Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: BnogEhpXTW9XGGV6Nlu7EiU9LbJ5OvUOcRW/3La6QT0=
Subject key identifier: F3:58:C1:8B:2B:55:D1:71:A8:48:6E:BF:F9:47:26:B8:21:B1:A7:14
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 0199FCC6C877E86F2389E1F00A35555A6E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: ci5UQyYYzyN2uC/X9j1kGHORRVMA9QCYA2ek3soHXRY=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c8:77:e8:6f:23:89:e1:f0:0a:35:55:5a:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=f358c18b2b55d171a8486ebff94726b821b1a714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:cb:24:02:f0:e1:f6:a1:4c:cb:b5:31:e9:
4c:20:06:27:51:61:85:f1:cb:35:66:ad:4e:0f:d4:
57:35:60:4c:98:9d:05:91:b3:98:e5:1d:76:1c:ce:
c7:d5:4c:e7:69:95:0c:05:b1:26:6b:a1:5f:02:bf:
a3:41:1a:e0:4c:85:2c:48:d9:74:9c:43:06:b1:8f:
fa:f4:c9:11:4f:de:bc:8c:1c:7d:88:28:b4:60:2c:
83:ff:86:7d:db:64:c4:46:c8:14:a7:74:ec:ed:ff:
4e:75:d9:40:1d:c6:75:01:24:3a:45:a8:2f:87:82:
0c:2c:21:b4:7c:dc:4b:9d:f7:87:63:3f:2e:f4:2b:
9c:ae:e2:3a:37:c6:49:12:ee:a6:d0:1f:51:80:b5:
b7:37:42:a6:6c:eb:e7:16:50:9c:52:7c:d2:e9:4c:
92:97:5c:ab:59:e4:4a:95:80:26:1c:dc:a6:83:34:
eb:b0:67:da:54:1a:4f:40:0e:71:85:7a:4b:d1:78:
72:9c:88:ea:ca:4e:ee:69:49:55:4f:b9:bd:5a:d9:
34:b6:51:11:9b:ba:46:d6:fa:0b:67:8a:9a:78:60:
d5:51:dd:4b:f5:7f:60:c4:55:d0:52:f7:d2:e6:28:
3b:66:6f:13:ac:6d:80:56:a0:3a:06:6f:46:71:7b:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:C1:8B:2B:55:D1:71:A8:48:6E:BF:F9:47:26:B8:21:B1:A7:14
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:28:34:99:28:09:e7:f7:ea:37:ad:cb:30:59:e0:8c:2c:23:
10:b7:f0:8a:8e:da:d2:9e:7b:c0:ed:ab:0f:c9:e8:da:bf:58:
50:8c:df:58:fd:fe:0b:a8:6f:4d:a6:f8:2a:f3:c3:56:55:db:
0c:79:5d:bd:29:d5:c2:70:3e:24:26:cb:1b:85:d7:14:56:b3:
1b:96:3d:6e:2e:ee:22:16:47:e2:4f:42:3e:c0:09:e7:a6:29:
7b:d3:5d:9d:14:17:bf:e6:c3:ad:f8:9e:4b:81:f2:ce:9b:39:
3c:1e:3c:fc:41:5b:75:aa:2b:c5:24:5e:f5:c6:19:64:dc:b7:
92:d9:0c:91:50:67:b2:e5:0f:eb:29:e3:73:95:68:eb:63:d9:
c5:e1:4b:28:8e:25:1d:c1:ce:65:3a:c9:27:05:f3:f6:c8:bf:
22:38:48:2d:5a:8a:15:f5:09:cb:f6:77:69:86:66:83:7a:13:
44:41:82:ae:11:cf:a6:8a:73:6c:04:d2:21:aa:29:61:49:a0:
12:2b:2b:e1:2d:6e:a3:25:4b:16:cb:ba:74:57:c8:df:62:c6:
bc:38:97:17:30:e2:a2:85:e1:78:86:a3:db:19:7b:c1:38:86:
92:50:ee:92:a1:98:6b:03:11:e0:75:94:14:4e:43:ca:e6:e5:
4e:ef:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:33 2025 by rpki-client