Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: yr2PvyMWsh1Kf6wfbB45LEQ6kj88waYeDzvDicRi1Vc=
Subject key identifier: 63:44:B4:15:50:19:CD:26:CB:D9:62:05:CE:10:ED:F2:B5:D6:F4:13
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 019A70A53BA35DB13B9BA688A7CC4D06907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:08 +0000
Manifest this update: Tue 11 Nov 2025 02:01:08 +0000
Manifest next update: Wed 12 Nov 2025 02:01:08 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: 274L+7d+nY9tOs64w5J86ad3o/98V3DChO+r1KgkPqA=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:3b:a3:5d:b1:3b:9b:a6:88:a7:cc:4d:06:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Nov 11 02:01:08 2025 GMT
Not After : Nov 12 02:01:08 2025 GMT
Subject: CN=6344b4155019cd26cbd96205ce10edf2b5d6f413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:84:39:19:c0:f5:f5:3b:0a:82:4a:84:a0:
33:77:22:2b:21:f3:97:70:4e:70:cd:a3:5e:66:b8:
8c:49:21:c5:0a:ae:82:59:57:a9:4e:08:4e:d0:92:
c8:90:4f:fa:e2:17:73:ef:67:d5:53:5e:94:88:20:
cf:f0:c0:4b:eb:ab:e7:c8:05:46:fb:7f:6f:f0:55:
13:ef:a1:97:2d:cf:12:c1:8f:9e:22:2e:ee:1d:0c:
26:1b:fe:b5:7d:12:41:7c:25:60:19:64:d0:04:36:
95:de:7c:79:ba:61:80:01:31:26:5e:0e:e3:de:6e:
7d:b5:66:5a:42:0d:3b:47:fe:ba:f7:4b:2f:49:3a:
41:1d:dd:f3:e8:a1:5f:ad:bf:77:6c:d4:06:06:90:
6f:6f:a2:6e:ff:70:96:83:7f:f5:56:79:cb:3a:18:
9c:4e:bd:ad:b9:c6:e3:6a:92:a0:1c:a6:93:1b:33:
8b:48:2f:42:32:e1:f1:32:78:c4:5f:5c:de:69:0c:
22:a1:90:4b:dd:22:24:4e:3d:70:36:6c:1f:2d:55:
78:6e:1b:0b:d9:ee:3b:c0:ec:4d:8a:dd:af:20:5e:
7d:35:75:83:82:ee:91:1a:d8:73:85:48:16:fb:f1:
3b:aa:ff:58:cb:55:68:64:74:59:0a:c6:ad:08:56:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:B4:15:50:19:CD:26:CB:D9:62:05:CE:10:ED:F2:B5:D6:F4:13
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:4f:4a:35:07:22:51:a9:3b:a1:7c:24:56:29:01:e2:ad:
92:da:2d:ad:d5:ea:40:dd:4b:3c:3e:2a:ca:e6:48:69:d5:ba:
74:cc:97:c6:0b:55:b4:60:3d:e3:0a:74:e5:f2:af:29:5c:30:
d0:3c:a1:f5:e3:99:d6:2c:e1:40:a2:53:09:94:51:f4:17:9d:
80:33:2c:ba:c2:57:90:bf:cb:3b:d3:bb:22:db:5d:8f:c1:5a:
55:a5:18:ff:2f:26:99:08:a5:80:4d:c6:15:6b:53:07:cc:45:
02:76:c8:30:23:ff:87:7f:0a:65:e5:2a:ac:2b:f1:19:ce:ac:
3f:a8:d1:3a:73:55:7e:88:48:0b:8f:aa:88:54:c3:5e:46:64:
99:1a:81:dd:50:07:55:83:4c:1b:0a:6c:ee:ab:c5:00:f1:36:
06:fc:78:b2:47:46:9d:39:85:4c:ea:e6:18:87:2b:89:6e:fe:
83:58:75:16:f5:f6:94:fa:3c:5b:e3:3b:9a:28:26:af:00:d1:
61:a2:71:76:ef:24:2b:8e:72:69:9c:50:83:aa:01:0a:e8:5e:
0a:06:04:8d:d1:ba:80:63:4e:74:ec:d9:43:b2:c9:96:01:43:
59:e7:ac:b7:32:83:0e:4e:5d:fd:29:18:ab:65:b6:47:f8:9d:
47:ef:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client