Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: 5Q+LYZMhOvwDe7Mi/Fu9srsAAW4ZLSDkYxOU1pn3f/U=
Subject key identifier: 21:4F:72:0A:F6:63:E2:EE:E1:07:37:B3:A7:28:E6:27:B1:CB:25:7C
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019A70A50D90D7C8BE0BEB2627293F31323F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0D76
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: pk4AbtIJMb/zTVjaZWnmfBo7UsGnFMSt3TfW/QdbAyg=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0d:90:d7:c8:be:0b:eb:26:27:29:3f:31:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=214f720af663e2eee10737b3a728e627b1cb257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:84:a6:49:cb:f0:1f:e4:2e:65:56:e1:d8:
97:14:0c:4f:48:83:10:d9:aa:71:1a:c0:34:10:0b:
61:f4:e7:e8:37:64:36:fb:70:fd:d9:24:71:a2:c2:
5a:0c:4c:12:54:70:39:87:22:04:77:ea:e7:09:d8:
72:8b:05:77:b1:9b:fa:82:56:3d:48:be:48:2a:cc:
9b:aa:a0:80:0a:87:9b:4a:08:d0:5a:0e:90:70:b2:
16:87:91:5f:8b:ea:f6:3d:37:11:3d:22:81:90:4a:
13:a8:8b:38:82:e8:10:e9:95:59:70:cf:b2:28:1d:
64:88:fc:5d:d7:02:0f:d1:32:c2:a8:dd:e0:4c:2f:
97:02:b4:f1:62:2d:67:50:9d:fa:10:96:44:6f:11:
40:83:95:0e:69:7e:4b:ed:5b:c2:bc:41:c4:90:0b:
ba:aa:1b:e9:e0:44:4f:14:0c:6c:19:03:76:4b:95:
d4:5a:7a:1b:32:d0:4e:3a:b4:68:a0:8d:df:1f:91:
b1:b8:ee:66:f1:24:71:4c:ec:f3:8d:05:95:4e:40:
14:b9:99:46:2b:e7:54:de:d1:61:38:e1:db:8b:11:
6c:e0:bc:ed:98:97:b9:d6:a1:8f:be:d1:13:fa:c5:
9e:16:6e:b5:fe:0a:1f:78:00:c6:09:5e:0c:37:10:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:72:0A:F6:63:E2:EE:E1:07:37:B3:A7:28:E6:27:B1:CB:25:7C
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:16:2d:68:99:ea:23:f3:98:b8:13:e1:a7:46:46:23:5d:ee:
61:85:ec:05:26:2e:6a:01:2d:51:41:e1:97:41:a5:d1:1d:56:
71:45:c2:86:73:f8:78:d9:40:d3:67:9b:46:e5:a8:7c:43:aa:
ed:2c:1b:19:4b:ac:f9:db:b3:95:af:8f:4c:9a:1f:79:f2:67:
b5:f5:9a:26:23:c8:97:64:f4:68:71:9d:50:98:e8:ae:11:4c:
03:6f:3a:fd:73:03:a4:ba:7a:21:ff:53:ab:af:fa:df:d6:c4:
d8:24:f6:6c:80:b5:46:a0:a1:43:66:65:62:21:c7:eb:5c:23:
bd:81:a7:cc:11:2a:75:da:dd:4d:bd:f8:aa:f7:61:d8:b1:d9:
72:14:1d:64:a7:b7:9f:8b:ef:73:ac:d4:1e:ac:a3:11:a3:72:
1f:89:7f:40:4c:78:62:11:93:61:6d:35:ff:91:94:c8:54:ad:
0b:5a:eb:89:97:55:a7:70:f9:79:d3:fc:3a:e1:20:db:4c:54:
43:38:60:08:58:79:cc:ef:0f:68:79:4b:62:8d:de:20:8c:72:
30:2e:58:bf:93:38:46:98:bf:24:49:c9:ba:56:68:ca:9d:c0:
09:32:65:33:7c:74:4d:bb:dc:7a:ce:36:aa:b0:52:d2:2c:a8:
06:33:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client