
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: 3LaLOqU0+bJPn28/yrvTYsZb5OZzptSg95aBS2H4Akg=
Subject key identifier: 9A:82:77:D9:E7:67:76:1F:E5:C9:12:49:37:29:CC:BA:3F:98:72:63
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019A71EE93BDA2FE7B08BDF2A0569BB29E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: 6Jpy1KD2PG2UKWpPRKtphgqLGSDFHPcNIPhkzCKB+ks=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:93:bd:a2:fe:7b:08:bd:f2:a0:56:9b:b2:9e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=9a8277d9e767761fe5c912493729ccba3f987263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:93:dd:81:67:5b:ef:05:e4:24:c9:6a:78:
a7:ad:b8:a3:98:a2:0c:a7:5d:ef:ce:e1:35:d0:09:
64:bc:32:b5:08:3d:d4:36:26:a4:13:9c:de:d7:c3:
a0:24:cc:a4:e4:69:c4:b3:c2:c7:f5:a0:a1:f0:26:
6e:bd:d0:24:e9:57:19:0a:a1:14:53:b6:7f:69:7e:
fc:91:cf:f1:de:13:4b:9b:2a:e8:d9:32:43:9a:08:
84:e4:7c:52:7b:5f:1c:e5:97:4f:a7:fd:42:98:ec:
9b:34:98:fa:3f:80:dc:72:0c:66:b2:00:9e:5f:55:
ad:01:36:4b:0b:cf:4b:86:85:c9:c8:a4:79:7c:fc:
0b:e0:de:1e:e2:95:85:40:57:74:68:80:f7:97:62:
a9:38:7c:18:55:ee:4e:c7:a6:8e:d2:97:18:cb:c5:
a8:6e:6c:22:0d:a8:12:22:17:5f:5b:e5:62:87:b4:
95:2f:80:69:9b:94:42:e1:c9:88:04:9b:40:73:ba:
a2:d9:ea:50:dd:2e:d2:53:e9:23:c7:c0:02:45:7c:
f2:24:7c:ce:1e:63:12:a8:13:94:0b:8f:a3:4d:fe:
9d:ef:63:50:cb:0c:2b:9c:be:e3:bf:43:0d:36:49:
fb:1c:22:7b:0a:7a:25:c9:d9:34:b5:96:75:86:9c:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:82:77:D9:E7:67:76:1F:E5:C9:12:49:37:29:CC:BA:3F:98:72:63
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:e0:ee:7c:c7:bc:8f:da:dd:9f:21:24:07:d8:5a:b1:b3:
c9:06:39:56:4a:c0:2b:48:87:b3:88:94:f0:9e:a5:82:60:b9:
99:ab:e6:33:82:cb:eb:c7:d3:b8:51:3b:2f:74:82:c9:6c:50:
00:f6:2b:52:ba:fc:65:7e:73:a6:5f:4b:32:d7:e7:90:95:5e:
f4:2f:e2:8e:f1:60:bb:cf:99:b6:f7:2c:24:15:12:c1:be:57:
57:c5:07:a0:64:d7:2a:41:89:d1:db:c0:8c:17:a5:95:40:72:
ba:47:8d:ed:98:94:29:75:3e:a0:5b:b8:06:01:c4:33:dc:13:
25:33:2e:b8:13:31:d5:b3:71:81:3b:e5:7b:20:a3:37:49:04:
c5:ed:15:2f:76:90:92:52:3a:08:5a:0b:17:d8:d8:e3:de:1f:
1b:4c:ee:a2:a1:7d:eb:a3:d6:3d:be:12:cd:35:8d:e5:59:0d:
60:b1:b9:ac:17:6a:88:85:68:f8:6c:06:0a:bb:13:63:38:33:
e7:02:97:c2:98:47:c1:e1:22:62:28:ab:8b:0c:93:34:39:a3:
97:57:ad:9a:eb:dd:bc:19:2e:09:a7:dd:9c:d6:66:5f:3a:53:
b2:e3:bc:46:df:ec:a2:6e:a6:2c:47:2e:c7:3a:6a:1a:f5:9b:
b9:98:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:05 2025 by rpki-client