Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: bwW0k0WY+c4hQnnJ5Qh4wQjnwD4JCnLYHf2pkPFOgsA=
Subject key identifier: 8B:CC:E9:00:DE:B3:C3:E8:69:B0:5D:07:7B:85:95:24:0B:39:91:04
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0198D73AE523F70C8FCEBB6B0D7D33FBD0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0CA2
Signing time: Sat 23 Aug 2025 14:00:17 +0000
Manifest this update: Sat 23 Aug 2025 14:00:17 +0000
Manifest next update: Sun 24 Aug 2025 14:00:17 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: AxiWUXx6LM7a9fpvfXP1GrP+DmnamdK6B9L/czl/ON4=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e5:23:f7:0c:8f:ce:bb:6b:0d:7d:33:fb:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Aug 23 14:00:17 2025 GMT
Not After : Aug 24 14:00:17 2025 GMT
Subject: CN=8bcce900deb3c3e869b05d077b8595240b399104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:65:e1:13:d9:58:c8:54:8f:d8:04:dc:ec:
bc:c3:a5:40:ec:b1:13:11:8f:af:16:e9:bf:b5:3f:
fc:2a:b2:4e:2e:66:82:58:ba:21:d7:0c:53:37:ee:
6a:2d:c6:15:1e:4c:08:02:1c:73:b5:c0:6b:13:e9:
30:2b:12:4a:fa:a8:c4:1d:25:50:8e:cf:cf:35:cf:
59:45:29:d2:01:49:41:18:e4:26:8b:11:ef:79:3b:
37:c5:9d:06:91:9b:53:c3:3d:41:6b:47:f4:b3:86:
c3:1c:5c:55:ee:14:8e:3d:9c:ca:88:5f:fb:36:9b:
38:4d:e8:46:e8:34:d3:aa:9b:7a:d9:e3:f3:1b:0b:
b8:e6:47:42:77:4e:3a:b0:b0:ea:e5:be:f4:5a:03:
38:2c:93:19:bf:8c:38:f5:5c:b2:b3:c4:b0:9d:19:
2d:3b:da:37:07:85:9a:82:3e:a5:7f:15:61:6a:86:
7b:a5:98:4d:95:80:4e:8f:c9:fc:b5:9d:fd:71:aa:
3e:39:8b:e2:e5:af:de:86:35:58:73:fa:c6:97:e5:
ed:8d:a4:08:ad:82:60:0e:c7:2a:84:89:85:cd:68:
27:f7:87:cb:92:06:8a:5b:10:b2:cb:d4:f8:42:58:
d7:ae:cf:6f:69:cc:3c:ce:17:2f:d0:2c:99:84:e7:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:E9:00:DE:B3:C3:E8:69:B0:5D:07:7B:85:95:24:0B:39:91:04
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:57:35:b5:f0:70:a6:d1:35:4e:da:b3:52:0c:77:df:a2:ae:
c0:ef:3f:da:fc:cd:c9:aa:a5:67:49:70:a2:03:ff:85:13:cb:
be:31:3c:5e:6c:57:26:e4:73:67:9a:47:9f:bb:ec:58:0f:fe:
22:8f:a9:f5:e0:bb:07:fe:6d:a3:62:eb:b1:05:de:3d:57:9a:
84:52:13:2d:a2:a7:60:fe:f8:f0:8d:0d:9a:c8:f7:07:99:1c:
af:48:99:04:48:44:68:85:05:b2:f7:79:7a:5c:a1:eb:4b:e5:
1d:76:f5:96:39:a9:c8:06:cc:ed:c6:9c:ff:c3:b3:19:af:e6:
5e:82:56:d8:44:46:71:d5:c6:f6:79:c2:4f:2e:07:4f:7f:fb:
dd:19:45:fd:a1:6d:94:2b:13:b4:d4:96:9c:9e:75:66:e6:b5:
59:f0:66:9e:1e:e4:e1:18:fd:c6:dc:a7:24:12:93:fb:94:74:
3d:b5:80:b8:31:db:28:7c:f8:31:07:7d:b8:22:b7:6d:ab:ec:
df:37:67:c5:ad:20:03:aa:2f:32:41:a6:74:de:f1:5f:c7:fa:
54:79:9c:aa:e8:f0:c2:7c:e5:61:59:33:d9:cb:7a:48:bd:4b:
1b:d7:5b:d2:62:cb:7c:12:f3:03:55:5c:59:79:f5:57:ec:b8:
98:ea:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:37 2025 by rpki-client