Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: P/84vOYpdrFU7hW3+wm5E2+y8cVmU/r2jyIGko7+tA0=
Subject key identifier: 9D:85:BC:E1:A8:8A:2E:B4:0E:60:07:5F:65:20:A3:7A:F0:20:56:62
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 0198D40494B9E94C788E94305FACB1C63792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 033D
Signing time: Fri 22 Aug 2025 23:02:06 +0000
Manifest this update: Fri 22 Aug 2025 23:02:06 +0000
Manifest next update: Sat 23 Aug 2025 23:02:06 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: Z2Z8JR9zvxOXqt1yPIFUB13gjLZrp4JmtWleTC77qK0=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:94:b9:e9:4c:78:8e:94:30:5f:ac:b1:c6:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Aug 22 23:02:06 2025 GMT
Not After : Aug 23 23:02:06 2025 GMT
Subject: CN=9d85bce1a88a2eb40e60075f6520a37af0205662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:c2:e5:ac:9b:fb:55:13:67:4a:d1:f4:35:
40:5a:9f:6d:66:2f:b5:6d:e8:b8:4e:dc:7e:50:fa:
24:1c:e6:cf:96:39:ba:32:9d:e3:53:e9:17:d4:00:
42:02:10:34:3d:aa:47:e6:a3:03:7c:af:67:ac:05:
54:e2:65:6b:3e:d4:1f:34:b6:97:ec:29:ab:af:38:
57:80:45:eb:31:4f:9e:3d:a9:81:63:c4:84:91:ca:
dd:e3:64:b0:6e:0f:92:92:30:77:ab:e6:3c:a0:35:
43:b8:e7:6d:0c:01:87:93:36:00:e5:f8:d6:c6:fa:
4e:39:7d:2b:16:91:14:9a:36:e5:78:6a:9b:d4:30:
a4:29:88:87:e3:91:9e:12:94:cb:2a:34:cc:5b:b1:
b3:28:6e:08:db:27:27:8b:dc:d2:b8:67:60:99:12:
3a:db:89:6f:be:d5:33:73:4d:ef:32:00:88:d0:5b:
13:a9:ca:46:0a:18:47:c6:41:5b:26:00:3b:82:a6:
0e:5b:1e:a9:05:01:a9:90:12:90:3a:be:e8:bc:7b:
3f:30:9b:3f:55:7a:77:d8:50:c7:ac:88:46:8b:2a:
f7:bc:0a:40:5d:43:97:18:a0:c9:13:0d:fd:8e:48:
c0:f5:fa:12:0f:8d:f0:05:c6:59:4f:60:f3:ae:0c:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:BC:E1:A8:8A:2E:B4:0E:60:07:5F:65:20:A3:7A:F0:20:56:62
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:cc:b7:22:a8:2e:ef:96:96:74:4b:d5:25:c3:01:62:06:
1a:6c:a8:a2:a9:88:ae:80:90:f0:a3:0f:ab:82:5d:ea:32:dd:
2d:89:3a:82:22:4c:cc:49:29:d2:ac:bd:8f:ba:3f:3a:53:18:
8e:1e:61:50:34:5e:10:17:81:61:46:2f:38:5b:1c:d1:ba:0c:
51:eb:00:2d:31:4d:6e:ee:77:f8:19:87:f6:5e:e9:3b:98:db:
86:70:98:87:ee:85:35:08:d9:9b:68:a5:8d:6d:15:34:7c:44:
e7:c1:78:7b:64:b6:d0:f0:8c:a8:c6:80:69:d9:9d:3a:b0:fc:
41:60:c3:12:29:bb:9c:50:51:9d:05:db:55:19:0a:ab:a7:12:
d4:46:41:1f:cb:e4:ab:6e:43:7c:55:36:fe:a5:89:dd:dc:98:
26:4b:03:e9:7d:1a:a0:1b:fc:ea:5c:21:5d:01:b7:61:d1:94:
c5:af:de:1f:62:30:fc:d4:8b:4b:bc:08:98:1d:28:1e:5b:24:
2d:0b:a2:09:04:d5:65:30:ba:a2:01:55:9d:6c:83:dc:d3:2d:
51:f8:4a:d0:51:80:da:74:77:74:36:e3:73:80:f0:8e:5f:69:
13:9c:70:5e:45:33:1a:3e:d8:2a:2d:51:2b:84:bc:6d:27:34:
f8:a8:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:59 2025 by rpki-client