
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: Ko8PH3ZJEJF3F7YEU/Fzq97cY0kA86thRPCl4Kqqogg=
Subject key identifier: 71:E6:E6:B9:88:1C:72:29:B0:D1:0E:CE:D1:89:82:A7:25:DE:82:86
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 0198D54DF50E09F985364FE1744E999BFFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: tszj1ZRvcYji7i5IT3NZD3t9dfM10o+pvjk6FUxB24E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f5:0e:09:f9:85:36:4f:e1:74:4e:99:9b:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=71e6e6b9881c7229b0d10eced18982a725de8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:fe:f4:82:c5:b1:a4:59:54:98:0f:55:11:
8b:15:90:55:01:01:40:42:6a:bf:f8:a5:bb:6c:dc:
d2:8e:34:80:7b:71:45:4b:c7:b2:96:17:51:d9:af:
76:a8:2b:59:cf:b6:98:7f:2d:60:d3:a1:ce:7f:d0:
65:5b:c5:d7:8b:ee:49:b7:54:46:a9:8e:33:81:9e:
24:fd:a0:14:cf:4a:5a:1f:cb:b9:c2:01:e3:62:03:
2b:75:c5:ba:68:66:50:2e:fe:71:6a:76:4b:1c:a2:
24:24:8c:41:66:f6:c6:b2:15:48:91:ad:e7:62:b5:
f8:ad:0e:29:f5:ef:50:f2:92:89:e0:b2:a3:ce:8a:
c9:a0:14:b6:60:cc:5e:fc:d1:6e:cb:8b:5e:e1:ce:
7f:fa:0c:43:1b:72:4b:e6:e7:8f:58:28:84:a0:e8:
8d:e4:b6:78:9d:a8:07:d2:86:c4:b4:f1:ef:a0:fa:
bf:3e:db:8d:5e:77:a7:13:60:ab:eb:41:dd:07:05:
47:ba:e8:7a:3d:5f:dc:c6:fa:f4:cb:c4:23:70:f7:
28:7c:6e:ca:78:bc:d1:9d:76:ec:8d:71:88:1b:20:
76:83:8e:0d:e3:3b:c2:03:76:f9:62:6c:90:e6:ef:
31:6d:72:69:bd:48:50:cd:a3:f5:bd:8b:f6:8b:95:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:E6:B9:88:1C:72:29:B0:D1:0E:CE:D1:89:82:A7:25:DE:82:86
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:8e:19:12:ff:d1:37:f5:64:a2:12:d6:d8:f1:4c:65:a9:
f7:b1:8d:bb:b9:66:f1:2c:d7:e2:00:f3:f4:91:ac:18:44:76:
a3:d9:21:eb:e2:21:3b:5f:d8:93:76:99:cf:c2:bd:6a:06:67:
6d:90:7a:c4:ba:f9:55:34:16:2c:9d:59:52:de:7e:15:1a:ed:
72:7e:b6:ed:3f:f5:29:ac:75:82:3b:de:f4:cc:83:70:a6:3f:
04:77:b5:2d:56:41:7e:70:43:6e:0b:af:93:8b:34:6f:48:a6:
50:4e:be:71:af:e2:e8:16:50:91:f6:98:43:80:80:1b:b5:f2:
e7:76:f5:af:b0:17:43:3f:59:ee:1d:7d:29:13:cb:1c:77:86:
b2:4b:4b:76:12:cb:0a:d7:fc:c5:52:31:60:48:b2:f2:5f:0d:
d9:06:b4:73:f3:72:83:83:4b:ef:50:1f:54:1d:97:8f:91:bf:
eb:87:b8:d8:e0:14:fb:69:b8:35:44:a3:90:bb:63:24:35:5c:
33:44:1f:0c:e4:b4:0c:07:22:7a:09:15:b7:65:18:e1:c7:90:
db:38:83:07:4a:e0:c7:c2:1a:39:ff:3e:ae:5b:2a:f4:74:60:
33:df:09:70:68:96:65:1d:76:f1:0f:68:be:16:35:7f:23:c3:
cf:27:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:27 2025 by rpki-client