Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File: TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier: lKxSMxyhd0/mhrCptA5/P43BLKJ2RgWrJWZagXxCz4s=
Subject key identifier: 2E:8B:F5:5C:07:CE:0D:99:53:AB:19:CB:75:52:50:7F:36:84:CC:49
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 019A24791FB4A1F14C89507FCC2BA82CEA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number: 0DD9
Signing time: Mon 27 Oct 2025 07:01:48 +0000
Manifest this update: Mon 27 Oct 2025 07:01:48 +0000
Manifest next update: Tue 28 Oct 2025 07:01:48 +0000
Files and hashes: 1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: NkhYhBhnDYrznV0jqeFXT6pubpTJp/iInsowpeB8bvQ=)
3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:1f:b4:a1:f1:4c:89:50:7f:cc:2b:a8:2c:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Oct 27 07:01:48 2025 GMT
Not After : Oct 28 07:01:48 2025 GMT
Subject: CN=2e8bf55c07ce0d9953ab19cb7552507f3684cc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:d4:b8:12:90:ad:3a:85:03:ea:fd:45:f0:
4c:2b:a6:00:c9:d2:a3:52:bc:1d:80:95:ce:0a:d4:
52:bd:c8:4c:51:b0:66:63:68:7d:e3:f9:06:30:d8:
30:67:28:70:e9:4b:47:7a:38:65:3c:9b:41:94:6c:
cf:26:4e:e2:c8:32:a7:34:0c:fe:46:80:6b:6e:13:
48:07:2f:a1:8b:80:98:9f:91:03:c4:38:5d:26:b3:
4d:82:3c:01:05:4a:16:90:41:23:ee:c4:34:51:b6:
9a:96:9a:e3:2f:b3:c1:23:e4:52:d7:71:a5:87:bc:
87:c3:e0:8e:19:74:f3:89:6e:c6:e6:8f:64:5a:ad:
76:96:bd:a7:29:ae:78:fe:10:05:8b:73:fc:19:c0:
9f:fa:ef:6c:d6:90:fa:b3:ec:2f:ec:5b:52:f3:85:
ab:75:bf:0e:0a:a0:5b:a0:62:44:bf:0d:9c:a1:67:
66:8d:05:d3:7a:ef:2c:ad:10:46:a9:81:dc:e5:44:
f5:90:c7:68:3a:d6:7c:c9:0e:7e:41:d4:6c:89:3b:
8e:3c:09:9d:fb:22:0f:4d:14:e9:20:d2:65:2d:b6:
39:b3:84:a0:e6:6e:87:b5:27:77:4c:12:b0:90:32:
a3:f3:47:9a:79:fb:e1:eb:26:4f:ec:00:f7:39:96:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:F5:5C:07:CE:0D:99:53:AB:19:CB:75:52:50:7F:36:84:CC:49
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:6f:f7:38:01:f5:f9:e4:cc:61:c9:a9:5d:4b:14:7d:85:
86:46:ae:a8:53:bc:51:90:c9:26:05:de:10:3c:0c:79:73:47:
f9:35:cc:38:73:89:77:14:b9:ff:49:7e:4c:21:c0:69:fe:2e:
5e:39:22:24:09:a7:03:6b:9e:c2:d7:71:8b:83:16:cc:ea:c4:
15:74:b9:ef:d9:72:33:ad:ca:c9:38:4c:2e:84:b5:2e:d6:09:
e6:85:79:77:6b:14:bc:78:06:8e:70:e9:52:57:fd:8e:64:9b:
d6:d7:12:3e:80:cb:7e:97:23:4e:36:56:24:64:27:25:af:a8:
2d:7c:52:cf:36:92:d1:dc:69:f4:a6:7a:da:68:34:65:24:20:
b4:4a:32:6f:bb:d2:7f:f0:98:b5:df:55:33:65:2f:37:db:0a:
17:04:04:ee:58:91:dd:1b:ea:70:12:e6:5b:ee:cf:8c:c7:f8:
2d:66:d0:e9:ed:db:e6:9f:d2:25:6c:80:ee:fc:64:9a:80:0f:
1a:02:28:ee:58:a6:f6:04:a6:90:50:bd:7a:08:0a:4c:f2:f6:
ab:34:5c:f0:32:e1:44:2c:cd:f0:22:88:1a:ff:97:e2:da:83:
9b:9b:c4:07:1e:3c:b2:1d:75:b4:c4:9a:b2:34:44:77:36:c2:
db:8c:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:25 2025 by rpki-client