Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: 1Xs2N1tkxr4tCqdvXqw2Y0PxMVCupi2bPdjvRCaGkx0=
Subject key identifier: CB:98:36:4A:85:A0:0B:78:71:58:9B:E0:25:1B:BF:36:D9:F4:DE:37
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 0199FC21A0D44738D9A0907669279BEBCAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: B2jAruUCmFtram/gMd/DPpM9zExABw7CO5mEpiA6Ipg=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a0:d4:47:38:d9:a0:90:76:69:27:9b:eb:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=cb98364a85a00b7871589be0251bbf36d9f4de37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:a9:8b:e4:9a:65:5f:cb:a0:22:c5:61:ee:
62:c6:9e:6d:7d:f4:47:a3:d9:21:3e:ff:98:86:f0:
d1:da:a2:c7:78:74:9f:7e:32:99:44:c9:72:72:12:
6d:34:42:d7:94:85:a3:67:11:ca:31:93:63:33:33:
ff:cf:44:60:1b:27:6a:10:f7:f3:17:da:52:50:74:
0c:72:b2:9d:73:19:9d:81:e2:42:f7:81:91:a3:03:
d4:8d:2d:7b:8c:f0:3a:50:3b:7a:9c:e4:ba:1b:e9:
ea:e1:ff:11:0d:3a:50:f6:a4:7b:7b:3b:f9:19:1b:
4f:31:b1:b4:b1:a1:00:84:ac:d2:84:4f:42:3a:4e:
70:6e:09:f0:28:05:99:5a:50:3c:97:5c:82:a8:21:
2c:e2:b6:a4:fe:b3:14:8c:d3:86:24:11:0d:30:fe:
d5:20:2e:ca:c1:7b:52:db:c1:c2:2b:df:63:97:2e:
c3:2a:db:84:cc:85:3e:73:b4:a0:f7:f0:24:d8:f1:
45:5e:ee:3c:44:ba:4d:f8:bd:1b:c3:90:67:38:e9:
da:ea:df:51:d3:ed:cd:57:01:ca:bc:4f:ff:e2:ef:
cc:d0:69:b1:fc:c0:c1:5c:97:78:a8:ce:d4:0d:90:
97:36:e9:e8:ae:7f:67:dc:63:84:a3:5b:92:b3:2e:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:36:4A:85:A0:0B:78:71:58:9B:E0:25:1B:BF:36:D9:F4:DE:37
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:24:03:64:32:65:db:e8:c1:e7:62:2e:6b:a4:0a:13:76:4f:
c3:e5:f5:6b:52:16:0e:2b:17:e2:64:85:48:3d:fb:07:b1:97:
16:75:65:6f:85:8f:de:10:c4:7d:70:13:0c:e7:87:be:aa:f6:
0d:19:82:24:15:de:ae:97:5a:7c:d4:d6:fd:6a:07:b8:8d:25:
d5:6a:f1:d0:d2:23:e1:97:88:57:ab:02:4b:cb:39:7b:df:ca:
d3:60:c6:38:4d:82:c9:47:9c:49:8e:13:8d:50:e2:32:a8:a1:
0b:68:16:25:4b:f8:9c:ee:ff:c5:95:a6:df:96:8c:54:2c:68:
19:03:70:63:d4:b3:55:2e:0d:0e:6b:1e:dd:9c:f7:71:93:df:
06:30:4d:1f:82:75:0c:01:d9:83:ce:c7:b0:f8:63:e7:a2:cb:
d3:be:fb:d1:db:2a:ef:fd:2e:c4:4c:2b:4a:41:8d:d8:49:a7:
c7:f3:b0:55:0e:47:89:d7:fe:dd:0f:18:08:1b:f5:12:44:77:
44:95:13:62:bc:12:c0:f3:72:2d:c2:31:41:a3:61:91:4e:a0:
eb:6d:07:8b:fe:d1:e6:80:57:b8:7e:20:9e:ad:36:61:e0:16:
73:15:a8:16:0d:38:29:eb:df:e9:9a:cc:98:6e:f6:33:f5:05:
97:a4:b9:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IaDURzjZoJB2aSeb68rUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzY4M2Q2ZWE1MzlmZWYxYjZiNmRiZGQ3NGEzMWQwNWU1
ZjBhMjMwHhcNMjUxMDE5MTEwMTI2WhcNMjUxMDIwMTEwMTI2WjAzMTEwLwYDVQQD
EyhjYjk4MzY0YTg1YTAwYjc4NzE1ODliZTAyNTFiYmYzNmQ5ZjRkZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFCpi+SaZV/LoCLFYe5ixp5tffRH
o9khPv+YhvDR2qLHeHSffjKZRMlychJtNELXlIWjZxHKMZNjMzP/z0RgGydqEPfz
F9pSUHQMcrKdcxmdgeJC94GRowPUjS17jPA6UDt6nOS6G+nq4f8RDTpQ9qR7ezv5
GRtPMbG0saEAhKzShE9COk5wbgnwKAWZWlA8l1yCqCEs4rak/rMUjNOGJBENMP7V
IC7KwXtS28HCK99jly7DKtuEzIU+c7Sg9/Ak2PFFXu48RLpN+L0bw5BnOOna6t9R
0+3NVwHKvE//4u/M0Gmx/MDBXJd4qM7UDZCXNunorn9n3GOEo1uSsy6BHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuYNkqFoAt4cVib4CUbvzbZ9N43MB8GA1UdIwQY
MBaAFE12g9bqU5/vG2ttvddKMdBeXwojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQt
NjhiMzc2OGY1MGRjLzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQtNjhiMzc2OGY1MGRj
LzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1CQDZDJl
2+jB52Iua6QKE3ZPw+X1a1IWDisX4mSFSD37B7GXFnVlb4WP3hDEfXATDOeHvqr2
DRmCJBXerpdafNTW/WoHuI0l1Wrx0NIj4ZeIV6sCS8s5e9/K02DGOE2CyUecSY4T
jVDiMqihC2gWJUv4nO7/xZWm35aMVCxoGQNwY9SzVS4NDmse3Zz3cZPfBjBNH4J1
DAHZg87HsPhj56LL07770dsq7/0uxEwrSkGN2Emnx/OwVQ5Hidf+3Q8YCBv1EkR3
RJUTYrwSwPNyLcIxQaNhkU6g620Hi/7R5oBXuH4gnq02YeAWcxWoFg04Kevf6ZrM
mG72M/UFl6S50w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:46 2025 by rpki-client