Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: psmPlPedfTU+q8r4U4lntATJbwC2DknjFx2A0dBLbn8=
Subject key identifier: 32:AA:5A:99:A2:68:E2:7A:2F:B5:88:F3:FA:19:4F:B7:93:BF:5E:6B
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 019916F6D915FD12A3533B786C25F7DE1627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 23:01:40 +0000
Manifest this update: Thu 04 Sep 2025 23:01:40 +0000
Manifest next update: Fri 05 Sep 2025 23:01:40 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: kNLs8jhTG776xFr5vf+0tEXq+iXNdLZAzrg9/AAV6H4=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:d9:15:fd:12:a3:53:3b:78:6c:25:f7:de:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Sep 4 23:01:40 2025 GMT
Not After : Sep 5 23:01:40 2025 GMT
Subject: CN=32aa5a99a268e27a2fb588f3fa194fb793bf5e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:c9:78:f5:5f:f1:87:7d:ff:aa:67:9c:5a:
e0:84:e9:08:d5:b4:7a:a6:14:b3:22:07:e4:80:28:
fa:75:96:0d:2b:df:f0:ae:49:3a:96:d4:51:76:31:
8a:4b:07:45:7d:9a:d8:ca:ac:62:06:65:03:42:43:
96:82:c3:e6:da:f5:21:0a:98:42:01:8a:b8:63:46:
c1:b4:60:93:aa:fa:0d:75:27:28:c5:a2:f3:62:df:
0b:df:32:88:5b:ce:df:96:6b:e1:c8:91:e9:17:99:
e3:39:60:91:23:cb:31:9a:c5:46:62:4e:c0:49:2d:
b9:c0:82:c3:39:42:ac:07:50:6c:be:12:69:a0:fb:
f0:f8:03:04:2d:1a:7f:a8:9e:30:b5:37:35:02:78:
48:63:46:d1:72:47:06:03:69:d7:e6:93:fb:5f:1f:
59:2f:42:36:03:78:5e:1b:51:30:35:1e:86:52:78:
ef:9b:e0:27:41:52:6a:ba:ad:7a:f2:41:f8:ab:2e:
54:4e:80:90:a4:a3:46:9a:07:81:90:05:8f:27:72:
5c:b5:26:24:5c:40:ea:3e:d8:0f:d5:81:6e:e1:30:
e2:08:ae:fe:db:2e:76:3b:8c:6d:6c:bf:a5:be:42:
67:7d:5f:bb:59:7a:c6:0a:92:75:71:9f:44:26:df:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:5A:99:A2:68:E2:7A:2F:B5:88:F3:FA:19:4F:B7:93:BF:5E:6B
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:44:2e:87:51:15:e0:9b:3b:46:27:c8:4a:d0:1a:fd:69:b7:
64:7e:1c:b4:6a:76:b1:be:23:41:34:ba:d4:0e:29:19:4a:fa:
ee:6d:5d:8b:7e:51:b1:50:9f:f8:0a:00:3b:39:85:68:43:80:
29:ec:0c:7a:73:53:22:4a:65:f9:73:eb:da:5b:c0:32:f7:5f:
d7:b9:00:d3:77:19:7e:59:da:b4:03:dd:4e:9e:c9:dd:09:a1:
12:7e:04:87:7d:aa:ab:5a:cf:e7:04:1a:ae:04:d1:12:6d:6c:
b3:d0:01:ad:c2:20:fb:3e:26:95:ae:cd:b2:4d:31:8e:a9:6b:
67:a6:90:90:3f:06:02:fb:86:93:71:6a:c5:09:f2:43:ad:d3:
3d:de:f2:de:73:fd:51:b5:32:a2:da:74:3b:78:cd:e9:3a:4e:
f4:b0:55:e9:35:3b:8d:a8:da:ec:2e:e0:a1:ed:1f:f7:46:82:
34:0c:0a:06:87:cb:95:6e:c6:63:de:71:6e:1b:b4:60:d9:8a:
d2:79:19:0b:5d:00:c1:42:50:75:95:66:63:fc:27:55:27:6f:
2c:6c:f8:85:fc:ee:4d:33:ce:d0:fe:b2:e9:83:09:57:3a:81:
f1:59:9f:42:e1:27:8e:a1:d7:d9:e9:ee:79:4e:26:f4:bc:6b:
07:59:b3:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9tkV/RKjUzt4bCX33hYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw
ZjgyNmIwHhcNMjUwOTA0MjMwMTQwWhcNMjUwOTA1MjMwMTQwWjAzMTEwLwYDVQQD
EygzMmFhNWE5OWEyNjhlMjdhMmZiNTg4ZjNmYTE5NGZiNzkzYmY1ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrJePVf8Yd9/6pnnFrghOkI1bR6
phSzIgfkgCj6dZYNK9/wrkk6ltRRdjGKSwdFfZrYyqxiBmUDQkOWgsPm2vUhCphC
AYq4Y0bBtGCTqvoNdScoxaLzYt8L3zKIW87flmvhyJHpF5njOWCRI8sxmsVGYk7A
SS25wILDOUKsB1BsvhJpoPvw+AMELRp/qJ4wtTc1AnhIY0bRckcGA2nX5pP7Xx9Z
L0I2A3heG1EwNR6GUnjvm+AnQVJquq168kH4qy5UToCQpKNGmgeBkAWPJ3JctSYk
XEDqPtgP1YFu4TDiCK7+2y52O4xtbL+lvkJnfV+7WXrGCpJ1cZ9EJt8IPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKqWpmiaOJ6L7WI8/oZT7eTv15rMB8GA1UdIwQY
MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt
YzFlOTQxZTU5YzE0LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0
LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUQuh1EV
4Js7RifIStAa/Wm3ZH4ctGp2sb4jQTS61A4pGUr67m1di35RsVCf+AoAOzmFaEOA
KewMenNTIkpl+XPr2lvAMvdf17kA03cZflnatAPdTp7J3QmhEn4Eh32qq1rP5wQa
rgTREm1ss9ABrcIg+z4mla7Nsk0xjqlrZ6aQkD8GAvuGk3FqxQnyQ63TPd7y3nP9
UbUyotp0O3jN6TpO9LBV6TU7jaja7C7goe0f90aCNAwKBofLlW7GY95xbhu0YNmK
0nkZC10AwUJQdZVmY/wnVSdvLGz4hfzuTTPO0P6y6YMJVzqB8VmfQuEnjqHX2enu
eU4m9LxrB1mzxw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:15 2025 by rpki-client