Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: rqQk330lXJBkIVPsyTcrlZpldoGZjaXoSQIrn2LPmD0=
Subject key identifier: B4:72:90:D9:96:FF:2F:7E:E4:43:69:89:61:E2:DA:BF:65:86:F6:82
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 0199FE473BA3AA564354603BB2DA9778FD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 03CC
Signing time: Sun 19 Oct 2025 21:01:45 +0000
Manifest this update: Sun 19 Oct 2025 21:01:45 +0000
Manifest next update: Mon 20 Oct 2025 21:01:45 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: ADI8qE9Vv5RllysJxxOFMoK27mGYR8+VmnFCsBRdsW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3b:a3:aa:56:43:54:60:3b:b2:da:97:78:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Oct 19 21:01:45 2025 GMT
Not After : Oct 20 21:01:45 2025 GMT
Subject: CN=b47290d996ff2f7ee443698961e2dabf6586f682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:4c:ff:99:39:99:71:7b:81:ae:9d:4e:33:
09:1e:5b:ed:61:b5:f3:18:37:6e:5d:85:a0:b5:57:
47:34:05:30:0b:c6:b0:ff:06:d6:02:75:43:36:a3:
16:88:8b:0c:8c:dc:e8:f9:63:d1:7b:ba:93:c9:89:
38:b4:25:b6:8b:1e:a0:94:38:67:b8:89:f2:59:8e:
7d:00:2f:66:4c:6c:63:76:0b:5a:b7:5e:9c:17:37:
34:fc:dc:7b:7c:6f:16:cf:57:7f:0f:b1:7d:9f:25:
7b:09:50:90:71:fb:3b:b5:1b:55:ed:15:35:4d:ee:
e2:0b:83:d9:26:b1:09:c8:0c:f4:04:39:c5:a5:49:
34:16:9b:b1:bd:59:3d:c2:4b:fa:e4:35:d8:bd:83:
c8:18:73:56:40:bc:4c:05:e2:73:e3:82:24:db:00:
64:61:c8:03:88:b3:e2:ff:91:06:e6:0f:be:bc:dd:
b7:c9:9f:dd:95:72:39:99:23:ca:3c:80:20:2a:72:
8a:23:81:e6:9a:c1:da:a4:ea:3f:e6:a9:ba:c3:e2:
f6:2a:2f:89:39:a2:28:4a:78:ec:48:2f:e7:5e:2c:
f3:59:36:ce:fe:70:48:d4:44:a8:17:9d:90:6a:23:
00:58:0e:65:6c:6c:be:15:f9:c9:8a:2b:64:31:63:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:90:D9:96:FF:2F:7E:E4:43:69:89:61:E2:DA:BF:65:86:F6:82
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:00:ca:5b:1b:90:b3:68:d9:40:fd:4e:27:5d:c9:06:f0:74:
63:1e:c6:2a:93:60:0f:59:40:b8:3f:3d:29:39:90:c7:d5:bf:
ad:04:08:7b:2b:af:57:91:4e:12:a4:75:bc:94:7e:b7:fd:b9:
99:11:e9:cf:92:1d:0b:f0:06:51:ad:70:a1:0b:a4:57:c1:94:
3e:32:02:43:0a:1b:5a:a2:03:7a:84:40:62:95:6f:c1:bf:c3:
0f:14:91:6d:c8:13:5e:4c:86:eb:f8:6c:8a:0c:0d:17:cd:d8:
98:27:2a:27:27:50:32:e9:23:75:7c:8f:0a:f2:11:a3:e3:7a:
f6:9d:71:93:14:33:ed:e6:23:2b:40:a5:09:18:18:a0:89:98:
41:d7:cb:58:cd:91:86:cf:9e:49:1e:2e:fc:8e:4a:69:c4:2c:
95:20:ed:4d:ce:6b:b8:b7:33:1b:4a:4f:a0:04:52:f0:ed:ec:
69:36:f4:45:87:18:da:ba:a6:fb:50:be:24:c3:49:e2:8f:52:
e2:21:cf:45:31:bf:e6:1b:0f:a1:41:e0:57:f7:a9:3a:23:8e:
cc:b1:03:51:53:87:1b:2b:7d:9e:85:ae:d6:e6:3a:3e:dd:a2:
2e:34:24:b6:6e:ad:da:f6:d5:05:ae:1d:fa:c9:a8:0b:ad:d3:
d8:2c:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:19 2025 by rpki-client