Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: yUxwEcZsxwnWZE008bLoWkYHzFSBOYrp8mYv4/JzrSw=
Subject key identifier: 74:73:A1:64:68:E7:01:1F:AB:77:2A:B2:43:77:70:4D:2D:34:6A:70
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 0199FE46B87A697E474729FE28E214D7053B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 04D8
Signing time: Sun 19 Oct 2025 21:01:11 +0000
Manifest this update: Sun 19 Oct 2025 21:01:11 +0000
Manifest next update: Mon 20 Oct 2025 21:01:11 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: RgAkIMpKbnNiwMoQXNee4RsGoD6wrWNsR38fyj+N+YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b8:7a:69:7e:47:47:29:fe:28:e2:14:d7:05:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Oct 19 21:01:11 2025 GMT
Not After : Oct 20 21:01:11 2025 GMT
Subject: CN=7473a16468e7011fab772ab24377704d2d346a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:72:9c:ef:32:5b:9a:50:00:6a:70:3e:5e:
03:69:56:7c:03:1b:ef:48:84:f5:81:6f:9d:fc:9f:
5d:42:15:98:4e:2f:4f:be:f4:a5:ea:72:55:38:47:
39:7d:71:b4:47:39:6e:9a:d3:c0:70:96:ae:fc:89:
28:4e:e8:23:a2:14:84:82:9c:e0:ea:8a:9d:9e:ff:
ee:a4:e8:c6:25:bb:7e:a6:7c:a9:c1:87:8b:e4:89:
b3:35:aa:8c:e7:de:ff:ad:84:9f:f3:6e:c4:e4:cb:
e7:f0:86:64:27:95:c1:08:55:e8:1b:69:78:27:bf:
b0:2d:b3:7b:d7:fb:ef:ec:9c:21:78:9e:4a:3d:6f:
25:b1:8b:60:92:8d:4d:e2:16:39:5b:c4:31:d4:20:
46:45:3f:32:f1:2a:4e:f7:93:55:13:a5:1d:eb:86:
fb:0c:9a:cf:fa:c7:4a:a1:dd:86:53:ff:5c:85:f9:
c2:af:d8:c3:01:fd:e2:42:4d:27:1f:a0:05:51:6c:
19:e8:42:9f:27:de:1e:7a:37:a3:e4:0b:df:8a:b5:
5d:c1:93:16:66:12:bc:b2:65:18:17:c0:35:8a:02:
68:ab:10:78:2f:cd:91:46:9e:7b:1d:6a:1e:d9:b9:
e8:06:47:43:16:16:36:38:4f:fd:74:a1:08:38:17:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:A1:64:68:E7:01:1F:AB:77:2A:B2:43:77:70:4D:2D:34:6A:70
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:0b:5d:36:0c:6e:1a:ca:b6:9b:8e:29:23:51:10:ea:71:
64:4f:93:aa:8b:a5:95:95:fb:10:9e:f4:d2:d2:38:6b:cd:7c:
3a:b1:e5:78:63:6c:ed:f0:5c:32:76:67:c4:7f:2d:ea:92:dc:
c0:26:47:df:65:2c:f4:80:fa:e8:82:20:4c:d8:84:1b:8c:b5:
ab:3f:5b:f4:75:17:4c:49:43:1a:e4:cf:50:7b:c6:7f:90:2a:
29:30:a4:4d:18:3c:ee:71:8a:a6:38:55:2f:fc:28:44:66:af:
f2:52:69:ee:ce:87:5b:30:9e:7e:96:3a:8b:0f:94:e1:25:8a:
a1:9d:0e:9f:38:d5:0e:a2:9a:42:b7:d1:66:17:1a:9e:27:85:
d9:0c:fb:27:73:08:84:ea:ff:ae:48:aa:1f:e9:7c:08:c5:75:
51:24:29:f9:8f:e8:51:b6:39:31:f5:76:e5:5a:f3:8a:6b:ed:
2e:89:49:d7:62:c3:c1:c2:c6:67:fd:74:76:8f:d9:e1:2b:8e:
da:9a:3f:65:e0:84:0b:c5:88:ff:72:8a:70:a4:49:d8:6b:80:
da:6b:78:f8:37:ad:ff:d5:48:a2:44:3d:f4:a3:56:a8:cc:d5:
af:fa:2b:80:9c:ab:cd:79:53:79:97:1e:8b:3f:a5:b1:28:e2:
b4:b7:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:33 2025 by rpki-client