Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: HRQ7DVonnAqQr0/e7/351S3YRofrd6j5v2u30fY1RZ8=
Subject key identifier: 90:19:55:06:E5:BD:84:79:66:B5:B3:FB:0D:FF:BC:16:D6:68:5A:67
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019A7226565447B303E02ADBA1DE359CB666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 0514
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: t0lnMwcys7nnqjeFdXzf+bv7uxOWXds5Q3Hf6E5qvIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:56:54:47:b3:03:e0:2a:db:a1:de:35:9c:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=90195506e5bd847966b5b3fb0dffbc16d6685a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:e1:52:e9:6b:1f:56:fe:9e:0b:67:0e:43:
df:b1:a0:68:cf:cb:21:95:ad:e9:a9:65:3c:a7:5d:
6f:8a:3f:1c:69:fd:d0:36:cb:9c:b3:f8:0a:e7:d1:
ce:70:b1:77:54:33:32:e9:7d:d9:48:0a:c7:f4:d5:
35:93:2f:30:fd:3d:27:a2:77:59:7f:ca:75:01:88:
2a:a0:c8:d0:9f:5e:97:78:db:dd:d0:f7:d0:ae:ab:
69:23:a5:3e:56:ee:f6:ce:0b:68:d4:02:24:70:35:
e6:6a:4d:56:32:86:1f:06:2f:72:21:ed:b2:4c:00:
3a:a4:27:81:4a:28:0b:1d:ef:ff:30:c1:b4:c9:10:
9f:51:43:5c:bb:85:75:09:e8:7f:7c:6b:6e:62:37:
05:19:db:bf:39:4f:6b:cb:d4:91:0d:88:06:2a:fc:
37:61:f9:f5:a2:28:6f:15:90:24:23:26:ad:92:bb:
d2:8b:08:e6:02:33:c8:aa:01:c1:d9:a1:44:8b:ee:
24:a1:03:79:9a:ea:e6:66:04:27:51:5a:47:de:37:
19:5e:44:9a:1d:87:cb:e8:56:6e:cb:ed:00:c7:48:
38:03:21:b8:d8:40:29:0f:04:b8:4d:4a:5b:a1:92:
15:e4:a8:0d:91:19:8a:20:25:a0:0d:9f:c9:28:c2:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:55:06:E5:BD:84:79:66:B5:B3:FB:0D:FF:BC:16:D6:68:5A:67
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:d0:07:a8:95:d9:db:be:38:ab:7a:59:03:32:de:b4:ac:
4f:db:12:98:82:01:8b:bb:36:8e:cc:7a:c5:d6:b5:cf:19:9c:
aa:61:96:0d:7e:e4:55:f5:4e:c6:3d:6e:88:36:ad:22:dc:72:
a9:0b:fa:a7:11:82:91:fa:bd:54:77:1b:47:5d:c5:2c:a1:9d:
05:02:b3:90:1c:42:9b:89:15:7d:19:d0:c9:13:9a:e5:22:e2:
55:b0:f2:df:56:a1:96:a6:39:6c:a4:30:7b:50:79:03:97:40:
39:1f:85:a2:bd:35:79:e2:48:13:20:bd:97:f9:7e:f8:98:14:
b1:20:93:2c:74:16:13:f1:f8:c1:d9:a1:d0:6b:2e:96:fe:ea:
63:96:cb:c3:b9:7a:f2:8e:56:f3:14:ff:79:bb:63:9d:22:1a:
61:41:b9:7c:61:72:eb:ea:3e:6a:1d:d0:4a:66:ca:5a:7f:6a:
fb:27:38:ea:c8:83:39:9a:71:b0:e6:dd:14:a0:e8:a8:ef:b2:
f0:cb:13:d2:b6:c7:f1:7d:b9:76:6b:c0:1b:59:35:60:03:19:
67:02:b7:9f:28:ba:51:5f:5e:7f:77:1e:b5:2b:d5:8e:bb:ac:
18:6b:ca:13:d0:d9:9e:96:36:27:9b:3f:4a:ab:22:95:0a:74:
ca:73:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:01 2025 by rpki-client