Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: QnlygPGDJ/xFCKJiA9+zAnVBGSbYoTZ2URexDKJWhtw=
Subject key identifier: 69:BC:C4:2C:85:FC:C9:91:01:95:38:66:12:56:70:DD:4D:8E:B2:E8
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 0198432C644F0E7E5FB07C3302057B6FDEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 02F2
Signing time: Fri 25 Jul 2025 20:00:39 +0000
Manifest this update: Fri 25 Jul 2025 20:00:39 +0000
Manifest next update: Sat 26 Jul 2025 20:00:39 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: cXkOocfBz8VM1MyPh1u05im9nE2Sp3GdLxTBUS+TGrA=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:64:4f:0e:7e:5f:b0:7c:33:02:05:7b:6f:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Jul 25 20:00:39 2025 GMT
Not After : Jul 26 20:00:39 2025 GMT
Subject: CN=69bcc42c85fcc99101953866125670dd4d8eb2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bd:30:48:a9:78:06:b7:2e:ea:21:f3:c9:6c:
07:b9:51:2f:33:d5:33:e1:51:d3:45:79:18:fe:d2:
05:1d:12:44:96:d5:94:dd:41:61:59:23:0b:8c:9d:
9e:6d:fc:88:14:2a:3d:91:63:a3:f6:f5:ad:86:28:
e1:57:86:28:2d:ec:ea:5c:fa:9f:37:cb:2e:14:65:
ce:90:ac:e5:1d:da:f2:82:5d:d1:53:bd:0d:27:39:
53:78:e6:a8:e0:78:ba:fc:93:73:53:11:a6:a2:cc:
06:43:0a:e9:f1:69:a1:19:af:87:c4:af:b2:2c:f6:
3c:e3:6f:86:69:12:d1:ec:c7:16:52:1f:df:e7:88:
d1:62:bb:f0:33:82:e5:13:6c:11:1a:0f:ca:0e:f4:
39:39:24:26:c8:1a:e1:5c:68:b5:f9:66:f6:e9:87:
ca:63:e6:6e:39:73:35:79:6b:ad:e5:b3:d4:4c:e8:
31:33:ad:cc:5f:42:6f:c9:bf:5a:e9:2d:3d:cd:c5:
23:07:a4:2c:aa:04:20:24:7a:2b:08:36:db:ed:0b:
9c:eb:a5:69:33:92:db:6f:54:e0:47:6e:3d:4b:3e:
0a:32:77:87:4b:44:de:d0:2f:df:70:d0:29:ce:03:
cb:68:cd:15:a4:f5:57:c9:8d:a1:13:c1:12:11:00:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:C4:2C:85:FC:C9:91:01:95:38:66:12:56:70:DD:4D:8E:B2:E8
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4f:2a:69:05:04:ab:6b:3d:5c:0c:52:67:7f:ae:88:f9:fe:
8b:82:82:ef:b6:ed:ed:b5:6e:5d:93:f7:fc:cf:94:11:a6:62:
a3:8c:1c:5a:85:9d:b4:5c:72:47:7c:42:22:80:9d:b7:06:36:
31:86:ed:13:db:ba:20:36:14:97:66:85:61:97:74:a0:bb:80:
60:24:2c:37:11:3f:ba:8a:a9:64:29:a9:71:46:6e:f2:a8:9c:
27:18:cb:2c:87:da:eb:57:b4:71:c5:10:eb:52:c6:9f:68:1e:
f1:52:25:2d:49:15:db:dd:40:ca:c9:2a:37:2b:19:7e:7d:44:
32:2f:3a:48:2e:8f:a0:f6:d8:0e:29:25:47:1a:29:d8:70:e8:
bd:52:d0:74:f1:93:d3:b1:f8:0d:8e:e9:61:07:98:c3:f8:74:
bc:8c:24:f4:29:99:fa:c0:71:aa:bd:a6:92:ce:20:74:a1:cb:
61:96:6f:80:3e:be:f5:05:34:af:44:2c:81:18:81:d4:cf:2c:
52:ac:77:b0:2e:37:c1:0f:9e:90:ca:33:eb:93:87:4c:c7:8c:
7f:2d:95:3b:bc:0e:f7:44:50:1e:dc:0b:1d:93:25:e8:bc:1d:
a9:d8:23:18:57:be:79:6e:50:00:25:b6:c3:fa:d3:7f:48:f0:
83:11:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:42 2025 by rpki-client