Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: jgmq2d/JSldaQ8nJbn80nDkbA9hbsCYtCViUQC3RI6U=
Subject key identifier: 42:25:04:F7:18:13:5F:0B:8D:6C:F5:14:50:46:46:9C:45:81:A0:A3
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 0197C87083D9B6F77504F03DAA735783A1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 02A7
Signing time: Wed 02 Jul 2025 00:01:46 +0000
Manifest this update: Wed 02 Jul 2025 00:01:46 +0000
Manifest next update: Thu 03 Jul 2025 00:01:46 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: 7NBiY28JijeqNH3Jr5zzIORQ1lIWirdW/muSnqt0y9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:83:d9:b6:f7:75:04:f0:3d:aa:73:57:83:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Jul 2 00:01:46 2025 GMT
Not After : Jul 3 00:01:46 2025 GMT
Subject: CN=422504f718135f0b8d6cf5145046469c4581a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:f9:2e:ea:50:99:73:72:b8:c8:a1:16:6a:
d7:f8:4c:35:af:f4:60:a0:ef:0a:f0:ec:dd:2f:75:
76:77:b7:b7:01:16:94:79:e9:42:d0:7b:8b:4c:e7:
ed:5b:94:8c:75:9e:9c:12:88:ef:b2:0e:31:7e:1b:
c5:cd:4b:5d:7c:d7:6c:21:ab:a1:bd:db:42:21:12:
95:17:b7:8b:2a:29:df:dc:ba:02:f4:f3:7d:8b:76:
b0:ab:32:0a:28:f5:c2:5b:63:49:29:37:41:1f:54:
14:80:79:db:ef:e3:9c:a8:fb:2c:39:b1:f4:c9:83:
6f:47:d5:60:c5:78:58:ec:a1:12:3a:e1:c5:de:00:
21:5f:b2:a5:22:07:0b:d2:13:e1:ff:85:ec:eb:e0:
21:77:6e:4a:29:5c:8e:8b:98:17:6e:60:28:0d:e8:
a5:c9:2c:a1:c8:b5:b9:63:b6:db:60:82:d0:1d:52:
2d:4f:69:97:b2:6f:56:a4:bb:00:aa:50:8e:f6:43:
d7:5c:68:60:d9:d9:e4:7b:f6:a1:45:87:b5:b6:31:
e2:0a:90:51:05:23:a5:b6:c3:55:6a:df:f3:09:54:
a8:84:a2:9b:36:0f:a4:51:6c:c7:8c:38:78:55:79:
b5:7e:d2:66:3a:28:60:17:fa:9a:ef:ff:7e:78:92:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:04:F7:18:13:5F:0B:8D:6C:F5:14:50:46:46:9C:45:81:A0:A3
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:9d:10:f0:24:46:3b:85:c0:d8:64:26:50:9c:8b:86:39:
88:1d:24:7d:b6:95:e2:f0:93:38:2e:28:a5:75:8e:fb:31:9c:
26:26:4d:99:f4:fc:ce:78:34:b1:13:f6:6f:97:b6:07:c7:83:
71:05:2f:56:cf:1f:3e:32:d3:03:be:78:73:38:84:8a:52:1c:
e3:9c:f9:c2:96:df:aa:fa:37:60:c7:6a:52:57:e2:26:e3:e1:
2c:7a:20:6a:49:9b:5a:89:c2:1b:18:d1:a8:ee:f4:c8:1d:0e:
d5:0c:cf:9e:a4:55:9f:ae:ea:c7:b0:b7:58:27:b0:dd:5b:ef:
ba:ea:e9:89:22:eb:c8:94:6b:a4:55:cf:9e:49:a3:9f:b0:39:
24:8a:9a:57:f1:71:23:bd:79:83:8f:e9:b2:0c:a0:bd:6b:17:
65:e9:17:5d:5d:fd:6b:8d:94:7a:0e:ee:e7:c7:23:a4:38:27:
5d:d5:07:51:66:a0:01:98:66:82:73:fc:8b:93:7d:ee:aa:f7:
7a:60:d4:16:c6:98:3f:d3:4e:25:18:ab:58:8a:40:95:78:e1:
28:19:69:3d:af:85:a5:94:e0:bc:ae:50:8a:1c:2a:11:a9:b7:
cf:31:d6:28:94:45:b3:a2:85:67:7b:b0:cc:3e:c8:11:80:e8:
1e:7f:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:18:18 2025 by rpki-client