Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: xl7fc1roslM7frNLDw3Ht+pQupL/F2Pmo1a1ezuNMq4=
Subject key identifier: 3A:69:B8:A2:C9:C2:EB:0B:B8:1F:98:2F:D0:19:6A:49:70:12:A6:0A
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0197B7B31FA7778FC00C9502D8E756FDF555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: mcDfx79c8Z/mavL8Hyl47QFwtFH50E0kplFWgWE89nA=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1f:a7:77:8f:c0:0c:95:02:d8:e7:56:fd:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=3a69b8a2c9c2eb0bb81f982fd0196a497012a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:0b:74:da:fa:ba:6f:01:a9:5c:48:41:cf:
8a:14:fc:4a:53:5d:d1:2e:7b:4f:43:be:b5:fb:e9:
35:c2:4c:5c:90:0f:08:03:5d:fc:fb:68:e6:4c:4b:
d4:12:e4:c5:3f:81:10:91:c7:8d:24:6f:88:7c:33:
44:6d:ba:60:52:b6:cf:0a:5d:dd:80:c3:3d:f5:5c:
49:84:88:4f:ec:b7:84:72:ad:cb:d1:a0:d4:05:fc:
58:fe:42:39:95:e3:92:b5:75:b2:96:5d:1d:fa:f2:
0e:3a:ff:a4:0b:06:0b:a2:fe:c9:fa:47:34:2c:b4:
6f:15:72:28:d0:f6:68:51:70:93:01:e5:b1:db:19:
20:07:e9:de:e4:2b:6f:91:90:06:62:ce:33:ba:5a:
ef:5a:00:f7:53:b7:fa:00:d1:f6:37:9a:3f:ff:bc:
f4:88:31:c0:a3:34:34:60:fb:9e:88:b8:3c:c8:55:
27:b4:b3:6f:09:b6:bc:35:4a:62:ac:b3:8f:16:32:
04:f2:53:91:b9:f5:e7:36:ae:09:2c:b9:8d:cd:67:
f7:c1:83:c6:12:cc:2d:0d:9e:08:7e:7e:35:6a:7f:
69:76:03:cc:e4:44:e3:d9:88:31:42:d4:e9:1d:9d:
c5:2e:1e:58:ab:63:72:58:e2:85:e4:9e:17:51:a6:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:B8:A2:C9:C2:EB:0B:B8:1F:98:2F:D0:19:6A:49:70:12:A6:0A
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4d:69:88:88:87:67:23:29:8d:d1:67:8c:b2:ef:70:66:97:
fc:ce:84:94:eb:55:d0:b6:2b:cb:cb:33:3f:8a:f0:79:c0:4c:
6b:84:5b:15:42:51:a6:0d:23:b2:94:cb:54:ba:15:11:fc:05:
79:87:a3:d4:ac:bc:87:8d:11:6d:18:6f:7e:be:fd:5f:03:af:
d9:21:8f:f8:98:d2:f1:0c:ce:6a:7c:75:5e:32:97:ca:1b:cf:
b6:50:69:58:e7:aa:d4:a0:1b:4b:05:13:0f:1a:58:8a:c7:d1:
50:73:2b:ec:77:8b:20:55:9b:a2:f9:72:ca:f1:90:d3:dc:8e:
11:05:a6:29:3e:09:70:f5:c9:06:e5:b4:05:e4:ef:d3:ef:28:
38:18:6d:f1:d2:e1:9e:ef:3f:99:2d:26:3b:1a:c5:64:50:0e:
17:39:3c:21:6e:37:80:59:84:5e:f0:35:82:d3:56:a9:0b:5a:
6e:ba:c3:27:92:72:47:74:e2:ad:db:4a:64:5a:29:65:2c:21:
22:cc:ce:9a:a4:0d:88:c1:c6:54:95:7d:5c:ff:54:b8:ca:70:
dd:87:08:71:45:83:9f:ab:4c:a9:9f:97:b7:bb:ce:81:0e:15:
34:50:e3:87:26:f9:32:27:4b:57:a6:fb:18:b2:d7:d6:bf:dd:
b1:6b:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:28 2025 by rpki-client