
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: isJhG2vQqvesE9HGb15UGEbkTcuvZJu5AtzFaVcq5z0=
Subject key identifier: 51:E1:BD:A9:62:DE:80:9B:74:7A:30:F6:12:D3:AC:5C:6A:CE:2A:81
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 0197B5C502C3388334D113B3C06C6635A853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 0F13
Signing time: Sat 28 Jun 2025 09:01:16 +0000
Manifest this update: Sat 28 Jun 2025 09:01:16 +0000
Manifest next update: Sun 29 Jun 2025 09:01:16 +0000
Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=)
2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=)
3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: LFBCVkBKbVfpIN/7ecdVmjaMk9b0s0GF4zvNOEGQ/oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:02:c3:38:83:34:d1:13:b3:c0:6c:66:35:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Jun 28 09:01:16 2025 GMT
Not After : Jun 29 09:01:16 2025 GMT
Subject: CN=51e1bda962de809b747a30f612d3ac5c6ace2a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:db:92:66:c8:a3:34:f5:58:7b:f6:fd:86:
2d:b4:a8:19:ab:88:3b:d9:c7:ba:31:31:80:94:42:
4b:1d:62:f7:39:cf:8e:20:75:c5:a0:81:13:b0:af:
7e:bc:6f:c4:d7:60:33:46:89:95:a8:69:9f:f0:fc:
7f:99:87:53:64:b5:94:1c:ae:18:0c:07:e4:e8:08:
75:00:ad:31:a0:5e:59:c3:39:9e:b9:cd:1a:23:8b:
51:90:90:eb:98:6a:ee:94:b5:70:4f:c2:4e:6a:bb:
68:17:8d:48:48:da:25:7c:3c:e5:d3:97:29:37:68:
26:4c:99:4e:cc:05:f9:d9:40:63:d3:f7:cb:c6:76:
7f:fd:87:2b:5e:b6:bf:21:55:ae:a5:c3:ff:29:72:
cf:52:44:bb:e6:bc:34:33:a7:98:08:60:3d:96:22:
6a:d7:d1:37:3c:6d:7e:a3:a8:5b:71:f7:0d:d1:56:
09:5d:30:06:2e:5c:4f:58:7c:a8:c7:1e:5d:69:2e:
25:4f:04:9c:5c:fd:35:b2:c4:85:b6:e6:e9:f0:a6:
1d:d8:4b:35:c8:00:54:44:9d:3c:5a:97:33:70:bf:
3e:8f:1c:53:1d:d1:b6:45:25:d1:63:fa:0a:13:b8:
3a:73:d1:ab:df:ae:93:e9:0c:be:22:5f:82:77:61:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:BD:A9:62:DE:80:9B:74:7A:30:F6:12:D3:AC:5C:6A:CE:2A:81
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e9:68:68:94:0e:97:c5:48:6f:b7:91:21:49:c7:b3:c3:be:
83:08:4d:03:ed:e2:0e:d5:be:55:87:a5:7b:6b:d0:de:a6:3b:
21:4a:13:a3:9a:71:df:31:08:cc:76:35:59:83:8d:2a:40:24:
0f:0b:39:cf:76:3b:61:e8:8c:17:d9:e6:bb:11:27:04:33:c6:
de:db:27:38:04:af:dc:e0:38:1e:9c:4a:be:69:66:af:ef:57:
ee:da:60:33:f5:7f:2c:32:f8:fc:73:7e:c8:79:cb:3f:08:ea:
90:a9:7e:cb:bd:86:da:dc:cc:99:be:80:6a:22:77:12:89:5a:
69:70:2e:79:19:b9:7d:de:eb:f0:96:31:bd:6a:74:8a:20:bf:
8d:b7:27:5e:1e:2d:6f:2f:82:93:63:2d:f0:88:4c:6f:0e:51:
f1:23:06:06:a4:ed:c8:f7:4e:3a:69:be:ac:44:35:65:7e:ee:
2b:96:dc:13:bc:58:ed:61:5c:14:93:75:98:9b:a2:8b:b7:97:
62:82:ea:cf:22:be:9b:39:85:8b:b9:da:71:81:28:90:a0:f9:
43:94:f8:d4:a0:75:50:7f:ab:37:02:12:0a:e2:d6:ba:56:f4:
29:fc:d8:fb:c9:97:32:59:4c:90:55:dc:c6:45:4b:28:0e:c2:
84:62:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:49 2025 by rpki-client