Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: /cIZOqgm6z63mi51k6irLyAudiYGQGjYwV+1ZQen2Ps=
Subject key identifier: 9F:39:04:C7:8E:36:6C:4F:D6:64:DE:5D:AE:E5:36:35:BD:9F:83:9F
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 0199FBEBD25A7677F304B0FFBB4FF8D1A52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: JV37BZsdNVsEiPCiz61x6a6ZOVGS2e3ZryJMd3kL7vg=)
3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:5a:76:77:f3:04:b0:ff:bb:4f:f8:d1:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=9f3904c78e366c4fd664de5daee53635bd9f839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:e3:1e:7f:ab:84:a6:4a:09:0d:0a:85:70:
0c:db:d5:f4:39:00:e8:8e:dd:dd:0e:dd:ca:97:92:
93:6b:c8:2c:00:99:a7:9b:9e:0c:aa:8c:8f:00:bb:
26:9d:ec:63:f5:6e:f5:b8:6b:ef:79:d7:5d:3a:f3:
5c:e6:4e:02:2b:94:12:73:94:81:f4:0b:a9:3e:4f:
c2:3a:b5:8e:ab:be:39:27:78:22:9c:5e:f2:29:1a:
60:0d:78:b4:60:65:3e:49:bd:cd:02:66:e6:26:9a:
8e:dc:d0:1a:e2:64:13:c5:40:80:04:55:35:81:27:
b5:57:9e:66:73:9c:a1:e9:6b:b0:c1:e3:d9:f0:d9:
58:93:62:6e:e0:9d:83:f2:82:2f:88:c8:68:20:4c:
09:15:86:7e:ce:8a:2f:b6:27:60:9e:b9:3f:c2:2c:
74:b8:95:a2:64:dd:a8:29:51:79:4f:a5:0c:57:5c:
d7:48:df:b9:90:cc:7a:c3:27:ee:c7:ee:a0:30:fb:
ac:1d:04:2c:fd:72:7c:40:21:ce:39:39:e4:74:5a:
0a:81:65:0d:db:98:07:00:a1:39:70:ef:69:f4:a6:
18:d5:43:7b:0d:56:29:55:47:38:16:a0:75:2a:fc:
0f:4f:b1:19:15:93:51:c4:24:ad:ae:7e:33:aa:64:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:04:C7:8E:36:6C:4F:D6:64:DE:5D:AE:E5:36:35:BD:9F:83:9F
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:10:6e:a9:c8:46:62:a0:82:7f:df:f8:81:cd:f4:70:02:fa:
e7:27:3f:ab:0f:29:99:e2:d2:d0:a8:97:9e:e9:52:49:6c:bb:
90:00:2d:4a:08:6c:7d:4e:39:55:73:b4:c9:64:5e:8b:7d:09:
a2:e8:fb:d0:e7:1e:df:e2:60:44:50:72:38:d3:7f:57:87:5e:
e5:2e:37:c7:73:d9:32:65:5f:0e:c8:f5:9b:02:36:fd:7a:73:
4c:f9:6e:9b:d5:15:7d:56:99:ea:70:41:8b:88:c7:e9:b7:67:
9c:f6:38:4c:d1:ba:18:80:15:65:2e:d0:e9:91:cb:b0:bd:bb:
e5:bf:01:96:c9:8c:d8:99:b4:f6:ae:b7:85:9c:7a:b5:d2:6f:
b9:25:11:91:d8:9c:47:b9:ef:ce:7c:05:e5:1e:fb:2f:8e:95:
9d:93:0c:4b:eb:39:64:59:ab:31:a5:0c:24:d6:bb:3b:a3:8c:
7c:4c:c7:ff:dc:92:af:02:42:df:4e:2a:ac:d8:ed:ab:29:c7:
02:4b:f1:46:68:85:7f:ef:ba:2d:76:64:f5:87:be:48:65:b4:
fe:a4:ca:9b:c7:96:3b:b8:29:e4:9e:68:ee:03:98:6b:a2:fa:
8b:44:db:49:9c:d7:79:7a:f9:dc:74:0a:5e:63:6a:0a:96:f8:
86:c1:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:06 2025 by rpki-client