Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: OUAtWdZymNGoQ/5lFA6yQASFuQyf60bqfEYZ1DQpELI=
Subject key identifier: C7:F9:BF:47:8F:42:28:13:0D:82:57:9E:C2:BA:D8:8D:C0:2F:0A:53
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 0199FBEC080DE51FA7151F93DCF3C8F7B77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 85CMf7vUOA3waRxc/oMDByGKyEv+o6anRzIUPXUfK4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:08:0d:e5:1f:a7:15:1f:93:dc:f3:c8:f7:b7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=c7f9bf478f4228130d82579ec2bad88dc02f0a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:27:9e:ac:4a:f4:d6:e2:81:6a:43:ec:56:d5:
10:3e:7e:e9:77:59:6a:61:56:0c:ae:bb:42:28:2f:
e8:5a:49:cc:21:46:85:92:f2:f8:24:37:db:45:dd:
5e:2c:a9:81:a3:47:1d:5a:87:ab:a2:fa:61:40:59:
07:6f:52:3c:5a:c4:6b:89:e1:1b:8f:a5:38:be:9e:
08:c3:3f:a9:5e:e6:6c:4a:79:38:af:83:b9:85:76:
8a:17:39:3d:5a:f0:bc:19:13:01:64:b9:84:8f:b9:
25:e6:39:9e:43:5e:e8:1f:1e:72:e8:e5:bb:83:99:
8a:e5:10:a0:98:14:36:08:ae:2f:23:9e:1e:2f:bd:
96:90:d5:ce:7e:6a:3a:03:e8:e9:e2:dd:3a:8b:88:
48:52:52:61:46:4f:47:7d:f2:1c:fd:53:13:b0:ec:
69:34:c5:47:39:e8:17:9d:a1:61:0f:e5:d1:93:9e:
74:ad:6b:34:d4:17:98:c4:e3:ac:6e:70:ec:32:62:
3f:4e:97:9e:c5:ee:14:73:e5:e1:88:d8:9e:05:9a:
4a:0b:8f:4d:65:21:ab:f7:14:a3:a5:35:9a:16:c7:
d8:b9:28:87:73:14:b0:cb:50:b8:eb:cc:97:82:8a:
1d:e3:7d:44:d7:53:86:d9:ea:ba:11:46:3e:7b:d6:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F9:BF:47:8F:42:28:13:0D:82:57:9E:C2:BA:D8:8D:C0:2F:0A:53
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:8e:a5:da:54:6f:c3:e3:b0:e4:b1:dc:b7:37:48:bf:c2:
bd:08:37:77:76:c6:76:2e:6a:0a:d5:a6:69:43:1d:94:48:94:
97:6f:67:fe:0b:4c:c9:09:6e:30:f8:b9:a8:07:5d:97:72:b8:
4d:b8:e5:02:dc:d6:31:6f:19:ea:14:ea:c8:4f:9b:3b:36:83:
59:ad:b9:0f:d3:67:1d:28:1f:d0:57:05:24:3d:4d:d9:92:70:
43:06:dd:97:ff:ba:88:a4:78:11:92:64:5d:1c:7c:25:6a:eb:
32:cf:25:35:98:75:80:8b:91:db:94:84:70:66:01:36:ec:2e:
f6:cb:65:cb:56:f4:0c:d9:2e:2d:c4:ff:6e:4f:0a:16:af:e7:
2a:5d:3e:e9:f9:34:f5:fd:35:e9:b6:d2:0c:b6:01:ef:65:c8:
b5:88:ce:11:10:ea:5a:66:9b:eb:83:05:44:8e:09:d1:ff:cb:
f5:dd:54:ce:ae:4a:31:d4:b7:63:c0:f4:92:f2:bb:f6:e7:f3:
fa:eb:3d:5c:e3:a0:7b:60:c1:1c:9b:3e:2a:1d:8e:a6:23:87:
2b:93:d5:b7:42:7e:76:6b:d6:75:ef:97:52:50:03:35:10:63:
f6:4f:6d:9c:0a:f2:b9:65:d8:73:b0:31:7f:e8:dd:74:d8:ac:
4c:fa:15:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AgN5R+nFR+T3PPI97d9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
EyhjN2Y5YmY0NzhmNDIyODEzMGQ4MjU3OWVjMmJhZDg4ZGMwMmYwYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSeerEr01uKBakPsVtUQPn7pd1lq
YVYMrrtCKC/oWknMIUaFkvL4JDfbRd1eLKmBo0cdWoerovphQFkHb1I8WsRrieEb
j6U4vp4Iwz+pXuZsSnk4r4O5hXaKFzk9WvC8GRMBZLmEj7kl5jmeQ17oHx5y6OW7
g5mK5RCgmBQ2CK4vI54eL72WkNXOfmo6A+jp4t06i4hIUlJhRk9HffIc/VMTsOxp
NMVHOegXnaFhD+XRk550rWs01BeYxOOsbnDsMmI/Tpeexe4Uc+XhiNieBZpKC49N
ZSGr9xSjpTWaFsfYuSiHcxSwy1C468yXgood431E11OG2eq6EUY+e9a+CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf5v0ePQigTDYJXnsK62I3ALwpTMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKaOpdpU
b8PjsOSx3Lc3SL/CvQg3d3bGdi5qCtWmaUMdlEiUl29n/gtMyQluMPi5qAddl3K4
TbjlAtzWMW8Z6hTqyE+bOzaDWa25D9NnHSgf0FcFJD1N2ZJwQwbdl/+6iKR4EZJk
XRx8JWrrMs8lNZh1gIuR25SEcGYBNuwu9stly1b0DNkuLcT/bk8KFq/nKl0+6fk0
9f016bbSDLYB72XItYjOERDqWmab64MFRI4J0f/L9d1Uzq5KMdS3Y8D0kvK79ufz
+us9XOOge2DBHJs+Kh2OpiOHK5PVt0J+dmvWde+XUlADNRBj9k9tnAryuWXYc7Ax
f+jddNisTPoVEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:23 2025 by rpki-client