Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: 8Ix0A+Epu0fpr3rN2aX/nBB00wzPiePd4bjx/mw0wMA=
Subject key identifier: 7A:47:8A:2E:C8:48:24:2B:CF:F5:CF:A2:89:34:5C:A4:A3:14:97:D3
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 0199FCC6912507C0E9F56F55119F6D9084C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 1144
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 3hR1k6TxWTo10g48gxsW+W68xN3GMWxPZkB11nWC9kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:25:07:c0:e9:f5:6f:55:11:9f:6d:90:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=7a478a2ec848242bcff5cfa289345ca4a31497d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:d0:fa:55:08:62:4b:a7:4a:66:15:71:29:
dd:25:4f:0a:b7:78:24:e3:c3:5d:01:d6:48:67:68:
8d:89:cb:fb:ce:46:79:67:bd:62:d2:30:34:5e:66:
14:95:26:ca:a0:4d:f3:d7:a5:59:52:7f:8c:5d:57:
1f:85:c7:b7:47:2f:3b:9b:95:43:0c:e7:6f:0f:f7:
a1:61:8a:79:e5:a5:b0:36:49:a5:4a:c4:a2:9f:34:
c1:c8:46:e8:02:7d:6a:67:ea:33:55:2e:62:2a:ce:
d3:ab:77:09:c5:d2:db:7d:69:b4:dc:1a:10:79:81:
10:b8:b5:85:f1:89:a2:30:ef:d9:cf:03:8f:f3:cc:
96:b5:81:65:50:c2:37:52:d5:64:64:90:ee:a8:e9:
79:01:53:37:2d:46:a3:0a:8d:23:e5:0a:18:37:4b:
64:ed:ed:d5:6c:22:d8:e7:07:02:35:d0:ac:34:36:
98:0f:70:c5:c4:e6:4b:f1:ed:84:0e:04:f9:5b:a8:
f1:76:1d:12:46:18:18:a2:98:b2:fd:e5:6a:d9:00:
67:da:3c:8e:48:c1:12:93:9b:8b:34:31:37:72:e8:
d6:ba:ce:49:52:24:3f:5f:7f:ad:83:d6:e0:3c:d8:
c4:6c:f7:c3:4b:8b:6c:50:59:2d:f2:43:37:3a:74:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:8A:2E:C8:48:24:2B:CF:F5:CF:A2:89:34:5C:A4:A3:14:97:D3
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e3:f5:fd:40:96:31:69:7e:93:e9:6d:bd:2f:1d:1c:5f:47:
43:09:e9:d9:a0:97:88:19:55:48:9c:49:dd:5f:34:40:41:a0:
0e:22:e9:2d:81:3d:1e:d1:7f:5c:55:f3:17:df:e3:4c:36:ec:
0f:d8:ae:03:8a:14:db:0b:a9:f4:44:3e:7e:90:9b:18:18:57:
53:cd:16:0e:b3:74:50:08:94:54:3c:8e:32:65:d9:b8:13:cb:
20:db:b1:1d:cb:32:3a:f8:2a:39:47:87:44:1c:e7:f4:50:a9:
65:fb:5d:dd:36:a0:4c:d1:36:bc:5c:6c:de:ab:ae:43:b3:5d:
2a:40:c2:f1:21:81:13:df:04:ef:ff:dc:41:6f:23:49:bf:30:
b7:ec:b7:2f:5a:37:e7:93:e1:c4:71:ab:7b:ac:0d:83:41:8f:
bf:1e:5a:ed:95:ec:47:c2:15:3b:e4:f1:3f:cf:ba:84:03:83:
51:7e:f6:ba:97:3a:f9:3c:cc:8d:c6:b3:45:55:5a:9e:c4:e1:
33:ce:e2:3f:82:fc:e1:8c:09:f0:4b:6a:19:76:fe:0f:68:31:
a5:12:8f:e5:5a:93:b2:d8:9c:20:28:82:0f:86:dd:56:f0:5f:
5f:88:ca:1a:3f:20:7d:c5:68:52:4f:a9:e1:d8:88:6e:01:c6:
bf:38:b0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpElB8Dp9W9VEZ9tkITDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx
YzYxOGEwHhcNMjUxMDE5MTQwMTM1WhcNMjUxMDIwMTQwMTM1WjAzMTEwLwYDVQQD
Eyg3YTQ3OGEyZWM4NDgyNDJiY2ZmNWNmYTI4OTM0NWNhNGEzMTQ5N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukrQ+lUIYkunSmYVcSndJU8Kt3gk
48NdAdZIZ2iNicv7zkZ5Z71i0jA0XmYUlSbKoE3z16VZUn+MXVcfhce3Ry87m5VD
DOdvD/ehYYp55aWwNkmlSsSinzTByEboAn1qZ+ozVS5iKs7Tq3cJxdLbfWm03BoQ
eYEQuLWF8YmiMO/ZzwOP88yWtYFlUMI3UtVkZJDuqOl5AVM3LUajCo0j5QoYN0tk
7e3VbCLY5wcCNdCsNDaYD3DFxOZL8e2EDgT5W6jxdh0SRhgYopiy/eVq2QBn2jyO
SMESk5uLNDE3cujWus5JUiQ/X3+tg9bgPNjEbPfDS4tsUFkt8kM3OnRwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpHii7ISCQrz/XPook0XKSjFJfTMB8GA1UdIwQY
MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt
ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh
LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduP1/UCW
MWl+k+ltvS8dHF9HQwnp2aCXiBlVSJxJ3V80QEGgDiLpLYE9HtF/XFXzF9/jTDbs
D9iuA4oU2wup9EQ+fpCbGBhXU80WDrN0UAiUVDyOMmXZuBPLINuxHcsyOvgqOUeH
RBzn9FCpZftd3TagTNE2vFxs3quuQ7NdKkDC8SGBE98E7//cQW8jSb8wt+y3L1o3
55PhxHGre6wNg0GPvx5a7ZXsR8IVO+TxP8+6hAODUX72upc6+TzMjcazRVVansTh
M87iP4L84YwJ8EtqGXb+D2gxpRKP5VqTsticICiCD4bdVvBfX4jKGj8gfcVoUk+p
4diIbgHGvziw+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:28 2025 by rpki-client