
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: LIv69kHt8xVSAhtSaxudH/y0Caqnt/KjA8kHrjzI1Hg=
Subject key identifier: 29:CC:B0:27:3B:9B:9C:20:92:BC:0B:EE:DB:A6:40:63:1F:15:33:0C
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0199FBEB6DC6619B72716A60888B332AB4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: vmnfnuqYYllUzh+rrmFkh/N5oHbksEd/Eawd6tRxs2o=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6d:c6:61:9b:72:71:6a:60:88:8b:33:2a:b4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=29ccb0273b9b9c2092bc0beedba640631f15330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:a0:8b:34:1a:cb:b2:f2:a8:19:25:10:52:
16:ae:3c:bf:ec:c3:6b:e0:1c:f9:b0:74:aa:9a:11:
2c:b3:5e:be:32:b6:e4:f5:b1:b8:04:e7:bb:95:3b:
4a:fd:ef:73:26:9b:4c:89:5e:21:33:35:ee:0e:a1:
a4:dd:6d:78:cb:c7:bf:a5:28:63:8d:3a:2f:85:7b:
02:2e:79:f5:e2:90:55:24:bd:64:ed:c4:f7:af:d5:
aa:f6:ca:45:74:04:3b:a4:59:89:0a:1a:60:3c:51:
77:eb:9f:58:e6:36:49:fe:e9:70:68:16:1e:49:fd:
2e:00:9a:f0:ad:a4:aa:c2:9e:43:fa:93:00:09:23:
7b:fe:06:a4:6c:04:81:5b:ca:e0:c3:56:60:26:81:
2a:1a:b4:ad:1b:90:84:a9:53:df:ab:e4:e3:f1:f5:
6a:ea:43:14:f7:75:cb:9e:17:c3:34:1e:17:6a:1e:
35:d7:a0:24:8c:38:d9:15:6c:ec:c6:98:a3:a3:b1:
77:2b:17:46:a9:ea:25:a5:ea:db:9f:f3:c2:d4:c2:
94:af:8e:8c:58:95:bb:7c:96:6a:3d:c6:65:70:13:
10:1c:2b:81:ec:df:51:0e:74:2c:2e:fd:2a:5d:31:
23:45:b2:ae:6c:b8:01:a8:93:41:2b:76:0e:2c:de:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:B0:27:3B:9B:9C:20:92:BC:0B:EE:DB:A6:40:63:1F:15:33:0C
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:81:73:54:9d:50:96:24:0d:74:3d:a1:38:d2:28:6c:36:
8a:e2:f0:5e:95:13:12:7d:f3:ff:3c:4d:71:0b:f5:0c:72:1c:
f3:bc:06:bf:28:01:4e:14:de:39:70:95:af:0e:5f:b3:b7:ad:
63:78:ed:d1:ed:30:fb:1b:73:3f:90:e3:52:51:58:88:b7:b0:
8a:93:22:73:10:df:06:63:ff:f7:3a:dc:da:5c:a4:73:6a:d8:
1b:0d:b7:31:0a:13:39:e3:70:8f:f3:2e:7d:b5:9d:fa:09:1c:
0d:37:86:34:59:9d:1b:4f:4c:73:57:2d:07:2b:0f:4b:93:b6:
b3:9d:fc:da:45:75:35:ab:63:5a:48:44:75:01:f1:37:98:1a:
2d:c0:49:c5:30:6e:56:ba:57:f1:9e:5a:c9:fd:fd:ee:1c:cf:
db:1b:b5:aa:a6:1c:7d:49:d7:65:ba:fc:f8:67:11:7d:8d:02:
3a:94:9f:cf:f1:e5:de:11:23:c2:80:3f:ac:e0:82:44:f1:7c:
4a:49:2a:b1:da:33:f9:60:84:64:36:24:4b:f1:a1:54:f2:10:
bc:b6:ca:52:9b:22:64:af:36:7b:60:d6:62:88:92:52:1e:58:
70:50:70:21:b1:c6:ab:1f:8e:43:fd:87:cb:94:e2:ba:ba:d6:
74:0f:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:26 2025 by rpki-client