Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: 9Nep4cxipxyVNynHBHBn/lajHMjcgGIlTf4QGZE6okc=
Subject key identifier: BA:57:F2:72:DF:B1:62:18:64:98:8A:61:07:39:23:36:F5:86:0B:B9
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 01985758BE266256D9CEB16CDCE9C7B9E134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 02F1
Signing time: Tue 29 Jul 2025 18:01:30 +0000
Manifest this update: Tue 29 Jul 2025 18:01:30 +0000
Manifest next update: Wed 30 Jul 2025 18:01:30 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: XL7RBETKcko2gZuGzAi3iwlwTBiGuTfqg61VsbYQKhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:be:26:62:56:d9:ce:b1:6c:dc:e9:c7:b9:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Jul 29 18:01:30 2025 GMT
Not After : Jul 30 18:01:30 2025 GMT
Subject: CN=ba57f272dfb1621864988a6107392336f5860bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:4e:d3:b9:dc:4a:d8:2f:f6:f8:e5:bc:a3:
86:92:9a:07:a8:cf:df:6e:07:47:c6:42:57:bf:2b:
5c:17:1d:13:a5:a2:ec:be:6b:28:a6:ba:21:60:0b:
24:3f:c2:f7:f0:b7:b3:fa:92:a5:04:c6:3f:3b:5f:
6e:99:e7:ea:55:34:74:f1:0c:e9:f6:74:17:a7:8b:
3c:d1:a9:4a:1d:98:48:00:74:6d:af:71:39:75:97:
33:a5:d8:fb:df:d8:eb:0e:83:6f:c6:70:17:d5:d5:
1c:94:ad:53:c4:e5:92:03:a3:1a:4b:6d:0f:f3:2d:
22:1d:5d:0a:fe:44:53:44:ad:e5:73:72:98:91:8f:
80:76:b4:b7:f7:9e:36:81:72:0c:f3:ef:c8:2b:cb:
a3:49:12:b4:5a:87:b2:fb:b8:2d:48:d9:80:f8:c5:
15:55:93:6d:42:f5:28:07:05:38:23:ca:c7:cd:43:
da:85:f2:10:33:8b:b3:ee:b8:91:21:83:a8:f5:7e:
ee:d5:30:a6:42:54:e0:39:f3:d8:55:f1:1d:e7:80:
0e:d9:b6:c5:9c:41:49:ff:2a:8b:8a:0d:4b:3a:03:
90:30:1c:86:bc:78:90:71:3d:5e:04:2c:bc:40:ae:
8c:52:a9:9a:65:aa:75:6a:a9:de:53:9a:a8:76:77:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:F2:72:DF:B1:62:18:64:98:8A:61:07:39:23:36:F5:86:0B:B9
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:2f:b5:25:12:84:0c:41:26:d5:31:50:20:83:95:bc:68:
7d:cb:23:af:6e:31:5e:c1:d2:bf:82:d8:dc:43:67:48:0f:65:
76:ef:38:52:65:92:5d:dc:c7:fe:f3:2c:02:89:0d:30:7f:e5:
19:75:a0:97:ec:c4:6a:12:8a:d0:80:36:b4:56:57:f4:21:6b:
15:e8:34:d6:fc:cc:b0:c3:e6:d8:ee:30:cd:97:9f:90:8c:e5:
e4:51:2b:85:53:45:d6:40:08:22:07:69:71:1d:4b:8e:f7:35:
be:94:39:8d:2d:e6:d9:4f:8e:77:24:4f:1a:0f:d8:9b:f3:e9:
00:e1:8e:78:54:7c:40:4a:83:25:dd:f8:7a:df:36:c4:f0:de:
85:ae:6f:6c:9f:1a:68:e3:1c:13:84:00:09:21:95:a7:7f:73:
f9:a8:a5:83:f0:d9:b0:ed:95:98:7f:58:cd:23:7f:26:a8:cd:
d3:6a:d1:fb:4c:0c:dc:b3:52:76:ef:10:d2:d7:4f:22:88:f9:
44:fe:2f:31:96:b6:96:5b:4b:67:59:24:9a:b1:ec:2f:de:ea:
81:5f:03:0e:34:e4:db:a8:6e:d5:2e:13:4b:0c:f9:fd:f9:27:
6d:c4:c6:5a:60:bb:00:6d:99:21:33:ed:26:6f:0f:58:6f:03:
99:ae:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 23:23:37 2025 by rpki-client