Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: beMnVJCKpdUM0SiyihY0WXkcoJe8O2iuD5IxWpjU6B8=
Subject key identifier: 34:94:CC:CA:1F:F8:6A:B6:AC:69:19:50:89:15:3C:03:A3:87:CF:36
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019854FBE16DEA8F6DFDED79A880831C938E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 07:00:50 +0000
Manifest this update: Tue 29 Jul 2025 07:00:50 +0000
Manifest next update: Wed 30 Jul 2025 07:00:50 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 8g8dW9ECKnU4Wk44xfttuZglwP5bZAlH+rUZzZspIVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:e1:6d:ea:8f:6d:fd:ed:79:a8:80:83:1c:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jul 29 07:00:50 2025 GMT
Not After : Jul 30 07:00:50 2025 GMT
Subject: CN=3494ccca1ff86ab6ac69195089153c03a387cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:42:d4:35:fc:c8:26:4e:15:ec:6f:8b:38:
67:d6:89:32:69:08:97:02:6d:be:07:fa:a9:30:15:
bb:2e:e0:25:18:fc:0d:35:36:5a:ce:e6:66:47:14:
88:25:8a:d5:f8:6e:aa:ed:0d:4e:de:15:b9:9f:11:
3e:da:31:ec:f2:e6:39:c2:3b:9f:a1:43:9f:69:bf:
74:c8:7c:49:7f:ee:12:59:76:ab:93:cd:83:e3:da:
66:fc:60:a6:3b:1a:f3:4a:43:c8:f5:2a:7f:17:11:
c5:8e:1f:b3:70:2f:53:88:fb:ab:3a:6d:58:35:d9:
61:73:7f:84:4e:6f:f2:c1:f4:9e:ed:52:39:d2:0d:
ac:7f:ef:36:ee:ac:f5:39:3f:52:a0:ed:d3:d0:1f:
20:71:ec:df:0a:f7:8c:d7:bc:3e:37:e6:12:3e:1d:
f8:02:0d:11:54:a7:71:1c:1d:f0:06:8e:77:7a:31:
83:61:10:75:c1:ce:7d:17:bd:28:29:bd:b0:36:f6:
9e:48:f7:28:e3:7b:77:e4:51:c8:1d:62:6f:35:40:
ac:44:88:72:c2:04:46:46:79:01:55:c2:cd:f1:46:
f5:ff:b3:c3:dc:d5:37:ef:87:23:f7:5d:64:79:b2:
37:eb:7b:58:25:45:9c:11:58:38:9a:12:5e:b3:1d:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:CC:CA:1F:F8:6A:B6:AC:69:19:50:89:15:3C:03:A3:87:CF:36
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a3:7e:05:45:cc:f4:2a:6f:5a:4d:a8:23:1b:2b:a5:f6:de:
ae:a8:88:9a:62:2d:87:29:b0:8a:87:b1:9a:a8:5f:ea:32:29:
fc:79:11:b7:38:3e:25:19:5f:ae:e8:8a:8f:9e:32:49:37:48:
5d:3b:b4:34:af:9f:69:d3:c6:a1:5a:ae:f2:d2:52:3a:b7:75:
05:4e:52:b1:95:c1:76:08:97:1c:af:a1:38:24:53:3f:7a:f3:
3e:04:b6:21:83:38:0a:98:3c:9c:b1:0c:63:26:91:16:a2:39:
b2:20:aa:c0:28:44:eb:c3:79:33:cf:3e:91:10:d5:cc:d7:5d:
bb:97:c0:32:79:1e:c1:a5:2e:43:e1:14:2c:b1:b0:33:af:62:
4e:68:80:7e:ae:eb:5f:e8:35:d2:61:bc:bd:e9:0b:b9:bf:7f:
21:68:49:25:f4:4a:09:7d:20:a5:3e:14:f2:97:33:65:d7:1e:
9f:ae:27:e5:b9:92:17:8f:42:51:03:c6:37:a2:4c:72:42:6f:
c3:d4:f2:23:29:c8:c0:c1:f2:57:a7:42:9d:ed:9e:72:29:61:
9c:8f:15:48:16:38:a7:4e:72:42:26:fc:85:07:cb:39:14:75:
ee:e4:e8:a0:ad:4e:99:9f:df:69:a0:cc:33:64:08:07:fe:6c:
72:4e:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:31:31 2025 by rpki-client