Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: hNh1md108Tcwp983yQDBelkouRiFSeQNKcZjeZFnw3c=
Subject key identifier: 62:91:B9:5E:42:01:1D:7D:A2:65:22:9B:79:DA:6C:7F:DE:65:F9:03
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 01982FDC686D67ADFFBCC0D176604D5D0575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 02E8
Signing time: Tue 22 Jul 2025 02:00:30 +0000
Manifest this update: Tue 22 Jul 2025 02:00:30 +0000
Manifest next update: Wed 23 Jul 2025 02:00:30 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: sg8t1ZInijC9VYWRpVQe1iqhkNBvpSagK++P+kInHqk=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:dc:68:6d:67:ad:ff:bc:c0:d1:76:60:4d:5d:05:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Jul 22 02:00:30 2025 GMT
Not After : Jul 23 02:00:30 2025 GMT
Subject: CN=6291b95e42011d7da265229b79da6c7fde65f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:29:81:78:4c:fb:cf:d9:a8:1b:e9:26:a6:
8f:2f:06:ee:e5:1f:83:54:40:f3:84:dd:55:ff:43:
76:a9:93:9b:52:cd:5f:9d:f3:12:9b:ad:9c:5c:6a:
01:f5:1b:17:ad:34:68:68:8c:f7:d3:40:01:88:ee:
05:e0:75:0c:0e:d9:64:fc:ee:78:93:a3:a9:20:7b:
f3:bb:34:95:4e:b4:a0:1c:b1:c1:b9:e0:bc:08:0b:
88:91:f8:2a:ed:14:55:4f:06:f2:ff:a1:6f:50:2b:
cb:52:b5:83:cc:68:70:23:9f:8b:c1:bc:a3:e2:1f:
a2:03:0f:14:e4:2f:20:ce:d1:69:ab:b3:18:99:70:
c2:d3:9b:4e:9c:49:49:6b:75:8c:f7:06:aa:26:4f:
97:68:b8:0d:17:6b:07:13:83:e6:a8:35:0c:ce:ca:
5e:05:14:fc:b8:89:df:3d:84:be:60:2c:da:86:87:
9d:da:d4:26:8f:48:b6:80:ec:1f:cb:54:3f:5a:ae:
3b:a0:fb:3c:90:e1:b6:f3:85:d6:a9:08:14:f1:07:
ed:04:e0:66:cc:a9:4c:fa:d3:cc:71:4b:e5:b3:f4:
a0:f6:ec:bc:5d:da:1c:54:80:9b:c8:21:25:d6:3d:
8d:bf:1a:2b:17:42:5c:ed:87:6e:74:38:17:67:cc:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:91:B9:5E:42:01:1D:7D:A2:65:22:9B:79:DA:6C:7F:DE:65:F9:03
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:a2:7a:43:d4:eb:b1:b1:68:e6:f9:fd:89:c5:0b:ad:f0:
48:c5:af:03:a7:27:e4:c9:3c:42:9e:42:77:13:71:9a:d8:25:
75:4d:fb:1d:30:cf:81:5a:05:8d:1e:bb:43:81:61:5e:5a:f3:
f1:fa:38:1f:01:8d:d9:4f:e3:3e:d8:97:81:d2:0a:a3:f8:51:
62:a7:1b:50:6b:cb:f7:12:5e:9d:54:f7:75:27:94:59:bf:62:
21:84:42:86:44:ae:96:22:b5:82:42:a7:13:b0:c2:a5:7f:98:
8d:c5:28:37:f9:cd:8c:df:da:3e:6e:f5:61:5a:96:5e:71:8c:
0b:5d:08:e1:d8:a4:b7:0c:33:80:d5:4c:85:37:c7:35:0b:6f:
aa:b0:10:16:3e:59:39:07:60:7f:aa:7b:20:5d:8d:a1:82:2f:
1b:fc:a7:f9:6e:db:c8:31:32:f2:03:f6:3c:05:c4:cc:20:fd:
a7:59:28:21:f8:15:d4:b8:f6:e0:31:ea:4e:59:b7:a1:9e:16:
9c:94:bc:cc:96:0b:6b:79:4a:f2:ef:76:d9:57:07:08:90:d0:
ef:86:96:fa:f0:58:5d:76:03:0f:06:cc:54:58:69:57:1f:d3:
42:6a:6d:04:99:95:f2:63:d1:54:fe:a6:82:9d:d5:5d:04:52:
24:8f:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:32 2025 by rpki-client