Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: 7/q8xdj6M+3o7XYp/oou2e758gWuNRxce0FIPLSqlY0=
Subject key identifier: 70:7E:16:E7:5F:1D:AC:76:6B:0E:2F:5E:C8:7B:65:2E:F2:FD:05:A8
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 019A071277C46231682ABFEE70433554DDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 03DC
Signing time: Tue 21 Oct 2025 14:00:42 +0000
Manifest this update: Tue 21 Oct 2025 14:00:42 +0000
Manifest next update: Wed 22 Oct 2025 14:00:42 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: tBPr2ExC4p8GmUg91VQw4XsEtz572ebnFprmeINgS0U=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:12:77:c4:62:31:68:2a:bf:ee:70:43:35:54:dd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Oct 21 14:00:42 2025 GMT
Not After : Oct 22 14:00:42 2025 GMT
Subject: CN=707e16e75f1dac766b0e2f5ec87b652ef2fd05a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:00:85:26:5e:bb:89:98:a9:b9:4c:b8:20:
24:f5:5f:fc:56:95:74:33:72:79:93:c9:c1:83:f0:
0d:d4:50:03:48:26:73:7c:15:a2:63:3d:3d:8c:e4:
78:69:1c:b8:2f:13:cf:4e:36:09:bd:c3:80:4a:62:
30:41:16:f4:3b:8a:0f:86:a8:57:d5:81:31:82:de:
65:de:b8:0e:db:5e:2f:9f:81:73:e0:f7:73:67:04:
d4:70:78:bc:0e:b3:31:eb:ec:8c:97:72:7c:ce:3f:
3d:82:e9:78:0c:67:c8:8b:14:83:72:86:38:a9:54:
9e:d1:52:80:42:92:a6:d9:fd:2c:6d:34:53:6e:f2:
9a:98:01:9b:d7:6e:8d:ff:06:c7:43:27:98:9b:98:
0c:be:30:f6:7d:bd:6a:27:93:5a:97:c5:bd:a2:20:
30:61:b4:4a:1c:4e:c5:ac:e6:8b:0c:a2:80:3a:98:
b0:29:a3:8e:3e:fd:7c:7b:aa:83:f0:ac:5e:4c:02:
36:80:07:53:e0:96:2b:06:f6:8a:b9:39:a6:f7:dd:
bc:36:46:d5:1e:3b:fb:ec:66:bc:2b:83:0d:e8:2f:
e5:de:71:69:ce:cd:b9:f4:53:37:b0:ab:57:cc:7b:
6d:b3:e8:e3:2b:e9:cd:da:aa:4a:7b:8a:dd:d9:30:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7E:16:E7:5F:1D:AC:76:6B:0E:2F:5E:C8:7B:65:2E:F2:FD:05:A8
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:22:da:b1:31:c4:84:71:61:b9:e8:0e:8d:3c:33:46:58:03:
93:e5:d7:d9:10:3d:54:28:62:95:92:70:3a:fc:17:99:e3:70:
b8:68:49:61:7a:ff:ac:51:bc:a9:7c:00:39:6d:c7:70:37:7e:
8d:1e:63:0d:0f:8c:a6:26:cc:04:d7:1b:19:7a:d0:8d:cd:cd:
c9:a2:99:ab:1e:e9:4d:1f:ec:5a:b9:ec:37:31:04:15:49:05:
aa:8b:fe:cf:6d:25:16:66:98:ad:45:10:52:bf:51:25:80:f7:
64:a0:26:e1:e1:ef:ee:8f:9f:74:16:72:da:c5:b8:47:21:6c:
a3:a4:c8:0c:2e:be:a2:07:4d:fb:fc:7e:66:6d:ea:4d:e4:88:
32:9a:cc:b0:3c:d8:32:b0:b8:81:2f:21:a0:0e:02:31:16:f1:
80:a8:bf:32:42:6f:f6:8e:df:24:c5:e7:db:0b:7f:de:fa:cc:
dd:4f:49:b9:09:41:f3:a6:96:91:58:90:bd:70:96:60:dd:de:
48:59:0c:ad:db:4a:e9:21:eb:3d:76:0d:fc:0b:91:4c:af:3b:
c1:76:e7:6a:e5:78:9b:e1:13:eb:f8:08:91:23:ba:75:0e:50:
79:1a:7e:9a:e4:b8:f1:31:76:f2:16:cc:ea:05:94:52:5e:31:
04:ec:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:41:23 2025 by rpki-client