Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: oYtCOyR9aD++oOhotCNmVDDgW92zLyBbmnzcYtuxFbg=
Subject key identifier: C1:27:12:A4:4C:AC:FA:56:F2:63:A5:46:9D:F8:C0:C4:65:34:FC:5F
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0199616B4F2DC34E6B98000821EAA2F525BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 1625
Signing time: Fri 19 Sep 2025 10:00:46 +0000
Manifest this update: Fri 19 Sep 2025 10:00:46 +0000
Manifest next update: Sat 20 Sep 2025 10:00:46 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: gMoGimEtW7Qi5V61LDPj3AmHQI0xHmuAp+gooInJIRA=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:4f:2d:c3:4e:6b:98:00:08:21:ea:a2:f5:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Sep 19 10:00:46 2025 GMT
Not After : Sep 20 10:00:46 2025 GMT
Subject: CN=c12712a44cacfa56f263a5469df8c0c46534fc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:9e:22:b7:7a:63:40:59:17:4f:1c:93:36:
fe:23:11:55:eb:40:e2:7f:72:ab:55:a8:67:77:ac:
fc:25:40:ef:c6:84:ac:19:cf:67:56:bd:6d:2c:f4:
67:ce:e7:06:56:43:a1:50:08:b4:27:31:3a:c1:7e:
d8:f7:ca:89:db:49:1d:b7:4c:d3:b4:4e:29:a3:96:
6d:cd:f9:6b:c0:62:07:23:af:4a:72:2b:bd:84:55:
00:e0:13:1a:4f:e5:ce:a5:f3:a4:8e:77:9a:f3:d1:
17:51:2e:6b:30:ff:1e:1d:ea:2c:28:71:93:56:b9:
a1:b0:45:37:cf:a6:f5:b0:1d:d7:c7:73:89:97:de:
bf:06:4c:a6:5c:2f:6d:b4:bc:2f:94:ad:e9:6a:6b:
1d:5a:63:d2:fd:57:8f:35:93:af:aa:39:f7:99:10:
17:1d:92:3b:94:81:56:66:f8:8d:02:ef:c7:dd:85:
3b:4d:f0:30:5a:06:80:c8:ec:74:55:1a:9a:36:8f:
cb:d5:53:0b:65:dd:e7:82:25:70:e3:de:55:bc:f0:
a0:85:0a:52:40:5e:b0:34:e8:99:96:ac:c5:2b:b3:
19:4d:b1:a0:9f:d5:71:5b:16:23:cd:11:e9:75:20:
ea:91:1b:55:80:c2:cc:a3:f0:e7:ce:a5:bf:15:01:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:12:A4:4C:AC:FA:56:F2:63:A5:46:9D:F8:C0:C4:65:34:FC:5F
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:91:e1:86:2d:f1:da:d1:38:13:c9:ae:47:b9:10:3a:90:9c:
8f:be:9e:2e:c0:21:5b:62:db:20:00:b4:79:0e:fd:f4:81:55:
55:0b:c2:13:09:4c:39:03:6f:9c:9b:03:67:32:9a:75:92:da:
88:61:d4:20:92:9c:c3:85:86:42:f5:24:5d:c1:a8:27:f7:cb:
41:ab:73:0a:8e:61:ce:62:16:85:31:5c:75:35:85:34:6a:c4:
a1:27:1a:cf:47:5a:61:40:8f:11:2e:fe:98:f4:b9:a3:ad:41:
9f:f5:46:79:06:59:0c:37:c8:c0:2a:77:10:80:bd:0b:0d:ba:
b1:2b:67:e8:a0:36:79:e6:42:21:65:10:48:4a:9e:6c:19:f6:
05:0f:4a:66:ef:82:d3:c6:20:5d:31:17:ca:31:59:16:4c:7e:
5e:89:7c:a9:45:12:11:9a:1f:7f:fa:16:b4:78:ce:77:d3:ef:
53:ac:32:11:c7:d7:b8:91:9f:19:89:af:08:4c:82:4e:35:3e:
67:ee:9c:05:92:61:0d:86:8b:9d:0c:4d:3d:04:cf:c0:1b:fd:
a7:b6:f7:13:0d:80:e9:13:32:ae:f9:d9:45:51:5e:53:aa:b4:
13:3a:53:48:e1:e8:ee:bf:14:15:62:f4:1a:4d:86:6e:07:b0:
2f:b0:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:08:11 2025 by rpki-client