Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: mBWwV65KVUYOidjjeITiV2+zbms8laHv9tx/9vDsdnc=
Subject key identifier: 6A:D1:0E:73:92:43:93:9E:D7:E6:CD:FF:89:3A:35:1F:D0:E8:F5:1C
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019A71B7B0A7C394083FFB8CE6BE55BDF3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: /lwHYKNR8zc+O6QOMsy7avJ8JEG2IPByJUy3irn4ByE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b0:a7:c3:94:08:3f:fb:8c:e6:be:55:bd:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=6ad10e739243939ed7e6cdff893a351fd0e8f51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:bb:19:f6:d1:1f:f5:a3:99:50:02:d0:e4:
b6:aa:c2:67:c7:e0:21:f8:7d:d9:a7:3d:63:fc:20:
02:60:1b:a7:f5:25:a3:f2:30:33:0a:da:85:0b:9e:
02:3a:ec:58:8b:65:9f:39:39:a9:c3:cb:87:c9:91:
5e:b2:b8:6f:dc:b3:69:4f:ff:22:6b:f8:3a:cd:c0:
ea:e6:f0:6c:5c:ab:6f:aa:71:de:9c:25:33:e4:f4:
4f:56:cc:28:be:d4:13:85:06:90:a4:20:28:d7:1c:
8b:19:f4:35:db:83:c3:45:f2:73:c9:8f:c5:dd:c9:
17:27:30:2f:1d:f5:d8:d5:bb:99:1f:02:0e:5c:fd:
e5:b2:24:68:e9:25:1b:c6:05:7d:73:9c:49:f9:b9:
45:1f:12:c7:64:88:e0:2f:74:a6:aa:fb:8b:86:ed:
63:b2:2f:bf:02:10:7b:b7:79:0a:d8:cf:a2:af:07:
14:a9:e7:bc:c2:11:f0:61:7f:49:04:9d:1f:27:d6:
ef:3f:b1:b0:b2:d5:62:fb:68:e3:bf:2c:cc:ae:df:
c2:43:54:5d:a1:18:28:ee:bd:00:ba:c6:0d:2d:1a:
3c:00:82:25:20:85:d8:c8:11:d2:3f:79:9d:99:33:
52:ab:4f:63:92:44:5a:83:b2:4e:d5:54:e5:8f:d8:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:0E:73:92:43:93:9E:D7:E6:CD:FF:89:3A:35:1F:D0:E8:F5:1C
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:85:4a:5d:00:2a:e9:07:e2:52:3f:6f:b6:c8:3d:5f:e8:
b2:ed:b7:fd:21:af:e9:a2:7b:81:84:7e:b2:f6:c1:8e:8a:5a:
aa:95:7b:f1:59:04:90:48:01:16:80:a4:29:a6:b3:3b:cf:de:
57:b0:8c:68:13:47:ef:7a:3b:45:c8:c1:80:8c:7a:db:04:9b:
08:0b:60:e9:fa:ba:83:29:95:52:f4:9d:be:d9:e2:a5:53:a9:
29:b9:39:66:4c:3a:97:34:95:e8:da:79:62:27:a0:2a:4f:3b:
10:e1:21:2b:ff:6c:ac:e3:ae:ea:e1:e2:8f:17:5a:fa:29:7e:
92:6d:d2:d6:67:16:af:42:c5:25:58:8e:f7:46:00:a6:5a:5d:
43:5e:ff:01:56:e9:28:5d:79:f4:26:92:43:bb:1e:84:34:d8:
20:46:1c:3c:f9:45:a2:e2:e3:66:72:1f:5e:9a:77:a3:4a:09:
7d:ea:00:bd:e8:f1:d4:c6:ff:d8:5a:70:51:ac:59:05:ef:42:
21:07:01:54:99:b3:04:86:f8:5b:60:3f:ee:2b:78:cc:a7:65:
f8:3f:96:6b:0a:8c:3a:93:6a:c0:4f:85:26:0b:81:14:fd:46:
42:d6:df:1b:60:0b:6e:be:f1:4e:cb:1a:b1:76:83:35:05:fe:
73:ad:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:56:07 2025 by rpki-client