Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: 274xsS9i/nzwGN5qfMetZUCXRMxZDGVQhg64NM5s3O8=
Subject key identifier: A9:23:D3:65:7C:E7:B1:89:E2:B3:53:95:4B:AC:1F:7B:7B:D1:D4:DA
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 0198D4E0E8588CB1D8D3A4793C7A48FEF154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0332
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: X4vHPaWTdr2Ls8EzovE4IEVMpfxkVJ3HTohYkMV9j0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e8:58:8c:b1:d8:d3:a4:79:3c:7a:48:fe:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=a923d3657ce7b189e2b353954bac1f7b7bd1d4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:ec:15:ab:b9:e3:40:51:bd:0f:57:d6:bf:
75:31:c7:97:40:34:51:34:26:92:45:85:cc:8d:4a:
b2:75:ef:a0:54:d8:3d:67:d3:91:a6:5f:c1:ec:a6:
e7:a6:57:a1:fe:63:10:ad:87:1e:5f:6f:49:54:c6:
c7:1a:84:d9:b7:7c:8d:3b:34:e4:d4:dc:1e:3f:69:
aa:e4:d8:bc:da:f0:9f:10:25:cd:f3:f5:9f:e0:0c:
db:17:a5:e3:a1:07:85:0f:15:d8:57:f8:17:1d:37:
98:ff:5f:fe:1f:23:1a:eb:dd:70:c9:9c:0b:3f:71:
1d:ae:a6:99:39:b4:26:e8:60:68:54:fe:92:89:cf:
e0:68:e6:65:55:6f:7f:25:ff:4b:ab:81:14:bd:94:
53:ab:57:e5:00:dc:62:5f:47:c6:84:00:01:57:b2:
ad:89:ed:bd:2d:a2:ef:52:07:f6:13:04:23:57:e3:
16:be:ab:c7:46:54:7d:33:27:5e:fc:8a:89:77:e5:
f9:89:3e:45:bc:59:94:b6:2b:85:f6:aa:a8:83:ba:
ff:ec:13:f0:17:4a:aa:1d:6e:89:46:32:78:4d:b3:
44:c3:ca:53:b5:2b:c9:ac:dc:24:96:44:cc:21:b3:
5d:c0:3e:5c:67:20:34:d2:ee:8d:3f:fd:de:de:fe:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:23:D3:65:7C:E7:B1:89:E2:B3:53:95:4B:AC:1F:7B:7B:D1:D4:DA
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c8:0d:09:4c:08:fa:73:73:b4:09:9b:4d:c9:fd:78:fd:11:
f1:33:8c:24:a3:2c:e2:4a:6b:65:cc:1e:e6:b2:a6:24:51:24:
c4:bb:07:4a:0c:42:5a:43:5f:fe:62:8f:2a:38:37:16:aa:8c:
d7:70:23:84:03:bc:ba:22:a3:72:44:0b:5a:b7:b5:12:36:d4:
ce:f3:f6:ef:2a:02:57:9e:57:83:11:2b:8b:19:30:cc:fc:7c:
24:c1:ba:1f:0d:9c:29:89:4e:3b:43:4b:07:24:a0:ba:07:66:
16:4e:27:98:52:ac:21:be:5e:a0:b9:75:6b:af:85:ca:3c:d5:
77:c1:34:8d:1b:79:3b:1f:28:cf:18:41:27:54:89:6e:02:b7:
72:1e:5d:a0:c2:b6:ea:8e:64:b4:83:07:ed:0f:77:44:1d:de:
89:37:14:44:b3:ac:cd:50:9e:8d:05:49:bc:7a:67:21:ea:83:
18:f6:10:b4:0b:11:89:f6:3b:55:89:25:d9:ae:3e:6c:b2:67:
f9:7a:d9:5a:c3:f8:22:3d:b5:53:57:c1:d9:94:11:3d:2f:84:
b2:cb:52:17:b0:11:f7:84:ff:37:99:8c:a5:0c:c9:18:08:8c:
2c:1a:ca:bd:2f:c3:c2:3d:bf:8b:bd:00:7f:26:d6:8f:19:11:
18:c0:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:33 2025 by rpki-client