Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: H9GsbzrflmC/MQxf+DQ8PtFGmNIqITRnutNL81k6kR4=
Subject key identifier: 7A:7A:CE:EC:BB:C0:7D:A9:7E:2D:EC:5A:4B:EF:B4:04:16:9C:DD:DC
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019A70DBFCCD183D070BA72A04D5FD26F3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 107D
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: Ry3nKGfCmxdSulQJJffB/7JWQQ/pQ+aDGUARxfe8Tho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fc:cd:18:3d:07:0b:a7:2a:04:d5:fd:26:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=7a7aceecbbc07da97e2dec5a4befb404169cdddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:93:90:28:8d:cf:15:35:7a:eb:8d:1c:25:
ce:71:3b:1a:21:31:ac:ac:37:90:8c:b0:9c:10:e7:
36:5b:42:65:c3:be:52:32:24:cf:15:0b:48:96:81:
fa:b7:6d:cf:42:df:56:94:76:d0:3e:dd:c0:61:c8:
2d:21:8c:94:c5:4c:63:1c:e9:20:c5:bc:3e:87:8c:
e1:8d:69:c6:b6:1f:73:57:fe:63:4c:f8:7b:b4:0c:
c2:bd:74:88:ab:49:8f:a5:db:b6:d3:8d:00:1f:9e:
d6:be:54:e4:b7:92:f5:d7:ac:70:16:6f:2e:20:f5:
73:9d:6c:5a:c3:e3:88:08:10:05:72:35:1d:87:43:
9e:bb:30:86:d2:a2:86:98:2b:88:5c:5e:e9:8f:6b:
b4:d0:74:ac:0d:b4:20:54:9d:32:3c:b6:e0:aa:7a:
18:75:0c:d0:6b:fc:c2:4f:30:d1:c5:ff:5b:bd:43:
37:6f:5b:b6:2a:ff:51:bc:f5:1c:7a:e2:26:36:a7:
32:c1:11:c0:a0:83:f6:36:1c:ad:11:01:30:63:ce:
cd:a2:75:cc:b3:d5:ae:0a:8f:48:53:e7:7e:95:20:
22:9c:ca:f2:19:a0:f1:dd:5f:63:4d:59:fc:f0:08:
c4:a5:6d:82:81:4e:67:99:18:21:5e:68:33:29:97:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:CE:EC:BB:C0:7D:A9:7E:2D:EC:5A:4B:EF:B4:04:16:9C:DD:DC
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:3a:95:71:0c:d9:06:3e:7a:a2:5c:55:76:e3:87:6f:f5:
2f:ee:2e:2d:2e:5b:1c:f2:b8:87:cf:c8:16:08:56:5e:6d:d0:
aa:a3:9d:94:17:43:3a:37:55:85:24:6f:cc:36:61:5a:69:a5:
2c:2a:0b:b1:e8:8a:00:27:de:cd:eb:39:d5:2a:8e:7b:bf:96:
07:7f:5b:74:38:2c:67:46:9a:0a:b4:73:f1:db:15:8a:9e:f1:
c9:b5:56:e2:0b:4c:be:8d:a4:1d:5a:d8:88:ad:e2:5c:ed:29:
95:0b:0d:c3:74:b2:0a:6e:19:b9:63:10:75:e9:fb:16:b2:c8:
98:f9:b8:88:b5:d1:c9:85:9a:02:46:f6:e4:37:5e:e8:7d:84:
bf:b4:dc:ce:19:5b:c8:cc:f3:d5:18:a9:d2:77:9b:d4:5f:52:
fc:cf:61:d5:d7:1e:9d:a9:23:06:74:32:55:76:78:a0:2d:4a:
8c:dc:f7:22:f5:26:ad:76:86:11:1e:6d:01:ec:01:0a:53:20:
02:9f:d2:f1:68:44:e5:ea:cd:94:a4:9b:fe:42:96:af:69:73:
86:4f:33:13:40:dd:b9:4d:12:c4:8b:f4:a1:ce:48:d9:af:d6:
b0:21:a0:be:1f:3f:ec:dc:b4:56:5e:f2:a3:c4:d5:3a:bb:b5:
db:40:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client