Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: z0uCr/Znm94IHncx3j3K95zgRF01yiHnJTyVOe2yth8=
Subject key identifier: 4C:6F:33:E6:0E:BF:04:9F:1D:3A:24:70:72:4C:8B:AF:E2:F3:67:83
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 0198D5BC185598E6981E35B73870C1F5C912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: u1WKmqxUj3WnFG6KEcIYtvbxgwGd4mOP1urQQluVBqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:18:55:98:e6:98:1e:35:b7:38:70:c1:f5:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=4c6f33e60ebf049f1d3a2470724c8bafe2f36783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:db:1f:26:a6:c5:36:8a:d6:6e:ab:50:6b:
64:f5:af:97:a3:ab:24:04:21:7a:00:f6:87:6d:7a:
3a:a3:7e:6d:01:56:07:54:6c:06:0e:c4:d3:94:84:
5c:e1:bc:5c:49:81:bb:f6:f4:3f:5e:ed:b1:09:31:
5d:6f:96:4b:34:7e:38:e5:15:d3:b7:26:e9:2f:3e:
ca:1a:22:39:bd:f0:cd:7b:1e:84:9b:d4:c9:4e:40:
72:a6:0f:ed:7b:9b:af:af:13:98:50:0a:f2:ec:72:
76:4f:96:38:0a:cf:dd:d4:2f:fe:ef:7b:89:a1:35:
a1:f4:24:45:e4:4a:59:63:c8:dc:57:63:f4:39:a5:
bd:23:1b:7a:80:30:1f:95:c1:62:1c:5e:43:99:e3:
3f:7e:d5:7d:b4:d9:36:f6:8f:f9:eb:43:5a:b1:59:
54:25:be:c8:c0:b7:7e:83:68:17:92:41:09:18:72:
7d:8b:72:18:d4:9d:10:96:ae:39:d3:e9:c2:d1:3a:
a2:94:25:cc:2a:6b:fa:a0:92:63:7a:e1:07:f8:54:
2c:d2:be:1b:55:8d:b5:11:cb:a4:5d:7f:0f:11:62:
4e:29:90:b5:90:03:49:c7:05:c9:b3:12:90:5a:12:
95:3a:b4:f7:81:98:a1:69:3c:51:d4:c2:14:4e:5c:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6F:33:E6:0E:BF:04:9F:1D:3A:24:70:72:4C:8B:AF:E2:F3:67:83
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b5:65:dd:a4:87:05:b8:bc:77:80:fa:8c:3c:e0:87:90:d7:
86:ca:3a:82:b8:25:b6:d4:a5:f8:e1:4a:dc:12:45:a9:11:2b:
54:f3:60:47:1a:fd:1a:26:75:87:8b:4c:7d:ae:7e:a7:da:38:
2a:83:4b:2c:c0:a3:f3:35:d4:1f:29:1b:8b:95:d0:db:dd:ac:
ef:97:98:72:ba:0a:bd:e1:1d:a3:6f:d1:ea:38:49:af:21:e8:
6f:2b:3b:5d:fd:cd:f8:10:b9:68:06:a8:3c:91:bf:18:44:91:
ae:a3:52:0d:90:4d:f6:9a:6f:8f:97:24:26:69:23:17:30:8f:
32:55:ce:44:5e:70:f0:cf:de:44:ca:61:d4:4f:ea:59:bb:7b:
24:29:8e:3c:bb:ad:dd:e7:eb:8b:cb:b8:db:90:0a:b1:10:1a:
d8:0c:2b:ac:c3:65:d8:60:8b:72:a9:ac:ac:7f:f7:0b:28:8d:
f5:68:59:68:39:22:38:0b:ce:9b:f1:d7:2a:4d:ce:f3:a8:a9:
bb:ed:70:9a:36:2b:b0:7b:5e:21:69:9c:d7:1a:ce:1b:cf:d8:
dc:ad:49:6c:8d:16:d9:de:9e:43:a6:94:34:2c:dc:49:76:ae:
2d:34:d0:a2:80:81:26:b2:0a:24:3f:7f:40:25:b6:50:d9:85:
f8:d3:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:58:49 2025 by rpki-client