Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: fXHi6RN7mtU1IrbiukfbcaRC/0fZSNpq1GuFgjU2ujM=
Subject key identifier: 87:EF:B6:CD:81:2E:1C:3E:C9:D8:30:25:84:A5:D1:17:22:1C:90:9C
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 01983F4F256FDB85F94FFB5C892520041DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 02F0
Signing time: Fri 25 Jul 2025 02:00:08 +0000
Manifest this update: Fri 25 Jul 2025 02:00:08 +0000
Manifest next update: Sat 26 Jul 2025 02:00:08 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: Zcaz9dl1LD52ng4zPQazHiOI+c01MyWU3PQgTwdmH0A=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:4f:25:6f:db:85:f9:4f:fb:5c:89:25:20:04:1d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Jul 25 02:00:08 2025 GMT
Not After : Jul 26 02:00:08 2025 GMT
Subject: CN=87efb6cd812e1c3ec9d8302584a5d117221c909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:8e:fa:6d:39:4e:39:51:c2:7e:5e:ec:c1:
6d:e6:a7:42:54:02:af:06:80:3a:50:15:88:ac:a0:
40:a2:63:7a:32:87:64:d8:37:95:da:f4:18:ed:ad:
8d:05:7c:7b:62:05:ab:a4:d0:d2:14:8c:4c:2c:70:
d9:11:e9:4d:f2:25:22:07:97:51:f3:fa:e2:94:25:
c7:86:75:d9:07:28:50:f9:c9:48:ec:d7:ab:c6:5b:
20:d2:1c:c2:84:76:03:4a:d9:08:fb:68:e6:97:7b:
28:9a:7c:50:e7:be:46:29:95:be:ad:a4:7d:cb:02:
87:24:e1:0e:87:f6:b1:fa:c7:99:df:15:12:af:82:
66:2e:18:f8:e7:44:f6:e1:a8:c5:6d:75:3b:27:60:
dc:ad:e5:f4:a9:95:8d:e3:22:1d:e3:44:45:d5:68:
4b:f3:4c:f7:04:3d:2b:76:45:66:c8:99:e6:8e:e8:
32:40:92:af:05:ec:ea:d1:b1:ae:7d:b0:e0:27:eb:
32:3c:6f:d6:75:97:29:e4:1b:1c:fc:92:40:35:99:
d6:dd:1c:ee:4d:5e:be:94:14:ae:bc:48:f8:4f:27:
18:35:74:ee:43:83:90:78:bc:3b:1e:d6:6b:ec:d2:
4f:23:21:71:5f:ec:b5:2c:99:d3:41:ed:7b:fb:cf:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:B6:CD:81:2E:1C:3E:C9:D8:30:25:84:A5:D1:17:22:1C:90:9C
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:85:50:eb:c7:5c:1b:31:95:c6:5d:bc:ad:8f:54:5e:34:
d9:09:d9:ae:a8:ce:de:24:1b:6a:c0:9f:1d:a7:86:06:ab:04:
98:1d:cf:bc:c9:3e:c6:ca:5a:de:e5:d4:d1:54:b5:9c:a5:59:
69:28:fe:b4:99:09:79:e8:de:41:51:b2:10:34:5a:57:1c:a3:
43:59:ee:f6:17:fa:7c:84:f4:33:ca:3d:f8:19:1a:fa:02:25:
cb:09:d6:5f:21:ac:7d:42:fb:16:a0:e7:89:ef:ca:b9:28:1f:
e6:84:94:02:bb:11:2c:06:e1:f5:5d:5d:42:5c:f8:0e:e5:67:
96:8f:21:b2:fb:a6:74:f1:74:a7:39:71:e9:e8:ae:2a:ba:73:
f5:e1:4c:9f:53:15:24:26:0a:28:fa:42:bc:3c:23:62:76:24:
15:51:c4:ba:c6:29:d5:ea:73:c3:11:89:8c:bb:b4:fd:a2:4a:
2a:78:ba:f4:d8:f1:66:eb:8e:97:7a:a4:60:56:64:b2:a1:cf:
c5:3c:78:40:52:46:7e:28:6f:6d:48:7e:d9:10:df:65:aa:a2:
0e:69:80:1a:85:52:75:ef:9d:91:0a:ed:05:90:3e:38:b8:e6:
27:ec:75:e4:7d:e7:73:d4:5a:7a:c1:50:34:72:1d:aa:74:34:
fa:71:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:31:07 2025 by rpki-client