Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: 9QvysGFGHZXsGI/SOr4f/qJAjSSDphXeAqwb3cvvVD4=
Subject key identifier: 94:5B:4A:69:C3:EE:D3:13:3D:0D:63:C4:03:1F:56:7D:3A:C8:70:27
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 0199FB0F05FF8DC917F8988AEEC75EA6FF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 1040
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: 0DoyvTSyDDcCgMQdAnD+DJq9+6T5a/USn+2N9M08aBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:05:ff:8d:c9:17:f8:98:8a:ee:c7:5e:a6:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=945b4a69c3eed3133d0d63c4031f567d3ac87027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:e9:05:cb:58:c2:52:a9:29:6e:89:a7:af:
a4:25:3f:38:0f:f9:cb:e4:26:2c:92:f9:86:5e:25:
11:1a:53:d4:78:68:8b:e3:85:1b:bf:cf:ee:9d:4e:
1f:54:13:a1:36:d2:00:d3:0a:b3:63:0e:2c:91:5f:
3f:bc:4c:c9:4d:19:58:67:b1:a9:9f:fe:44:19:29:
e9:b9:be:d6:55:e9:4b:95:0a:b0:a3:ae:2f:24:21:
b4:0e:ef:a0:57:e0:ef:42:94:59:ad:c2:71:a3:e5:
74:f5:d2:6f:ce:92:5d:b5:b3:63:c0:5f:aa:1c:42:
7e:3c:fd:90:13:42:32:84:be:ee:ae:05:a2:b6:40:
68:f9:1d:de:dd:ff:17:11:9c:f4:53:9a:0d:b8:ed:
16:ef:5b:4f:b7:dd:15:03:a1:7c:a1:25:4c:9b:d2:
60:e4:56:70:52:a3:11:2e:03:6e:64:8f:4e:a7:c0:
77:5e:3a:48:48:79:42:a0:f5:66:a2:e4:18:dc:60:
fc:bc:52:38:9c:e4:69:ca:5c:fa:8b:c7:26:89:b7:
27:e9:37:c1:10:09:e2:d1:4a:96:5b:12:7f:f6:b5:
1d:e0:c9:28:8d:18:f4:f8:49:be:cd:11:47:da:58:
b6:2e:f1:7f:e5:70:6e:fc:d6:48:78:cb:22:c9:4a:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:4A:69:C3:EE:D3:13:3D:0D:63:C4:03:1F:56:7D:3A:C8:70:27
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:c4:26:56:b5:15:da:e9:b6:f0:3a:37:ab:a2:76:65:05:
8c:7a:31:15:fc:1a:d7:6b:c9:03:4f:4b:dd:94:c7:f6:db:44:
99:c8:90:9b:9b:bd:f9:83:e5:fe:7d:6c:92:3f:9e:51:dc:c6:
4c:68:e7:14:06:f7:31:14:7f:1f:77:de:80:67:fd:75:89:1f:
e6:be:db:c0:88:fd:0c:0c:90:00:04:96:2d:6b:37:ce:5a:d5:
2a:a0:95:a4:c6:a0:38:40:c1:bd:6d:82:19:aa:5f:13:7e:95:
ae:8f:4a:b6:a1:18:cb:a9:92:3e:21:8b:2b:29:aa:1e:aa:44:
c8:dc:6b:08:c7:69:ed:61:97:b4:3e:ab:d2:1b:90:19:a7:f1:
d9:d3:b2:f8:df:e4:37:c2:c5:c9:05:19:8b:59:d2:80:03:06:
6b:12:e3:40:2c:31:19:80:9f:9e:14:98:00:57:5a:0a:7a:64:
11:f6:d7:cb:26:4f:fe:19:b7:c6:e8:c5:b7:46:2e:f4:72:fe:
10:36:a0:ff:ce:d5:9a:ba:e8:94:c0:69:b6:55:b4:2c:98:f4:
62:55:a5:b7:e1:c8:71:6a:d8:e3:98:f8:00:ef:09:54:54:20:
43:f4:9f:a2:e0:2d:25:b9:41:e3:e3:db:8f:c2:02:52:9b:6e:
4e:a2:88:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DwX/jckX+JiK7sdepv+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi
MGI1YmQwHhcNMjUxMDE5MDYwMTI5WhcNMjUxMDIwMDYwMTI5WjAzMTEwLwYDVQQD
Eyg5NDViNGE2OWMzZWVkMzEzM2QwZDYzYzQwMzFmNTY3ZDNhYzg3MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5XpBctYwlKpKW6Jp6+kJT84D/nL
5CYskvmGXiURGlPUeGiL44Ubv8/unU4fVBOhNtIA0wqzYw4skV8/vEzJTRlYZ7Gp
n/5EGSnpub7WVelLlQqwo64vJCG0Du+gV+DvQpRZrcJxo+V09dJvzpJdtbNjwF+q
HEJ+PP2QE0IyhL7urgWitkBo+R3e3f8XEZz0U5oNuO0W71tPt90VA6F8oSVMm9Jg
5FZwUqMRLgNuZI9Op8B3XjpISHlCoPVmouQY3GD8vFI4nORpylz6i8cmibcn6TfB
EAni0UqWWxJ/9rUd4MkojRj0+Em+zRFH2li2LvF/5XBu/NZIeMsiyUqKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRbSmnD7tMTPQ1jxAMfVn06yHAnMB8GA1UdIwQY
MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt
NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk
LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnbEJla1
FdrptvA6N6uidmUFjHoxFfwa12vJA09L3ZTH9ttEmciQm5u9+YPl/n1skj+eUdzG
TGjnFAb3MRR/H3fegGf9dYkf5r7bwIj9DAyQAASWLWs3zlrVKqCVpMagOEDBvW2C
GapfE36Vro9KtqEYy6mSPiGLKymqHqpEyNxrCMdp7WGXtD6r0huQGafx2dOy+N/k
N8LFyQUZi1nSgAMGaxLjQCwxGYCfnhSYAFdaCnpkEfbXyyZP/hm3xujFt0Yu9HL+
EDag/87VmrrolMBptlW0LJj0YlWlt+HIcWrY45j4AO8JVFQgQ/SfouAtJblB4+Pb
j8ICUptuTqKIig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:38 2025 by rpki-client