Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: g3F14R3II7qU9h73flgy2kheXVER2qfsUn9t0wxFQiw=
Subject key identifier: 16:09:FF:93:48:99:3C:61:73:88:73:BA:82:A0:B0:8D:66:B7:08:57
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 019A4B18EE2B086183DE4568D7E207AC0F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 169E
Signing time: Mon 03 Nov 2025 19:01:56 +0000
Manifest this update: Mon 03 Nov 2025 19:01:56 +0000
Manifest next update: Tue 04 Nov 2025 19:01:56 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: nMvUszA20zaQpk/O8Bwi8k34X04w1gq2ubSGvQeCP7c=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:ee:2b:08:61:83:de:45:68:d7:e2:07:ac:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Nov 3 19:01:56 2025 GMT
Not After : Nov 4 19:01:56 2025 GMT
Subject: CN=1609ff9348993c61738873ba82a0b08d66b70857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:5e:00:4a:ed:60:a8:74:85:ac:2f:9e:32:
ad:9f:4a:b4:ab:de:02:e3:3b:25:e1:22:ac:60:be:
7f:86:ba:33:8c:77:96:6a:d5:68:2a:21:11:ae:56:
38:47:a0:f5:38:28:9a:38:78:72:fb:0a:6c:c6:01:
bb:26:56:55:75:ec:e6:92:ad:cc:66:3d:12:f6:13:
37:c9:90:7b:54:5d:e0:9f:3f:88:10:7e:81:bb:e9:
f1:cf:e2:66:5b:94:c7:55:06:a4:d5:b2:8a:e0:1c:
7c:be:e4:67:8b:20:59:6b:6a:b8:53:74:dc:d6:3a:
c0:09:56:6e:8b:3d:6d:01:cd:95:02:3e:b5:6a:70:
74:ed:da:3f:c1:21:15:fd:ce:6c:7a:6b:08:ae:55:
61:fa:fa:c9:e1:78:f0:ae:38:54:a9:e1:4f:d4:6c:
8c:8f:8b:9c:8b:fa:93:84:e8:e9:7c:be:e6:a7:7f:
a2:5b:9d:0d:bb:78:cc:93:52:15:19:19:23:32:9c:
df:3d:3c:1d:33:88:85:09:4a:ef:5f:9f:9a:ce:ec:
04:e6:20:ad:a0:2a:91:ad:c9:35:8e:3f:c8:ab:d5:
b4:9a:19:72:bf:1a:7a:8a:de:70:08:fe:53:ca:6c:
c5:5b:c1:3b:e3:23:8b:15:0a:7c:83:83:8a:11:49:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:FF:93:48:99:3C:61:73:88:73:BA:82:A0:B0:8D:66:B7:08:57
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:17:2c:22:26:6c:69:fc:0a:83:8f:5e:30:25:4d:9c:cd:
11:ea:e1:e3:1b:35:16:6c:ac:c5:62:67:f7:fe:58:81:a0:74:
a4:84:07:3f:41:16:e2:f8:b9:44:4c:c4:af:14:3a:26:fa:0c:
e8:27:8e:c4:87:36:66:98:5f:7b:70:aa:a5:54:31:94:cc:5a:
cc:c1:d0:f4:b3:32:a0:11:79:71:8e:d1:b1:da:7f:49:70:24:
a5:66:cf:57:c7:7d:fa:e2:52:79:02:9f:5b:d9:bc:d6:ee:9d:
e7:9e:e4:d8:d7:cb:10:74:f1:2c:94:8f:09:f0:2f:41:a9:b3:
35:3c:79:71:4d:da:af:c2:85:a4:2e:e4:ea:ff:7f:62:a5:3d:
dd:a1:7a:16:ac:ac:29:92:58:0d:74:61:a2:9b:b4:6c:1d:da:
89:43:7d:8c:b0:e6:15:c2:9b:80:b4:50:a9:07:b1:dd:42:75:
66:d9:ad:9c:9f:6c:f8:ec:4f:15:ab:30:6b:d5:d3:78:a3:7e:
0b:b5:13:a9:c3:6e:b0:52:5b:08:2b:ec:6c:36:d4:c8:cc:6c:
e0:36:d1:0c:ef:89:3c:37:c5:e3:fe:57:b5:4f:32:04:58:c5:
87:c5:20:45:18:75:51:5d:e4:fc:52:ed:65:dc:44:aa:0e:7a:
8e:cf:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:11 2025 by rpki-client