Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: LGUZZk48ihF+3myCFq8W1uP3Lk3FwCqZuYwcxA+5SYU=
Subject key identifier: 2B:FB:38:6C:CD:76:28:DD:3C:CF:B7:BE:B2:8C:48:DB:3C:9B:31:BF
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 019A1806038F40DCA2284223562BDF10A76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 21:00:38 +0000
Manifest this update: Fri 24 Oct 2025 21:00:38 +0000
Manifest next update: Sat 25 Oct 2025 21:00:38 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: //PE2Vl9mz43k4zlHoA4g61x185qZC92lh3L58r/azQ=)
2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:06:03:8f:40:dc:a2:28:42:23:56:2b:df:10:a7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Oct 24 21:00:38 2025 GMT
Not After : Oct 25 21:00:38 2025 GMT
Subject: CN=2bfb386ccd7628dd3ccfb7beb28c48db3c9b31bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:ad:1e:b9:29:0a:a1:dc:f9:6a:d2:b0:7b:
1a:cc:cc:b7:12:83:98:80:ee:60:fc:b0:e1:d6:9b:
ee:82:d8:8c:32:00:41:23:ee:2e:80:b4:aa:17:55:
dc:a5:f3:96:f2:7f:6a:6e:47:a2:fd:2e:54:ad:03:
79:2f:51:5f:3a:02:2a:bf:af:2f:d1:50:7f:af:ed:
f8:94:3b:7c:71:73:54:f7:93:42:3e:06:19:fd:66:
04:ae:b5:d0:d5:ef:a4:77:04:7a:74:41:f3:ee:ca:
c9:8b:89:98:2d:6f:a9:83:10:94:84:3b:80:3f:06:
92:dc:b1:95:f2:5f:6e:61:f6:7d:80:ce:95:f8:ab:
f0:87:65:9c:43:6b:64:8c:66:67:24:7a:09:9b:ce:
ca:60:91:f9:4c:41:f0:22:ca:72:e3:ea:db:5a:54:
73:24:e3:48:fc:39:d3:aa:30:a6:dd:f5:b9:4a:f3:
38:4d:c6:15:31:77:4a:f2:3b:3d:c9:52:f1:4f:f8:
8c:fe:a3:30:45:cb:0a:9f:cb:ae:29:ea:6e:a8:f5:
e7:ca:3d:22:46:20:13:75:02:ed:68:9b:18:2c:ed:
cc:c2:e8:22:a3:d3:15:cc:cb:a9:12:7e:4e:f7:a8:
3a:77:3f:af:4b:5f:da:e3:1f:15:92:92:71:ba:38:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:38:6C:CD:76:28:DD:3C:CF:B7:BE:B2:8C:48:DB:3C:9B:31:BF
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:10:3c:88:ee:82:0f:26:11:32:99:ae:56:50:70:b3:cf:
50:1e:8b:49:e6:ea:a2:37:1a:9b:72:93:aa:96:68:f7:0f:84:
d2:82:c6:f6:2e:5e:aa:68:e2:19:ca:c1:ee:5f:39:8e:62:e7:
90:ef:7d:b2:40:70:48:96:69:28:35:ef:8e:e1:2e:2b:82:a0:
20:31:91:a2:6e:46:9a:57:4d:b8:2a:98:cd:54:5b:39:a8:8e:
58:bb:9a:c4:51:b0:63:53:63:d3:f5:f9:c3:a1:7b:a1:0a:fb:
de:2e:e6:28:5f:9b:94:a5:40:72:56:9a:d1:54:15:4a:d6:1a:
4b:6b:af:6c:5a:90:a4:22:e4:70:90:04:f5:d3:00:bd:7a:22:
86:29:9a:8f:92:76:f1:ac:32:81:26:e2:52:d1:0a:cc:f1:7d:
2e:2e:1d:73:89:97:a2:58:aa:07:0d:ce:e9:54:fc:42:b0:e1:
62:69:2d:5f:eb:7f:ef:f6:20:2a:69:2b:51:aa:ca:36:06:4d:
5d:b3:56:b3:5b:a6:b3:71:56:e1:2e:b0:38:23:44:92:35:b0:
61:84:0f:68:05:ea:7f:85:03:b4:ce:5d:62:cd:b5:1d:c4:be:
fa:ae:0c:a2:63:a7:60:66:b7:1a:20:f0:ad:4f:23:99:79:d2:
c6:72:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:38 2025 by rpki-client