Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: 0ETna61iPg87qISQ7eAqNeuUAusZ8Pi9Z59N3lbHgWg=
Subject key identifier: 38:8E:AC:E6:6E:F4:BD:16:87:E6:DA:DB:7D:B1:0A:CF:5D:06:C8:F7
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 0198D54E2C9F93412535959C92AC439C8E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 10AB
Signing time: Sat 23 Aug 2025 05:02:06 +0000
Manifest this update: Sat 23 Aug 2025 05:02:06 +0000
Manifest next update: Sun 24 Aug 2025 05:02:06 +0000
Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 44UgWXB+SyZvch9xEN8IiHlQYXUlD9eitQn7kyD8Vho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2c:9f:93:41:25:35:95:9c:92:ac:43:9c:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Aug 23 05:02:06 2025 GMT
Not After : Aug 24 05:02:06 2025 GMT
Subject: CN=388eace66ef4bd1687e6dadb7db10acf5d06c8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:43:9b:50:c0:c2:c1:d1:2a:c9:c4:5f:0b:
f9:ac:80:d0:4a:08:9b:39:e7:5e:f2:ce:eb:41:6c:
f3:6e:24:dd:b8:66:62:bc:73:46:25:ae:d1:ea:a3:
17:9a:77:22:f2:41:04:cd:66:29:76:b4:d6:5c:ad:
d5:95:b1:39:1d:e8:bf:82:7a:f0:30:8f:2f:bb:d7:
ea:7e:ab:93:68:ec:30:42:0f:b2:ee:28:f1:cd:2d:
b7:ad:ce:33:d3:80:96:3d:d6:40:f0:39:76:c1:5f:
91:2d:46:26:d3:f3:0e:d2:5c:9e:9e:c6:25:04:ff:
17:4b:eb:1d:10:33:6e:f4:75:2f:1c:9d:c1:8b:10:
64:3a:21:34:6d:a4:a7:73:f3:e0:27:63:6d:db:bf:
2f:10:6f:1c:4d:bc:c1:da:56:39:78:59:80:1c:0b:
ff:89:b5:2c:78:c8:5d:fd:f2:dc:b5:2f:61:45:69:
5e:8b:ea:bc:34:f9:73:11:e1:f5:b1:fd:ff:8e:ab:
bf:ff:78:7e:49:c8:bd:eb:5d:54:4a:96:3f:42:22:
ce:96:1f:d2:8f:13:06:34:91:37:a1:73:bc:ca:04:
ec:3a:32:2d:a5:33:37:a9:46:33:eb:9b:43:2b:7f:
c1:af:51:f2:79:c5:4c:47:07:e0:32:e1:2b:cc:71:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:AC:E6:6E:F4:BD:16:87:E6:DA:DB:7D:B1:0A:CF:5D:06:C8:F7
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:5f:fc:0f:42:a2:ed:31:fa:9c:56:9c:2f:0d:64:c3:c8:
5e:ee:62:01:49:de:3e:29:88:f2:e5:71:82:07:8e:3f:c7:b2:
6d:cc:1b:a9:45:49:44:7c:a6:a6:8d:da:b5:18:77:e0:2d:cd:
be:2c:84:dd:1a:cd:fb:da:c9:68:19:69:e1:cd:9c:54:dd:b3:
a0:a8:72:b8:a4:02:bd:f5:81:f1:40:07:28:03:ed:86:88:52:
16:2a:d3:1b:84:80:cc:d5:22:89:53:e2:20:66:25:a4:63:69:
fb:3c:83:b6:e0:9b:1c:63:4c:71:79:d3:0c:56:42:9d:34:38:
34:4c:2a:86:1b:2d:ba:f5:80:2f:73:0d:75:21:3c:5e:81:c5:
93:b3:d7:0c:a2:58:64:fd:47:f6:9c:0d:80:1c:b2:96:60:5b:
00:dd:cd:c6:1b:1a:ce:4f:7d:13:a4:74:0e:46:1a:05:5f:31:
41:52:f1:da:e5:58:57:0c:11:ef:0e:0f:5d:58:90:44:7c:04:
da:3d:50:a4:37:26:65:27:f6:e1:a4:05:f9:ce:c5:06:23:08:
51:b1:95:69:46:4e:0d:ff:fd:c6:5d:f2:b7:0a:01:53:6c:65:
a7:a0:14:4b:54:b6:0e:ca:26:8f:6e:76:19:94:67:84:eb:c7:
bf:eb:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:54 2025 by rpki-client