Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: tmQk8skLJI+f4dwzrzatqtibAgF67KbgR9cqk/SWK5E=
Subject key identifier: C7:9E:C7:A9:CC:B8:62:96:3A:99:7F:2C:EA:98:B9:E8:43:46:72:62
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 01984A77D3C2332610996D1AC5BC27755DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:23 +0000
Manifest this update: Sun 27 Jul 2025 06:00:23 +0000
Manifest next update: Mon 28 Jul 2025 06:00:23 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: b8umiImWptc3wIREX6IUGVq3KF68s2HAT7xQFDmJu6Y=)
2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d3:c2:33:26:10:99:6d:1a:c5:bc:27:75:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jul 27 06:00:23 2025 GMT
Not After : Jul 28 06:00:23 2025 GMT
Subject: CN=c79ec7a9ccb862963a997f2cea98b9e843467262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d7:bf:9c:67:ad:79:16:42:78:0d:b7:bc:f3:
1d:b0:85:9b:78:ee:82:75:f0:bd:55:8e:92:66:a3:
bd:3a:4c:fc:53:80:fa:65:36:e7:7b:7c:71:84:31:
98:38:f8:47:7a:27:e1:08:84:09:f4:97:1d:81:a2:
d1:63:e3:f8:7f:4f:1a:75:7f:55:e9:07:44:48:ee:
ae:5f:a7:d8:15:ba:95:78:80:6b:ec:de:63:b9:d7:
29:90:bc:3f:15:52:5e:a4:3a:3c:5e:cb:ef:52:07:
d7:48:44:c8:59:b8:19:de:c0:2e:52:74:c9:a8:ae:
31:0f:7c:23:70:a5:32:00:c4:ed:92:70:e7:a3:70:
24:28:e9:4f:a8:7f:8f:02:6a:ca:a0:bc:d2:06:06:
e5:d5:99:7e:d7:98:0f:0a:aa:2b:d8:16:6e:dd:99:
ea:21:b0:3c:ff:bf:19:7a:a5:0c:19:97:82:40:45:
17:da:81:1e:f2:c5:b2:b9:f9:dc:4d:f4:82:43:5f:
43:50:b9:51:fe:e0:3f:d5:73:69:58:82:7d:5d:62:
83:a7:83:3c:be:da:29:3f:3a:78:3e:d4:de:13:47:
43:d6:94:a4:7d:f0:eb:32:a1:c0:4c:d5:f8:1a:5a:
e3:eb:58:81:a0:6c:4e:bc:2d:4c:d7:9d:5f:20:b8:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:C7:A9:CC:B8:62:96:3A:99:7F:2C:EA:98:B9:E8:43:46:72:62
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bb:9e:7f:bb:49:1a:b3:40:d3:ed:0e:a8:9e:fc:c8:70:d7:
74:ba:0a:22:ee:7d:4f:5e:43:75:23:6c:a1:a2:8c:79:5f:d9:
a4:c6:bd:5b:3d:cd:2c:37:65:9b:98:b2:36:c8:4e:e3:f5:ec:
61:b9:c2:5d:fc:06:ec:c1:ec:9f:5d:90:18:fa:a5:e3:a3:b8:
33:e4:4b:df:83:1f:fa:71:35:77:20:6d:9c:9e:84:a7:76:46:
3e:d0:77:31:58:eb:ba:c1:8b:52:0f:63:1f:95:b9:05:c1:50:
1d:b9:4f:51:5d:f0:ba:bb:48:42:79:5a:fe:a1:52:5d:c5:b6:
e4:98:9c:a8:3e:bf:a2:f2:62:e6:32:92:14:1f:9c:3b:a9:e0:
e4:a3:1d:25:e8:a2:4f:f7:ff:c0:39:9d:76:6d:01:bd:c6:c5:
f1:20:f5:6d:a3:68:cb:9b:a6:34:64:f5:df:2c:3e:d4:80:2a:
0f:92:ce:61:23:8e:48:46:b1:b3:b3:db:1a:ca:e5:8e:24:dc:
76:99:23:5b:fb:ad:eb:07:89:59:8e:a9:b3:46:a4:23:2d:e8:
e4:6e:03:e6:6f:da:b1:19:76:2b:7e:52:e4:8d:29:28:98:e0:
f5:2d:47:1a:4b:95:88:88:dd:df:1a:69:ea:a6:54:52:f8:a7:
6d:9e:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:28:22 2025 by rpki-client