Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier: hPPbW0QmVLKYPit2IK8UuzBoQMY1O3mwvtxaG/23LPM=
Subject key identifier: 35:84:5D:62:74:C0:33:C3:3D:84:BA:FD:C8:6A:11:B3:D8:1A:54:9B
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial: 0197B77CB5FE392216FB46EC2B468A9EBB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: j2ZwqWvrg9xEs4sbqdUfp7BZf2jAj7zq6gA0iVH+NAk=)
2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b5:fe:39:22:16:fb:46:ec:2b:46:8a:9e:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=35845d6274c033c33d84bafdc86a11b3d81a549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:36:ee:eb:86:93:72:b9:73:e1:19:9d:b0:
63:03:c0:19:db:9d:da:f9:97:fc:57:d6:ef:98:fb:
f6:92:b7:67:73:71:a1:c3:41:b8:42:be:a1:54:95:
f0:73:72:0b:cc:69:d0:32:43:76:fb:00:71:f8:c9:
3e:e8:f6:b5:2f:35:b4:6e:4f:20:6a:c8:47:23:20:
bd:a0:5b:3d:4c:a2:f2:22:4b:05:e6:26:17:ed:86:
29:10:12:8b:bb:8f:7d:94:26:cf:c6:2a:3b:3d:44:
f0:fa:7d:71:9c:1f:52:9f:7f:d2:04:e6:58:82:25:
99:5a:10:90:d8:ef:f3:8d:f2:15:53:79:e2:b9:3d:
79:d9:56:1f:fd:0f:d7:30:ec:04:20:e8:4a:34:6f:
1b:31:10:e1:d1:d3:41:a0:6d:33:9d:0e:c1:d0:5e:
ca:ff:24:9d:75:bf:98:4c:69:8b:38:4f:4d:2f:15:
81:ad:b3:74:74:0d:34:ef:87:6e:0a:84:31:15:ef:
33:36:f7:dd:fb:dc:1b:e7:93:15:76:88:bf:03:c7:
e2:15:c8:5b:c0:43:6d:d7:88:b2:50:4f:6b:f2:ff:
c1:09:6f:72:8b:e7:4b:5c:48:4a:ea:36:30:d2:eb:
ae:4a:af:25:5f:05:4f:bc:34:d1:7e:e6:f9:d7:c8:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:5D:62:74:C0:33:C3:3D:84:BA:FD:C8:6A:11:B3:D8:1A:54:9B
X509v3 Authority Key Identifier:
keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:1a:6a:9a:55:aa:6c:5a:38:0c:78:80:50:c0:3a:f1:48:
df:09:05:63:bc:a2:c0:52:68:65:cf:fd:3d:57:7c:5d:83:d4:
b5:25:06:40:92:a9:71:af:1f:67:2a:92:eb:fb:0c:c3:c5:76:
a8:d3:bc:a1:c7:4e:6d:6e:0e:35:cc:00:c9:fb:c2:1a:85:6d:
41:72:3a:34:2d:2a:63:7f:f0:2e:79:8d:55:f0:98:dd:11:9f:
27:b2:15:51:78:5a:45:91:cc:0a:2c:7e:55:fd:96:de:20:9d:
e2:69:3a:29:47:9e:e9:52:7f:3d:57:ff:82:c5:37:ab:03:65:
32:68:a5:63:d8:a0:92:57:3c:9a:dd:93:3f:14:90:b8:65:25:
4e:ef:cb:5d:b5:b4:b6:21:bd:03:7e:eb:0f:cc:57:bd:14:04:
8a:c9:43:77:bf:eb:04:c0:0b:cc:96:19:52:2c:68:80:a1:7b:
bc:3e:35:97:db:4b:e0:22:6d:b7:16:4a:1e:bd:5d:49:91:7e:
ff:17:06:5d:56:56:3a:e3:e4:5e:67:63:9c:dc:2e:04:6f:2c:
e4:a8:02:e1:b0:9f:f9:f9:a3:7b:e4:0e:a0:44:bf:63:ca:b7:
af:5d:38:18:9a:d0:bb:93:58:01:f9:59:ec:1c:85:78:ba:ba:
d5:8f:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:53 2025 by rpki-client