Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier: aipCtZJP0OLMwuq5aSciWMABoFqBsMzq80Eg6NEfuLM=
Subject key identifier: F9:A3:CE:36:62:32:F9:BC:30:E1:5F:32:26:98:0B:45:1C:BE:7C:F0
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial: 0198D472D6102DD2FE057F5F37E935BFBB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number: 1032
Signing time: Sat 23 Aug 2025 01:02:32 +0000
Manifest this update: Sat 23 Aug 2025 01:02:32 +0000
Manifest next update: Sun 24 Aug 2025 01:02:32 +0000
Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: +EEuvtHEfrdWDM4hNW5DNBy2P2Z/Vh9lpRg3COQYJ5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d6:10:2d:d2:fe:05:7f:5f:37:e9:35:bf:bb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
Validity
Not Before: Aug 23 01:02:32 2025 GMT
Not After : Aug 24 01:02:32 2025 GMT
Subject: CN=f9a3ce366232f9bc30e15f3226980b451cbe7cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:1b:f3:09:d3:f8:c8:64:db:d7:b2:c2:8e:
cd:b1:fc:41:9f:3d:00:c2:8d:cc:37:49:56:6b:e9:
82:4d:da:f0:f7:57:41:5e:d2:06:10:5e:38:0a:05:
28:e7:f5:58:48:69:62:07:75:1c:52:58:7d:5e:5a:
97:2f:70:0a:0e:8d:e6:93:38:25:fa:e4:2e:33:2f:
55:88:ec:f5:86:ec:6c:4a:fe:f5:f7:2c:18:c7:04:
b2:6a:eb:c1:37:bd:6c:af:09:9c:0d:b7:9f:c4:f4:
99:de:c5:48:68:fa:f2:d2:e6:87:54:84:0a:27:96:
2f:27:5d:45:7a:f8:5e:a6:34:fd:d6:cf:91:16:68:
ad:fe:72:2c:ae:f8:24:24:65:5d:cd:4b:30:e8:9e:
47:55:2a:52:4d:30:5b:de:e4:09:82:54:bb:ad:4e:
82:14:bd:2b:b0:8d:a6:19:fb:fb:d3:f2:e7:31:e1:
ce:27:b3:e4:83:51:75:09:eb:d3:d5:6e:c3:26:4a:
d7:91:9a:30:b4:76:92:dc:3e:fb:5c:59:5f:42:44:
f6:31:af:97:81:38:29:d0:60:e2:42:1c:34:07:ab:
ae:3c:50:19:39:b6:a6:15:cb:57:b4:8f:85:3b:29:
88:99:88:3b:86:d8:5d:87:a7:e2:83:d3:0c:d7:be:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:CE:36:62:32:F9:BC:30:E1:5F:32:26:98:0B:45:1C:BE:7C:F0
X509v3 Authority Key Identifier:
keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:33:8a:3a:7c:98:c9:5e:2c:01:69:5a:d3:d6:5d:55:47:78:
21:8f:40:83:01:1d:98:42:cd:38:c2:bd:76:3c:9d:52:19:c7:
c2:0e:88:0b:5e:16:6c:3c:e2:b6:c9:c8:9a:4d:ec:da:e5:93:
79:3d:85:52:0f:7c:ac:00:7e:7f:54:9a:9c:b9:73:b3:7c:f6:
d5:0f:b5:ca:a1:8f:e8:ba:ef:11:ac:ff:d5:bf:00:7f:7a:c5:
ea:0a:63:fd:a1:49:9d:8a:09:b6:7b:78:13:59:81:73:f1:4f:
1b:ff:4a:32:3c:56:b5:48:dd:17:c1:6d:00:62:f9:f6:91:a6:
4c:b6:27:6a:eb:03:ff:0d:1b:58:c7:b6:16:11:84:cd:0e:56:
1b:cf:79:74:7b:ff:55:50:e9:e6:03:70:4c:6a:4a:47:c3:36:
0d:af:a4:1d:07:08:02:4e:4f:a1:aa:ae:59:ec:71:9c:5c:0f:
0b:eb:61:c9:7c:95:31:3c:77:82:c4:e0:c4:db:45:64:62:d4:
42:f9:2a:08:d6:91:55:5e:a9:45:35:bf:06:5b:a7:72:eb:dc:
25:df:36:f4:5b:d3:64:4e:83:37:47:57:23:0a:71:2e:f6:08:
c1:2e:8f:ab:09:ab:0f:b6:90:ae:34:e3:9b:d2:70:1e:46:5c:
8c:b3:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:23 2025 by rpki-client