Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: wktekManmfJ9aAmlvMzIgH+d7xTyRgilEC6tjAlHO6Y=
Subject key identifier: 47:D4:94:A7:89:14:E4:17:37:B3:E2:E5:CC:8F:C4:04:72:2E:0E:4E
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0198496556454831B8F51DD198B985EED478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: RBxsgEbbDW8JDZZRJxF4qnzpmmm350kPvikrsep9bKo=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:56:45:48:31:b8:f5:1d:d1:98:b9:85:ee:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=47d494a78914e41737b3e2e5cc8fc404722e0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:1a:20:62:9d:c8:90:79:07:b5:42:fb:20:
3c:dc:92:ac:eb:76:64:2a:fb:49:95:e5:ad:35:8d:
9e:72:06:d7:49:6f:b5:24:b8:8d:bf:db:4c:f1:a5:
c1:15:83:96:82:13:07:53:d0:ae:0d:94:5f:57:97:
cb:ac:df:78:57:47:aa:33:eb:2c:0a:43:de:c7:57:
df:ba:31:ad:af:95:c8:e6:3a:c6:f6:a9:ee:71:58:
cd:f9:6b:c8:26:a0:60:ee:1b:a4:78:1f:f4:2b:e7:
be:3a:ad:e8:59:fe:8f:da:1d:52:64:8e:67:dc:4e:
42:a6:43:c8:04:1e:0c:fc:8f:2d:6c:b4:1e:c3:c3:
06:41:47:9a:2d:b8:df:c4:97:3d:15:80:bc:f7:57:
78:22:05:8d:07:a2:e3:ab:fe:81:bb:fe:4a:94:db:
f7:95:5e:82:02:79:d5:dd:7e:7f:7f:5a:b9:3c:c7:
e7:7b:3e:41:83:c8:4a:ab:db:61:1a:55:f9:14:01:
09:e5:75:2c:2f:88:f4:3b:88:3e:99:00:18:c9:37:
85:00:61:69:b7:59:d5:d3:55:f5:54:b1:c7:35:76:
0d:29:65:6a:6a:3f:66:b6:a6:bb:96:80:21:08:89:
37:ec:a5:c0:4d:86:74:e2:98:b4:e1:7d:ea:6b:b8:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D4:94:A7:89:14:E4:17:37:B3:E2:E5:CC:8F:C4:04:72:2E:0E:4E
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:90:39:9e:ab:2d:37:77:66:5d:22:8f:21:0f:82:15:cc:29:
c0:0b:eb:95:c3:17:c7:34:c8:93:f9:c4:92:df:1b:9c:3a:c9:
b0:70:95:54:3a:72:36:53:ed:2d:fd:ec:0f:35:8b:ce:dd:6a:
b7:09:03:2a:9e:5b:c1:a8:52:6c:fa:54:ab:e8:c5:4c:56:a7:
6f:34:11:1b:69:21:ce:72:c9:2f:b8:6a:e9:8d:93:85:d9:65:
c5:24:23:61:91:f9:aa:00:d3:47:82:2e:c0:a6:c4:c6:c4:95:
a9:82:17:7e:29:ee:c5:4f:fb:2b:2c:0a:b9:3c:cb:4a:52:a0:
8e:8d:c7:a2:54:52:f6:df:e2:5c:96:c2:e2:f0:17:73:e2:07:
23:c2:d7:1d:ae:86:fb:5c:59:47:d1:75:19:70:7e:c4:e2:ef:
0b:5b:2f:5f:ea:f3:b3:1e:bd:32:b2:d7:c3:82:b8:04:92:fc:
f0:40:89:5b:37:8a:e3:40:39:53:50:48:a3:93:6d:29:80:15:
92:9e:1d:c2:f3:dc:ea:87:90:2d:a5:0f:fb:fe:11:d7:38:93:
b8:d8:c9:db:22:8f:26:d9:64:02:97:63:4c:f8:7d:c7:d0:b9:
c9:a8:24:f3:c8:e9:2a:e1:44:38:48:f7:16:71:63:2a:64:e3:
60:dc:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:27 2025 by rpki-client