Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: 4GlnbVBSKswq4gnHJ4AFdACt8hwv2jtbn22mO5YFtjk=
Subject key identifier: B8:2B:9B:62:7C:45:7A:9F:31:CD:5E:24:0B:3D:FB:D0:32:61:1E:6C
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0199FCC69DD9286D52D9E79F98FAE86264CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0D3A
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: 4HxXGbij6WJNST49YnCWxDN85JTJKJ1UuWViXike9u8=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9d:d9:28:6d:52:d9:e7:9f:98:fa:e8:62:64:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=b82b9b627c457a9f31cd5e240b3dfbd032611e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:48:c8:96:20:21:f8:ed:87:c2:b1:46:3e:
d2:32:7f:48:be:c9:fc:01:98:05:7b:99:7b:e7:29:
a6:01:e3:47:83:5c:0b:34:9d:5a:11:b2:f1:f6:8a:
96:6c:04:6c:4f:74:fd:37:99:29:3c:cc:51:5c:08:
eb:bb:e7:0a:2e:8d:32:08:6d:8c:12:7a:e9:a5:5d:
fc:25:c2:24:5c:f0:52:e6:08:a4:be:d4:39:c6:6a:
1c:2a:9a:13:3f:c7:69:18:48:c4:c2:1b:ba:b5:cb:
08:34:9f:fe:9e:3f:56:80:cf:f6:a3:63:22:07:78:
83:d4:ed:12:c2:ff:16:81:d0:2a:c5:11:bd:a9:c8:
8f:21:88:66:ac:ac:3c:93:7e:57:f2:1b:ff:ed:0c:
52:90:f6:eb:ed:94:43:a8:db:eb:72:96:38:b1:ec:
59:82:f8:3a:db:3b:b7:8d:b4:ec:ca:07:3c:f7:a4:
49:82:92:d0:7f:7c:48:93:92:11:dd:87:ec:7e:1e:
b5:2c:2a:37:02:9b:14:fe:c8:af:67:f5:f9:58:3e:
68:15:a4:96:ac:cc:0d:18:8b:20:db:92:ac:81:1d:
7c:6d:a2:b2:cc:a4:44:61:ef:49:7d:8e:3a:aa:72:
ec:3d:0d:4f:47:29:e9:d0:fa:99:65:54:89:25:31:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:9B:62:7C:45:7A:9F:31:CD:5E:24:0B:3D:FB:D0:32:61:1E:6C
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:57:e7:7e:07:1a:42:bb:fb:4b:74:f2:dc:fe:1e:27:3d:
df:ba:3c:03:90:92:48:51:35:ba:8d:ea:7f:61:60:f8:1c:5a:
fe:63:0c:e0:f2:ad:79:44:7e:4d:23:1c:f3:76:e5:a5:2b:b1:
8a:e2:79:80:95:cb:91:73:1b:88:3b:d9:b0:70:23:36:4b:22:
8d:7f:a9:b3:20:06:52:05:2c:91:e5:ca:70:56:19:b6:18:bc:
c1:7c:b7:ef:de:f5:3f:a1:8c:e2:66:bc:a0:18:c7:c7:f6:df:
eb:1f:b2:9c:fb:cc:38:5e:44:aa:05:03:7f:0f:0a:f6:64:fc:
ff:45:58:22:3b:5c:d2:77:1d:10:65:62:3c:00:1c:41:1a:85:
51:22:06:5f:aa:fa:cb:31:23:0c:08:b7:35:2a:e2:e0:45:e7:
1a:cb:7f:1d:f3:ef:1f:8a:e4:a0:7b:ac:f7:01:f0:1c:25:68:
4d:35:42:b6:4b:d2:c1:90:cf:0a:c7:0c:68:7e:68:3b:97:df:
c8:3f:e6:26:9d:27:bb:ed:f3:a0:87:e5:a1:f4:7f:e2:88:41:
3e:77:3f:c8:7c:b3:57:00:39:c8:95:e0:16:e1:fd:a1:f3:32:
43:3d:22:ed:34:7c:6b:cd:8b:98:c9:fc:fc:e1:6b:9a:2e:a1:
36:5d:45:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xp3ZKG1S2eefmProYmTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzNkOTQwMTlhM2MyMzU4NzdkZjZiYzFiMjljNzZhMGI2
NGM5ZDAwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD
EyhiODJiOWI2MjdjNDU3YTlmMzFjZDVlMjQwYjNkZmJkMDMyNjExZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysRIyJYgIfjth8KxRj7SMn9Ivsn8
AZgFe5l75ymmAeNHg1wLNJ1aEbLx9oqWbARsT3T9N5kpPMxRXAjru+cKLo0yCG2M
EnrppV38JcIkXPBS5gikvtQ5xmocKpoTP8dpGEjEwhu6tcsINJ/+nj9WgM/2o2Mi
B3iD1O0Swv8WgdAqxRG9qciPIYhmrKw8k35X8hv/7QxSkPbr7ZRDqNvrcpY4sexZ
gvg62zu3jbTsygc896RJgpLQf3xIk5IR3Yfsfh61LCo3ApsU/sivZ/X5WD5oFaSW
rMwNGIsg25KsgR18baKyzKREYe9JfY46qnLsPQ1PRynp0PqZZVSJJTE61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgrm2J8RXqfMc1eJAs9+9AyYR5sMB8GA1UdIwQY
MBaAFE1z2UAZo8I1h332vBspx2oLZMnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQt
OTZkYzVlYTBjYzgzLzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQtOTZkYzVlYTBjYzgz
LzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn75X534H
GkK7+0t08tz+Hic937o8A5CSSFE1uo3qf2Fg+Bxa/mMM4PKteUR+TSMc83blpSux
iuJ5gJXLkXMbiDvZsHAjNksijX+psyAGUgUskeXKcFYZthi8wXy37971P6GM4ma8
oBjHx/bf6x+ynPvMOF5EqgUDfw8K9mT8/0VYIjtc0ncdEGViPAAcQRqFUSIGX6r6
yzEjDAi3NSri4EXnGst/HfPvH4rkoHus9wHwHCVoTTVCtkvSwZDPCscMaH5oO5ff
yD/mJp0nu+3zoIflofR/4ohBPnc/yHyzVwA5yJXgFuH9ofMyQz0i7TR8a82LmMn8
/OFrmi6hNl1FJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:38 2025 by rpki-client