Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: mfEh8Bgx/RlM2lRA/nAjf9pdTE7VftATkeY/AmXK7p4=
Subject key identifier: 7E:6B:26:00:D8:C1:4B:77:8B:6B:26:2E:2B:CA:25:70:40:92:9B:DC
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019922C30EEA5FF8619983CC4B49D856F53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 0FD0
Signing time: Sun 07 Sep 2025 06:00:32 +0000
Manifest this update: Sun 07 Sep 2025 06:00:32 +0000
Manifest next update: Mon 08 Sep 2025 06:00:32 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: j/u5tkAkzzgItcGZAETxNqsT1RQz82hehxyb9+P4VX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0e:ea:5f:f8:61:99:83:cc:4b:49:d8:56:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Sep 7 06:00:32 2025 GMT
Not After : Sep 8 06:00:32 2025 GMT
Subject: CN=7e6b2600d8c14b778b6b262e2bca257040929bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:52:0f:b7:a0:a9:35:1d:69:f4:ec:4e:f7:
fb:da:4c:eb:4d:df:37:76:16:6d:1a:4c:12:0a:5f:
ab:3b:8e:83:90:a3:77:c0:8e:a5:e1:e0:4a:d5:6a:
51:13:6f:3e:de:4d:6c:2a:7b:cb:51:b0:3a:c9:8b:
09:17:cd:1b:56:ee:a5:e3:7d:c4:5c:0c:3e:6b:b6:
e0:f8:db:ac:83:15:02:87:d6:c6:44:f2:04:ee:20:
47:9e:f4:d4:5c:33:9e:55:2f:41:4c:73:d2:29:9e:
dc:3c:2b:03:59:28:95:ba:d6:45:fb:1e:49:a4:48:
e6:f3:15:91:1a:fd:bc:19:07:ba:b9:d7:52:f2:c2:
c7:39:a1:2d:4c:21:99:5e:6f:6b:af:70:fd:79:d2:
c2:74:8b:a3:7d:80:5f:65:fd:ea:31:2e:23:c0:9c:
98:21:3c:14:a8:8c:b9:56:01:f0:c3:fb:09:c1:3e:
df:04:e9:c9:94:8a:1e:13:30:c3:2c:05:04:d9:83:
06:36:f3:8b:cc:a4:57:0e:3b:25:75:a1:e5:7e:a6:
c8:fd:bf:b9:5a:ab:09:90:79:1a:0e:a7:4f:fb:2a:
90:1d:eb:76:11:23:61:49:63:e5:33:5f:c8:5b:1c:
bc:e8:b3:bc:03:61:0e:18:37:d5:9a:c5:55:20:92:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:26:00:D8:C1:4B:77:8B:6B:26:2E:2B:CA:25:70:40:92:9B:DC
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8c:e4:95:c2:86:50:60:67:2a:70:6c:c5:f2:ee:5c:ad:64:
21:cb:4c:f7:08:80:0a:94:a9:52:5c:f6:42:08:4f:83:40:17:
f6:2f:cd:92:56:19:1a:1f:e8:dd:7a:b8:26:ce:a2:69:6c:f4:
09:22:f0:cf:77:9d:d3:da:34:d8:c5:ba:33:f1:7d:65:43:fa:
e5:79:b9:30:49:8e:50:f4:2e:5a:72:c3:9d:ea:39:b5:bc:e5:
1c:48:2e:09:2f:ee:9f:f1:5c:3a:4e:2a:6e:18:61:77:34:b3:
4c:84:86:14:e5:0c:cb:61:e8:41:63:c5:60:5d:c3:bb:27:de:
b6:17:7e:76:4e:21:1c:dc:da:da:1b:23:8a:f3:15:80:a6:56:
13:d8:e5:c8:b7:ea:47:03:1c:db:72:3b:a1:07:d9:61:97:c4:
bb:f1:75:2e:a3:7e:5d:10:84:08:3f:a8:2e:32:76:a4:df:9a:
06:50:04:f9:84:a9:d3:60:81:3e:61:0e:29:27:d4:fb:ac:47:
cd:8f:b7:1d:29:af:a7:3c:71:c1:af:2f:ba:07:35:86:10:dd:
b3:76:82:23:ba:d2:96:c3:66:83:c4:00:c9:d5:eb:5f:48:c9:
8b:7d:b4:bc:37:0f:fd:e6:04:48:b5:f3:fd:01:ab:d1:5a:9d:
16:52:95:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiww7qX/hhmYPMS0nYVvU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi
MGI1YmQwHhcNMjUwOTA3MDYwMDMyWhcNMjUwOTA4MDYwMDMyWjAzMTEwLwYDVQQD
Eyg3ZTZiMjYwMGQ4YzE0Yjc3OGI2YjI2MmUyYmNhMjU3MDQwOTI5YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTZSD7egqTUdafTsTvf72kzrTd83
dhZtGkwSCl+rO46DkKN3wI6l4eBK1WpRE28+3k1sKnvLUbA6yYsJF80bVu6l433E
XAw+a7bg+NusgxUCh9bGRPIE7iBHnvTUXDOeVS9BTHPSKZ7cPCsDWSiVutZF+x5J
pEjm8xWRGv28GQe6uddS8sLHOaEtTCGZXm9rr3D9edLCdIujfYBfZf3qMS4jwJyY
ITwUqIy5VgHww/sJwT7fBOnJlIoeEzDDLAUE2YMGNvOLzKRXDjsldaHlfqbI/b+5
WqsJkHkaDqdP+yqQHet2ESNhSWPlM1/IWxy86LO8A2EOGDfVmsVVIJIZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5rJgDYwUt3i2smLivKJXBAkpvcMB8GA1UdIwQY
MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt
NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk
LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYzklcKG
UGBnKnBsxfLuXK1kIctM9wiACpSpUlz2QghPg0AX9i/NklYZGh/o3Xq4Js6iaWz0
CSLwz3ed09o02MW6M/F9ZUP65Xm5MEmOUPQuWnLDneo5tbzlHEguCS/un/FcOk4q
bhhhdzSzTISGFOUMy2HoQWPFYF3Duyfethd+dk4hHNza2hsjivMVgKZWE9jlyLfq
RwMc23I7oQfZYZfEu/F1LqN+XRCECD+oLjJ2pN+aBlAE+YSp02CBPmEOKSfU+6xH
zY+3HSmvpzxxwa8vugc1hhDds3aCI7rSlsNmg8QAydXrX0jJi320vDcP/eYESLXz
/QGr0VqdFlKVBA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:58 2025 by rpki-client