Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: 1pmPNAzxuLnoHQxeNSQwJLkyu2ttJfmtkY5Vo74/vbo=
Subject key identifier: 5F:C3:0A:A7:3A:AA:14:78:7E:1A:26:FF:04:77:CE:A8:93:8D:93:16
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 0199FD6B3BB7DFC40604F589A6DCD2E12AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 03D7
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: JNdUdOvkTJzuext9QE84iGPoyEMiI8DWmbd9Gp4VoHo=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3b:b7:df:c4:06:04:f5:89:a6:dc:d2:e1:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=5fc30aa73aaa14787e1a26ff0477cea8938d9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:5c:b6:9a:7b:87:c8:b3:ee:7c:42:c2:85:
76:0a:05:f9:9f:4e:d8:20:d0:3c:dc:44:b3:8d:c7:
39:fa:f5:6e:e0:32:2b:99:0e:3d:f9:cc:75:a9:02:
b6:a6:11:d2:f4:65:8d:4d:2c:14:5e:8f:91:a7:fb:
18:a0:75:03:14:2d:97:69:0b:bb:25:cf:bf:2c:02:
d0:25:26:cc:53:3d:25:6b:57:ac:bd:e4:41:66:a2:
f0:7c:d5:41:a6:89:59:0f:05:47:57:ef:e7:33:77:
57:87:ac:43:1c:e9:f0:ff:de:e4:f2:89:bc:51:c2:
1e:5d:50:b9:ef:b9:ac:5d:00:cb:85:13:a7:12:f3:
dc:41:0e:b8:ec:c2:b1:8b:4d:0a:fd:9a:23:bc:ed:
54:a2:84:39:69:38:c4:0e:bf:53:1c:ea:eb:85:c5:
1a:78:77:b9:d5:93:19:fc:3b:92:31:45:5a:c1:4e:
3d:da:15:d8:a0:5d:34:97:52:59:c4:70:5c:ea:62:
c2:f9:69:8b:60:68:81:c8:8d:5f:ba:a4:f4:8f:56:
53:65:76:ba:be:54:14:a9:8f:b1:1f:46:73:ae:31:
bc:79:ba:a2:60:a7:5b:ff:c2:52:8a:99:40:a5:c8:
dd:21:a0:f7:8e:8f:67:98:39:52:78:67:35:a8:7e:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:0A:A7:3A:AA:14:78:7E:1A:26:FF:04:77:CE:A8:93:8D:93:16
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:ac:be:e9:bf:b7:f4:e9:07:1b:99:62:db:6f:21:8e:36:
f7:0e:0e:37:fe:09:16:8e:f8:82:cb:e3:15:58:d8:16:aa:34:
c0:17:ba:7a:b5:cd:71:da:88:02:4e:d3:b7:14:62:b8:1f:cf:
86:b6:59:91:77:6d:39:33:47:23:e5:f9:5f:23:2f:c2:74:1a:
df:3c:e4:b9:73:d5:75:3c:d2:f1:d2:7b:e2:36:3d:8d:ea:cc:
50:b5:bb:68:b3:28:34:cb:93:cf:db:f6:19:05:1e:0c:7d:a4:
f2:94:d2:d8:00:ae:b3:41:48:a0:00:73:33:c7:56:fd:cc:91:
75:b1:bb:ba:1d:73:d2:68:a3:18:4d:ca:a7:f1:b8:6e:31:d3:
60:af:45:4c:21:c7:1e:c9:85:eb:05:9e:8d:c2:8a:b4:fe:08:
db:d9:87:bc:c5:d1:36:08:47:18:ab:01:2b:71:13:c9:f9:ec:
cb:6d:6d:f2:16:3c:ba:fa:06:d8:7d:b2:28:f6:8b:86:2e:12:
0d:16:c7:a8:e1:ff:a9:d6:f2:d5:f4:fe:95:63:43:95:fd:6c:
d8:b2:2d:dd:c6:df:33:54:33:bc:c5:61:52:f3:1a:54:44:20:
a3:8a:10:fc:d0:1f:b6:d7:e0:b4:dc:49:86:8f:98:e9:55:35:
4c:e1:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:10 2025 by rpki-client