Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: o6QxNfxGeFJ2O5JZ47yIyq+fpENp2g6sT53IqOxqB4c=
Subject key identifier: 0D:55:FF:12:74:EF:29:0A:A3:DC:1E:DB:B7:9A:9F:81:E6:78:2B:FB
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 019A293044DFC4831138EC3CF481AC40E308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 12BB
Signing time: Tue 28 Oct 2025 05:00:20 +0000
Manifest this update: Tue 28 Oct 2025 05:00:20 +0000
Manifest next update: Wed 29 Oct 2025 05:00:20 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: jX6k+aMQp4jfpEYb1+wxLw4JkjjlTCjajE+9FT3lKC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:44:df:c4:83:11:38:ec:3c:f4:81:ac:40:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Oct 28 05:00:20 2025 GMT
Not After : Oct 29 05:00:20 2025 GMT
Subject: CN=0d55ff1274ef290aa3dc1edbb79a9f81e6782bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:2a:f4:40:cf:06:df:b2:7b:d9:ed:72:ff:
52:03:a6:4d:8e:5b:23:d4:13:22:9a:46:b9:f7:c5:
01:79:5e:b9:f9:24:c5:1e:da:30:be:69:a0:0c:2f:
1d:f5:48:4e:e5:eb:64:7c:ea:32:56:e1:09:2c:06:
da:b7:f3:ac:95:59:70:b3:78:b1:3e:3d:a1:31:ec:
f9:f9:9d:f3:4c:e4:75:8d:16:19:b0:a3:f2:5d:2a:
51:ec:a0:51:a6:ea:1c:17:c4:ab:6f:5e:aa:83:84:
8f:b2:d9:2a:99:a7:b0:7f:7a:0d:a1:27:0a:65:0f:
08:0a:da:2f:87:8f:68:10:38:45:8d:85:e5:b6:dc:
fb:b2:fc:f1:97:eb:64:6e:77:2a:d6:54:c8:a5:42:
57:15:60:c9:0a:02:86:ee:2c:13:da:ff:9d:09:57:
33:bc:39:9e:cd:17:fd:98:74:82:b2:42:2e:08:21:
c0:7c:1f:95:5f:8d:ed:f7:ee:98:8b:ae:6d:50:ad:
71:61:f2:7e:b4:e5:31:24:82:e9:13:21:2f:9f:bc:
2b:d5:55:9b:45:e8:11:c5:82:42:53:90:9b:16:b5:
a6:52:11:57:24:43:3c:5a:07:f7:f8:42:2e:7a:89:
b9:9f:d4:4d:17:14:fe:70:f8:3e:39:24:3f:e7:e3:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:FF:12:74:EF:29:0A:A3:DC:1E:DB:B7:9A:9F:81:E6:78:2B:FB
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:79:74:0f:45:ce:a1:52:01:f7:12:9d:4e:49:6b:9d:1e:
bd:63:32:b0:26:b6:e3:09:27:4b:c0:13:65:89:2c:a1:4e:9e:
c2:fd:1d:2c:30:65:d2:d6:8b:ec:6e:37:fa:e3:5d:d6:ba:56:
49:d4:bc:3e:5a:2e:06:42:1e:0f:07:56:f1:ef:76:64:3c:5f:
11:6b:71:6d:77:9a:02:9c:ed:ab:8a:9e:68:cd:8c:f1:7a:a6:
f3:35:d6:c9:d7:85:3a:fe:5f:d2:6d:d5:4e:6b:ed:70:0d:10:
fa:a1:36:fe:64:eb:e2:57:86:2c:94:fd:4d:a7:be:02:b2:ad:
15:cc:e6:0a:32:01:1a:a3:36:e3:03:19:73:53:53:02:cd:55:
4d:4b:3b:48:f7:a4:5d:53:85:3c:91:71:43:ca:25:95:15:9b:
bf:87:c3:6f:64:86:11:64:b2:85:24:c0:57:2c:9c:5a:d6:20:
9c:20:78:ed:2e:c1:d6:04:d4:b0:0c:3a:90:37:30:ab:7d:01:
16:c8:3e:51:ff:8a:bf:37:b4:a1:a2:8d:7e:d4:e8:29:27:10:
14:79:75:a7:7a:ed:03:6f:c1:01:24:17:7f:2f:03:f0:39:bf:
87:ff:20:c9:12:a8:43:75:db:8b:75:55:40:40:20:30:0c:e9:
ef:c7:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:06:49 2025 by rpki-client