Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: dMoUE5xA+SpGBR78gI/bYGaNcIHrsJXd0cw5ZDGOXZo=
Subject key identifier: 0B:19:F9:09:D5:72:A2:73:56:67:D8:AB:31:35:36:80:6F:8E:02:BD
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 0197C0B6481371263CD259BED535761FD332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 03AF
Signing time: Mon 30 Jun 2025 12:01:00 +0000
Manifest this update: Mon 30 Jun 2025 12:01:00 +0000
Manifest next update: Tue 01 Jul 2025 12:01:00 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: xpv9nL555V0xiJOhCDLX2YAijmpJ1N3MQiKrveZ5HQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:48:13:71:26:3c:d2:59:be:d5:35:76:1f:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Jun 30 12:01:00 2025 GMT
Not After : Jul 1 12:01:00 2025 GMT
Subject: CN=0b19f909d572a2735667d8ab313536806f8e02bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:d6:f9:05:55:d0:d4:5c:f5:1a:5b:87:d0:
b6:71:49:0e:2d:98:7d:19:f7:34:af:e8:87:3a:70:
94:05:1c:f8:3a:52:4e:74:cf:49:f6:4d:48:07:00:
05:b0:0c:c5:5a:d1:a1:03:77:d0:30:43:06:de:24:
e7:7f:d9:97:6e:ee:fc:c7:d2:af:9a:92:d2:3c:69:
1c:ec:f8:87:df:ce:0c:00:a2:88:70:c6:17:6f:a8:
f5:34:4b:c8:67:8d:4a:b5:bd:a2:00:78:7e:e2:14:
9c:61:fb:a8:dc:e1:ea:b5:d9:8e:37:e2:83:3e:4b:
eb:c2:99:64:8e:8b:79:95:aa:80:83:32:f5:3c:7c:
39:08:42:ad:72:df:2d:01:67:9c:92:b6:17:20:d4:
0a:27:2c:3b:47:2f:83:f0:7e:36:7d:aa:eb:74:c6:
a6:53:7c:8d:60:eb:5b:4d:1f:2d:b2:41:08:1b:67:
46:e7:85:e7:e6:ee:f6:24:6b:55:6c:65:11:c8:cf:
cb:53:25:66:2c:aa:cd:53:af:fa:c4:d1:c7:9e:f9:
ac:30:33:77:95:8b:f4:f5:03:0c:29:bb:49:dd:f7:
0c:4d:e5:60:2b:d8:c3:21:e0:24:a0:d9:70:cc:be:
ab:36:74:be:4f:1b:42:52:b2:d2:45:b9:b0:9d:1f:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:F9:09:D5:72:A2:73:56:67:D8:AB:31:35:36:80:6F:8E:02:BD
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d4:4a:57:e9:8a:bd:be:f2:bc:6b:23:9a:77:65:16:fb:e2:
15:28:08:5b:b4:c7:a0:d0:9b:12:c1:ee:6d:68:bb:ad:71:cb:
18:93:b8:83:02:1e:4a:5f:17:3f:c4:9a:20:26:3e:1d:a7:cf:
3a:83:2a:86:83:b5:91:22:cd:e6:23:6a:9e:63:cf:99:ca:d2:
83:3f:17:35:43:6f:fc:52:0c:21:19:61:00:37:13:81:1e:71:
1c:98:60:f3:f4:dd:01:36:b7:0c:32:f8:7f:24:8a:e9:d7:4a:
98:9a:21:14:7d:ec:94:d3:6c:57:d7:b0:08:fc:ff:95:2b:ea:
80:fb:8a:9d:48:72:36:e3:49:63:93:ff:db:cc:eb:9a:d7:a5:
1b:78:8d:ad:27:ff:5b:c7:78:b8:74:d2:e2:73:62:69:3d:46:
5c:69:c9:26:c6:50:e4:f6:bf:9b:b1:65:7a:c6:c7:86:bc:91:
1d:26:3a:83:8f:fd:43:7e:77:35:9c:cc:16:c3:1e:cd:ce:87:
27:f4:6d:35:1a:b0:03:ce:ec:e7:da:a6:78:db:8a:0a:3f:79:
aa:1f:1c:08:00:cb:59:a0:d4:47:38:f8:7d:92:90:da:05:4f:
cc:04:3b:67:fb:99:8d:93:d7:df:0c:1a:c0:19:8e:e5:51:7b:
35:80:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:56 2025 by rpki-client