEZaty+mXUG/P6Ge22Ouy5XHn4k5mz3Hdc=
Subject key identifier: 3C:E9:BE:AD:98:32:25:BE:25:5C:C3:2F:0A:2B:A4:FA:2D:20:F8:22
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019A4EF5BF155BD5317295D2D9AD19FB81A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 9knXlbb2/P6Vy0itkTBrcQheHQWEwJq6WoBzdv/exlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bf:15:5b:d5:31:72:95:d2:d9:ad:19:fb:81:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=3ce9bead983225be255cc32f0a2ba4fa2d20f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:13:46:bd:d0:c2:00:36:f3:c9:6c:8b:c5:
a2:00:0d:f7:51:84:b6:41:c5:d2:3a:bb:c6:cf:cc:
31:2f:f4:08:47:5f:f9:5f:ba:2a:62:e2:87:af:60:
58:93:66:2c:50:8f:2c:48:ea:d0:3f:2d:fc:f6:77:
bc:ab:20:37:71:37:52:74:2f:95:75:b9:3a:c4:1e:
f1:d1:37:7b:b7:45:e9:6d:62:32:95:e0:04:92:fc:
58:ce:70:2f:32:d5:b5:f5:c8:2c:17:9c:79:27:26:
1d:f6:7a:44:fa:5d:9c:7f:b9:1e:06:27:df:13:7c:
f6:26:8d:e9:77:d2:74:77:aa:92:1a:1f:c9:be:b3:
a0:c9:e5:63:c6:14:95:f3:c3:13:21:0f:a8:f8:9a:
05:65:89:09:85:8b:3a:a4:a6:42:26:93:8a:a8:fe:
2e:1f:d9:42:ad:89:23:c9:a0:b7:7a:b2:2a:e5:73:
ce:5c:3d:bf:11:45:05:4d:12:ea:a6:e4:a8:60:d3:
78:20:70:cd:b8:14:43:59:ca:ea:1d:a4:09:ae:10:
09:e8:22:18:1c:bb:33:29:e8:05:de:b4:55:a5:b1:
b3:10:ba:7b:b8:85:23:ea:73:80:bd:63:34:ed:4a:
c4:e2:fc:dc:e5:78:0d:01:eb:28:bb:39:31:c4:25:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:BE:AD:98:32:25:BE:25:5C:C3:2F:0A:2B:A4:FA:2D:20:F8:22
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:44:c7:2f:ee:80:42:8b:e4:3e:b9:54:45:5c:b7:71:01:6e:
61:bd:2f:8e:0e:e5:87:f8:4e:a5:f5:37:13:a6:7d:a7:98:a5:
1d:ce:26:fd:1b:d8:70:1b:68:88:ac:71:a9:82:ed:31:e4:e0:
f5:33:6c:0f:e8:b7:8c:83:38:f8:24:1c:4b:4e:dd:cf:cf:d4:
76:82:2a:b1:c4:93:bf:9a:96:1a:62:68:91:37:5e:e9:a3:51:
09:a4:34:75:a9:2a:06:1f:91:66:10:74:af:ac:18:6c:fd:5d:
fd:fd:1c:00:e2:40:fa:d5:df:67:44:63:81:bb:14:73:75:50:
1c:3d:e5:58:43:8a:7f:ba:e7:02:a2:7a:4e:be:5b:46:d9:c0:
b6:be:8d:61:53:8c:a7:f4:e2:ea:8a:cd:2a:0f:f6:0b:14:c9:
22:ce:d0:a4:69:0c:6a:8d:9d:5a:53:86:3d:36:6a:43:ac:c1:
3a:29:b7:76:eb:a0:93:fa:d7:c1:ff:a7:a8:da:23:e2:dd:e0:
a1:0c:3e:a2:b0:bf:4f:e4:d3:b7:2a:17:65:cc:6b:93:35:d4:
6e:d9:cc:4e:7f:36:e9:40:6f:42:4c:4e:f5:31:c8:bb:e3:71:
64:54:dc:7b:bd:92:03:09:49:55:09:22:85:bc:31:97:6a:d8:
6d:d1:8b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9b8VW9UxcpXS2a0Z+4GnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjUxMTA0MTMwMTU5WhcNMjUxMTA1MTMwMTU5WjAzMTEwLwYDVQQD
EygzY2U5YmVhZDk4MzIyNWJlMjU1Y2MzMmYwYTJiYTRmYTJkMjBmODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrwTRr3QwgA288lsi8WiAA33UYS2
QcXSOrvGz8wxL/QIR1/5X7oqYuKHr2BYk2YsUI8sSOrQPy389ne8qyA3cTdSdC+V
dbk6xB7x0Td7t0XpbWIyleAEkvxYznAvMtW19cgsF5x5JyYd9npE+l2cf7keBiff
E3z2Jo3pd9J0d6qSGh/JvrOgyeVjxhSV88MTIQ+o+JoFZYkJhYs6pKZCJpOKqP4u
H9lCrYkjyaC3erIq5XPOXD2/EUUFTRLqpuSoYNN4IHDNuBRDWcrqHaQJrhAJ6CIY
HLszKegF3rRVpbGzELp7uIUj6nOAvWM07UrE4vzc5XgNAesouzkxxCUiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzpvq2YMiW+JVzDLworpPotIPgiMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0THL+6A
QovkPrlURVy3cQFuYb0vjg7lh/hOpfU3E6Z9p5ilHc4m/RvYcBtoiKxxqYLtMeTg
9TNsD+i3jIM4+CQcS07dz8/UdoIqscSTv5qWGmJokTde6aNRCaQ0dakqBh+RZhB0
r6wYbP1d/f0cAOJA+tXfZ0RjgbsUc3VQHD3lWEOKf7rnAqJ6Tr5bRtnAtr6NYVOM
p/Ti6orNKg/2CxTJIs7QpGkMao2dWlOGPTZqQ6zBOim3duugk/rXwf+nqNoj4t3g
oQw+orC/T+TTtyoXZcxrkzXUbtnMTn826UBvQkxO9THIu+NxZFTce72SAwlJVQki
hbwxl2rYbdGL7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:57 2025 by rpki-client