Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: TezG4xHxwGJd7D4MDkvaA1eHuIlZKW61DniSkwYN8/g=
Subject key identifier: 23:45:B8:25:CB:11:E0:75:39:2D:47:5A:A8:A4:0F:95:9E:17:DA:B8
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 01984852E3C457B8528BA516F06D8768E85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 20:00:48 +0000
Manifest this update: Sat 26 Jul 2025 20:00:48 +0000
Manifest next update: Sun 27 Jul 2025 20:00:48 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: NssRaF+7ub+yoI5ewdgp+NYpQPYjDPbQW3mJrxMh9sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e3:c4:57:b8:52:8b:a5:16:f0:6d:87:68:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Jul 26 20:00:48 2025 GMT
Not After : Jul 27 20:00:48 2025 GMT
Subject: CN=2345b825cb11e075392d475aa8a40f959e17dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:47:3b:c5:fd:22:1f:a0:71:c8:cf:7e:77:
e3:48:b1:c3:92:d6:69:28:4e:2c:94:89:23:ee:5a:
57:87:d6:c0:72:33:61:4b:2b:7a:ae:b0:68:0b:5a:
25:30:d3:fc:14:1d:81:94:84:7f:1b:04:81:c9:ba:
14:cf:80:b0:95:b6:b3:bf:86:79:f6:39:34:b5:ea:
5b:e1:dc:a4:d9:d4:e3:2e:5c:5e:87:49:78:7d:42:
f1:03:2b:dc:3d:91:ea:d2:99:90:27:cc:e6:08:a1:
f5:82:8d:ca:f1:05:f2:27:a4:fc:a5:13:6c:ed:66:
29:e9:0c:d4:d6:93:f5:95:ae:c5:79:0c:57:eb:98:
01:10:ac:06:1a:3f:e9:94:5e:b5:7e:19:54:91:da:
19:7c:f8:92:dc:ed:33:76:a7:8b:c7:b4:ad:24:29:
76:82:f8:7c:88:78:86:94:4b:83:54:5a:93:aa:0e:
ad:d8:0f:07:4d:f5:16:d9:15:9c:e7:1a:fc:c9:45:
7c:a1:a8:35:5f:14:9b:a1:80:1a:c8:63:c2:3d:f7:
c0:43:f6:a1:b8:2b:71:4b:58:f5:79:6b:f3:64:39:
aa:c0:6f:2a:2d:a3:88:d9:2a:a5:d5:15:ef:67:ce:
e3:ea:09:83:a2:69:bb:f2:d2:a4:da:af:10:97:41:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:B8:25:CB:11:E0:75:39:2D:47:5A:A8:A4:0F:95:9E:17:DA:B8
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:d0:35:9a:ee:e0:ab:dc:d9:35:b5:9b:ef:ed:ec:a2:ee:
f1:87:41:15:bf:e4:2b:a7:3a:84:6d:f5:d8:db:8c:6d:ff:c1:
b8:3e:81:ba:8d:f1:31:c4:0d:2c:b4:7b:86:ec:83:5f:df:ce:
dd:1e:11:d5:ac:a3:0d:00:b4:5f:c3:5e:47:54:24:78:9b:d2:
43:ce:78:6d:19:60:56:6e:0f:28:a1:c9:8d:fa:da:d3:b6:69:
3f:cd:ef:57:28:8b:9f:39:fe:1a:57:d4:fb:71:fa:60:60:46:
43:4c:46:c1:ce:d2:3a:3a:64:1b:3c:24:53:bb:0f:02:40:f6:
bd:b1:88:7d:e3:83:1f:b7:6d:c6:ed:9f:a9:86:35:c1:da:8b:
e3:35:55:6d:78:8d:c2:58:fb:c9:24:a0:49:2f:24:88:65:50:
7d:eb:5f:8f:6e:91:cb:83:08:77:1c:c3:f9:bc:be:40:fe:77:
79:da:f3:4d:a5:9a:bb:fd:49:fe:f4:aa:44:07:03:13:9c:a6:
8f:a9:76:46:d7:31:6a:04:2d:91:4f:ba:0d:f0:61:94:52:a0:
8c:de:cb:8e:8d:79:b1:9a:18:5c:08:9a:1a:9a:da:c7:84:45:
e5:6b:18:f4:78:5a:28:32:f6:d7:23:2d:6f:80:05:d2:a4:2a:
75:1f:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:40 2025 by rpki-client