Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: iHE3Ii08AtHX1yYYNfgDNRYhLGOXS8XlhRUMU1u6WyA=
Subject key identifier: D0:83:FB:0E:61:0D:78:9B:2D:53:E1:16:B0:8F:09:4E:8E:2C:4F:64
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019A1D9A9AF05849DFCA3828BDBD6FFDAD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 1155
Signing time: Sat 25 Oct 2025 23:01:02 +0000
Manifest this update: Sat 25 Oct 2025 23:01:02 +0000
Manifest next update: Sun 26 Oct 2025 23:01:02 +0000
Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: C7NfB7gfPblajhs/oftQ/d++3eeMWFk1x45nIZIbI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:9a:f0:58:49:df:ca:38:28:bd:bd:6f:fd:ad:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Oct 25 23:01:02 2025 GMT
Not After : Oct 26 23:01:02 2025 GMT
Subject: CN=d083fb0e610d789b2d53e116b08f094e8e2c4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:89:01:94:84:9f:f6:da:d6:e2:c0:f1:b5:
c5:d9:25:1b:e2:b1:b5:60:74:d1:b2:c1:b2:55:f1:
42:d7:e5:dd:3f:50:69:d7:5f:a9:48:e6:a8:15:db:
5a:db:27:cf:eb:71:de:50:3c:dd:86:46:fe:94:41:
f7:96:17:1c:7d:6f:ac:4e:33:c6:65:3c:63:89:19:
a0:94:f2:e4:fd:64:b7:3c:87:e9:db:15:9a:1e:82:
ab:2a:9c:b8:53:fd:c0:00:a0:87:f4:d2:9b:ff:b4:
5b:c1:2d:f2:c4:b7:3b:b5:4d:27:5a:44:70:ab:a9:
dd:e1:f2:a7:f0:2c:2d:2b:a9:af:3e:21:7b:58:00:
15:d4:de:f9:4d:e4:22:79:ff:5e:b5:bf:7a:15:be:
98:54:31:4b:14:a0:54:f4:de:69:8f:90:4a:0c:8d:
a8:08:63:ff:4a:d5:d5:8d:96:69:e0:6c:01:3c:ca:
b9:41:42:db:bb:7e:c3:46:f5:db:46:a6:60:ce:06:
73:fe:80:c3:8c:9e:08:29:21:39:bb:83:ec:a6:c9:
c4:78:92:e7:ce:d1:03:cf:fb:e2:4f:c5:65:34:ad:
fc:7e:bd:f2:65:43:17:73:80:c6:b9:54:4f:44:d8:
0c:6c:94:ee:bb:d8:7f:65:e0:c5:29:17:65:2c:11:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:FB:0E:61:0D:78:9B:2D:53:E1:16:B0:8F:09:4E:8E:2C:4F:64
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:39:25:e5:2e:3f:a0:4d:46:d0:ca:50:ea:ee:e9:b5:22:
f4:48:1d:19:87:20:43:0b:1c:41:8d:3f:02:53:76:26:e1:4d:
68:4c:07:fa:6c:4a:82:96:43:e1:bf:0e:4f:64:6c:98:da:70:
64:15:3c:fb:0b:bb:c4:f7:90:79:f3:93:e3:5b:49:ec:90:b5:
cd:f4:76:a3:a9:58:b5:3a:3b:b6:14:8a:c4:b9:93:7e:2d:1d:
5d:bf:5e:e4:e5:90:9d:6c:8a:af:ce:e7:1f:2d:32:1a:4e:35:
7d:6e:fb:27:92:fb:c1:84:35:23:3f:51:3f:5c:61:ea:0d:cd:
bd:34:94:e8:1b:a3:39:e5:27:2d:82:c3:7d:54:3a:68:ed:cd:
34:f0:fb:64:af:6c:c5:25:4b:88:09:11:be:44:1a:a8:6f:ee:
9e:0c:c0:1f:97:30:9a:d9:c6:f1:6f:da:32:65:5d:28:28:c7:
57:e9:09:84:cd:08:61:87:48:e1:90:df:9d:24:e3:f4:cc:5f:
ef:c7:45:99:ff:88:b5:25:39:23:13:ce:82:3b:9a:f4:55:38:
18:2e:35:f5:f6:b4:ee:88:96:65:ec:8e:4b:a0:a9:14:da:5c:
32:f3:f9:45:30:6e:33:2b:1b:8f:6a:4f:53:eb:65:16:54:3c:
f5:7e:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:58:18 2025 by rpki-client