Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: 9YjZvs58/TvLtuJ0ONQK5+HCByEyw6O+Ys0myOMhLxk=
Subject key identifier: 0D:A9:1E:7A:86:1D:06:FB:ED:65:14:9E:76:5A:B5:2F:07:5A:76:52
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019844762B59A8D495F3A8D37A6FF0F4A3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 1060
Signing time: Sat 26 Jul 2025 02:00:51 +0000
Manifest this update: Sat 26 Jul 2025 02:00:51 +0000
Manifest next update: Sun 27 Jul 2025 02:00:51 +0000
Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: Mzakd9OgLX6+paW/HTKvTYsuDcV71gs2NLwP0a6WmRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:2b:59:a8:d4:95:f3:a8:d3:7a:6f:f0:f4:a3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Jul 26 02:00:51 2025 GMT
Not After : Jul 27 02:00:51 2025 GMT
Subject: CN=0da91e7a861d06fbed65149e765ab52f075a7652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:bd:82:e3:a1:92:e0:aa:f4:5e:44:58:30:
7f:5e:ef:a5:e6:e7:35:c8:99:ee:5b:35:34:41:84:
44:12:2b:b3:1f:a6:6b:80:53:d3:ab:47:99:b2:3b:
bd:ad:92:0f:b5:11:07:ea:aa:f0:06:23:7c:4f:dc:
38:27:df:23:a4:e5:f4:e8:53:2d:ad:99:01:18:09:
00:48:c0:c8:a5:e1:68:8f:57:8a:82:9f:4f:4e:be:
77:5c:3b:37:59:f8:9c:3c:91:d4:f0:88:25:4d:f2:
cc:0f:aa:e3:e1:fb:f0:d8:30:21:8b:1e:62:ae:15:
b4:95:e9:e3:af:80:0a:ca:9a:d9:19:76:c5:3d:b1:
41:a1:1f:7d:d9:ff:08:19:00:fa:4a:67:aa:72:46:
04:95:74:d2:1e:ad:d4:3c:09:ea:2a:91:c2:5b:74:
9a:ee:4e:30:e3:e3:bc:3f:69:69:82:cd:f8:6a:c0:
16:6c:79:7b:38:69:7e:de:5f:ea:d8:e2:90:40:e6:
67:94:83:56:b6:a5:22:30:1d:a8:c3:c5:8a:ec:58:
89:fc:88:f3:eb:57:d8:d2:6b:26:78:03:f4:82:41:
51:4c:7c:df:cf:68:2f:bd:cf:a8:a7:cc:53:9d:bd:
ea:ad:db:dd:88:ac:82:26:bf:1b:06:b3:55:3a:22:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:1E:7A:86:1D:06:FB:ED:65:14:9E:76:5A:B5:2F:07:5A:76:52
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:27:63:0c:d7:20:6a:ca:41:6a:3c:c7:74:49:36:fd:06:
11:c3:c4:d7:a8:63:27:e4:45:eb:ab:f7:59:ee:56:4a:22:15:
94:68:5e:b2:3f:17:25:fb:0a:81:f0:b3:3f:1d:61:47:47:b4:
f0:43:3e:d1:4e:87:d5:d2:36:0b:91:53:ad:bd:06:41:f4:f0:
1b:bd:7b:af:f4:71:b5:59:cb:9d:91:0f:17:bf:08:18:e0:1c:
2b:9e:5c:6d:fc:ed:d5:d9:1d:48:6c:a0:21:b5:19:93:25:d7:
24:7a:66:5e:0c:3c:6f:60:5b:8e:a8:48:73:e9:d2:6c:00:6f:
62:fb:e1:f5:31:92:90:cf:f8:76:1f:1f:42:1b:8e:ff:a7:5a:
7d:19:de:ac:90:cd:fd:6a:5f:31:28:f6:8f:7e:d3:f8:e0:b3:
97:40:65:9c:3c:b2:da:6b:e3:d7:8d:78:9f:a1:a1:6c:51:89:
17:14:ff:f0:5b:1d:f5:0c:e3:be:77:b2:1f:32:90:b6:78:f7:
27:10:4b:1b:a8:20:55:cf:cd:f1:18:ef:7e:fa:ac:95:60:4a:
ad:2d:a1:87:da:8f:5d:db:fd:24:97:b2:6a:5b:f2:7f:2c:2c:
96:47:7e:27:da:42:dc:d7:79:18:30:be:25:52:6f:1e:10:b6:
79:3e:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:32:09 2025 by rpki-client