Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: 1yCwO/hJn3JriNhfYAEFLClIH228Huo1RR8UElyptsk=
Subject key identifier: 30:50:26:BF:E7:F5:CB:02:B0:85:62:88:65:8B:AD:57:C3:C3:C8:4F
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0197B77C5DD75A4BDC0B90D738EC9CB37ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0C0D
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: qbyfFZ38nXAd+5gchUSz1IAtTP4/7UDSVwMkubCMjeo=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5d:d7:5a:4b:dc:0b:90:d7:38:ec:9c:b3:7a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=305026bfe7f5cb02b0856288658bad57c3c3c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:d4:44:02:01:3c:c2:22:d0:28:61:ef:68:
ab:4e:30:a3:cd:67:a0:63:06:3c:4f:0c:3e:11:20:
49:34:4a:73:5b:f4:41:13:77:9d:cc:d7:3a:67:b1:
25:a6:55:b5:7a:a2:65:f8:83:c2:1d:89:32:34:77:
78:95:c6:9f:df:70:d7:2f:63:25:49:47:61:97:a6:
3d:7b:85:7a:5b:3f:68:e4:2f:89:b5:89:f2:93:8e:
26:f4:b3:46:c5:a7:55:73:c9:1f:b3:cc:51:2e:6e:
72:3f:8c:eb:c3:8f:25:05:e6:05:94:79:86:04:5f:
87:ae:6d:8a:4a:28:7a:29:c2:95:6b:d4:1f:58:7c:
e8:b9:7f:88:dd:c0:85:2e:08:b4:21:fa:be:48:5c:
fe:38:16:35:77:a5:e5:88:17:d8:da:eb:f6:0c:73:
c8:85:3f:98:94:3f:9f:55:5a:f3:f7:24:d4:46:1d:
0b:8f:ee:fe:9c:fa:45:3b:34:bf:ec:bf:24:d2:56:
38:25:48:8c:eb:41:0f:36:69:39:42:00:67:52:5e:
1e:4a:0d:3d:f7:d6:0d:5d:25:b5:c2:3b:d3:b2:9e:
26:d2:f3:35:a7:d7:5f:57:27:9a:46:ae:c6:7b:61:
c2:8f:67:08:a8:ae:c9:45:39:9b:f7:40:47:23:03:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:26:BF:E7:F5:CB:02:B0:85:62:88:65:8B:AD:57:C3:C3:C8:4F
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0c:df:0a:95:87:85:8a:70:7e:80:f4:0d:ea:61:a4:2d:ff:
aa:2d:ee:b2:84:06:81:e7:2e:19:79:e1:5a:c9:2d:77:2d:14:
13:52:47:46:4f:43:96:f2:64:24:ba:94:b3:9d:28:19:81:77:
01:76:1d:7c:a6:2f:fc:f0:6b:29:fd:6e:07:3b:b0:92:2e:74:
b4:bb:db:c0:45:7c:b3:95:5e:a2:80:8f:b4:03:41:b9:a9:9d:
a7:d3:ee:a6:5b:db:cd:85:42:6a:09:46:4e:72:39:4a:c0:dd:
fd:86:47:17:61:e6:62:7f:c1:5e:23:cd:85:f9:50:00:85:26:
ca:a3:b5:b5:00:8e:04:22:40:76:7d:e7:96:d1:87:93:bf:13:
ae:b1:a5:30:fc:b6:97:d9:51:27:e4:e6:04:78:ee:ce:49:60:
41:55:dd:6b:df:26:a2:87:62:cf:5b:51:27:96:8d:f8:77:8d:
17:86:aa:a7:76:48:bd:27:18:4e:22:e5:bd:e4:f9:00:fa:4f:
7c:ba:b6:ab:7d:0c:6f:d2:33:0e:5d:95:1b:bf:4f:af:33:21:
b7:b6:95:1a:05:b2:e6:84:50:9d:dd:97:5b:0a:69:ca:77:ae:
b9:f4:f0:b1:b2:d6:5e:80:06:3a:c4:0c:55:ab:2d:03:d5:8c:
be:49:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:42 2025 by rpki-client