Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: TUId6sERnNXw/smeyt+1ewkoc5fbpAhXRUHcz1ComQc=
Subject key identifier: 72:33:0C:44:20:D7:11:19:78:84:9F:03:1F:CD:D7:19:48:C8:48:88
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 0197B77C9EFCC94D6597B8CB99CA00AF0EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: 0cNPZe0neNaky4rpKsJeEQEoMkz0+vJZQ81HbqTNKxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9e:fc:c9:4d:65:97:b8:cb:99:ca:00:af:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=72330c4420d7111978849f031fcdd71948c84888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:a4:0a:96:73:b7:a1:2a:d6:88:aa:c6:a8:
1b:04:bb:5b:27:1a:47:a2:56:34:0c:ed:f3:cb:48:
6d:7a:ef:6a:44:4c:98:66:5f:7b:a1:d3:2f:4e:f2:
f6:d5:b3:21:05:6c:fa:76:6e:02:94:2e:a1:f9:2d:
2f:e9:99:31:94:18:25:fa:26:c7:b2:44:c0:8c:8a:
88:56:40:09:b9:fe:b9:a6:a9:39:a2:22:cd:46:bc:
b2:8f:f7:d4:de:79:0d:a4:70:25:49:8d:a8:6e:22:
13:12:65:f6:e2:55:2c:f2:e8:23:8b:39:41:11:d9:
5b:21:bd:59:a0:23:f1:be:de:59:cb:1d:a4:d0:46:
52:6c:af:b1:45:fd:ce:10:3f:02:92:84:00:fc:38:
c6:14:41:40:a1:97:8b:b7:f6:d7:b5:8a:ec:06:fb:
3c:f4:58:97:61:ff:a8:6d:f3:32:7e:46:b3:a9:0e:
48:de:67:a2:fa:46:5b:c1:ce:83:bd:2a:24:15:ca:
f1:42:82:ef:5d:05:67:1f:54:c1:33:c8:69:20:12:
c5:5f:ed:70:44:dc:a2:9a:3c:77:7d:72:c3:53:df:
f7:20:e2:9f:ee:c3:02:5b:27:be:81:3f:46:6f:9e:
0b:50:05:c2:77:4f:8f:ee:a8:59:38:7d:1c:53:12:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:0C:44:20:D7:11:19:78:84:9F:03:1F:CD:D7:19:48:C8:48:88
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:37:aa:84:ad:0a:2d:41:61:67:9d:7a:f2:4b:7a:1c:94:82:
ae:68:ae:50:a0:ad:ad:7e:eb:f3:e4:41:49:e0:a0:84:74:94:
3d:54:c2:1f:c2:01:db:0e:43:02:e9:71:9a:40:d3:a3:9e:db:
59:df:cc:f0:3e:22:42:72:2d:c1:8d:ae:f1:b6:bb:44:24:9f:
73:09:12:40:6f:d5:39:18:63:d1:0f:5b:a9:5a:c6:aa:fa:a2:
fd:2e:67:73:d2:aa:50:2d:5a:94:6d:86:08:f7:87:68:1d:a5:
55:31:1a:a8:39:7f:7a:bd:1a:a4:da:04:86:d5:1d:ef:84:8e:
78:bb:a1:2e:96:3e:3b:c8:6e:84:16:b9:87:c5:d4:56:4d:b5:
56:f0:39:47:32:77:42:4f:ba:a0:3f:ac:06:44:0e:b0:86:8c:
71:5a:db:90:93:8c:eb:2d:06:f1:18:e1:b3:bb:80:2d:75:ab:
c4:68:b3:2c:f7:e5:4c:95:e6:de:47:94:92:16:76:92:1f:c7:
b6:5a:bc:9b:82:09:a1:55:25:c2:70:3d:ff:5c:fb:5f:9d:0f:
e6:bc:6c:89:13:e3:8b:3d:5f:55:a8:6f:89:84:ad:67:59:78:
f8:23:4e:5c:2f:17:eb:52:c3:af:7e:e4:4f:52:19:55:43:c7:
b0:19:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:15 2025 by rpki-client