Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: Fz1XNYE0Sz2cHh/2TBpblWnIt0lMQh+Q1pVrW/wP4p8=
Subject key identifier: C2:06:85:4D:25:40:C5:5D:AC:7A:C1:14:DC:97:1C:23:B1:7F:E3:B2
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 0197530FB73CAFD75EB789F2C9CC63D3B7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 1143
Signing time: Mon 09 Jun 2025 05:00:28 +0000
Manifest this update: Mon 09 Jun 2025 05:00:28 +0000
Manifest next update: Tue 10 Jun 2025 05:00:28 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: KAcCaLQVviqxWaBHiWEq9Oi+4NZFSvqPGDQzml9vF38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:b7:3c:af:d7:5e:b7:89:f2:c9:cc:63:d3:b7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Jun 9 05:00:28 2025 GMT
Not After : Jun 10 05:00:28 2025 GMT
Subject: CN=c206854d2540c55dac7ac114dc971c23b17fe3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:87:24:f4:01:a5:3b:09:72:99:92:89:75:
c6:94:86:8c:70:50:09:b8:ed:a9:04:99:6e:7b:34:
76:26:d4:4f:06:3a:54:86:c6:d3:5e:23:0d:87:ab:
be:0f:1f:0d:89:94:cf:0b:36:7a:c3:90:a2:51:3f:
1d:de:52:98:9f:66:62:6c:ce:bd:46:50:8c:3e:2c:
20:fb:3c:de:d4:ad:2d:21:92:a9:21:bc:17:c0:49:
e9:32:a3:2c:f1:3a:0c:3e:32:51:e3:a9:64:40:fc:
6c:af:3e:e7:9f:41:df:db:7b:bc:6e:1b:62:d3:ec:
a1:b5:a2:27:c4:bb:43:4b:78:ef:e6:1e:e3:8d:4a:
1e:f4:7d:4c:1e:85:33:24:33:ce:db:f6:92:5d:21:
3d:7f:df:39:4d:9b:0f:10:2b:b8:45:05:3a:92:23:
05:d1:b0:8e:a0:f3:9f:03:00:ec:3b:10:22:97:43:
c7:42:6b:13:71:bf:87:96:2a:b3:26:e8:19:50:f3:
be:54:2d:0f:29:19:74:31:6f:9e:30:1b:40:b0:a5:
32:14:54:56:f3:14:d4:38:07:3a:3a:84:43:26:cd:
fe:47:cd:18:3c:de:fa:bc:b0:51:f6:55:06:c8:2e:
52:0b:f0:bd:d3:ff:26:c7:80:c2:d3:88:7c:5e:a4:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:85:4D:25:40:C5:5D:AC:7A:C1:14:DC:97:1C:23:B1:7F:E3:B2
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:96:c3:b6:da:bf:8a:49:17:a9:2b:8a:88:b1:c7:fa:25:22:
dc:bc:c1:15:16:e9:ac:ed:7b:27:b4:79:e6:38:c7:90:d8:36:
1b:88:fa:7d:cc:c6:ad:a9:56:d3:8d:77:c6:ba:7d:b1:c3:fe:
92:38:1b:12:01:be:fb:7b:58:80:16:86:56:68:54:50:3c:35:
b6:64:d0:a3:56:74:30:9f:08:d5:91:18:e5:af:24:ac:06:ec:
65:7c:f1:11:fe:44:57:c0:19:4a:b0:c8:7f:5e:2e:6f:1a:e2:
42:56:3c:55:bd:ae:97:59:0c:c8:09:e3:7f:94:72:d2:36:d2:
29:96:96:94:68:0d:35:ab:1e:bd:64:4a:e2:5a:d4:13:81:f5:
42:15:0f:ce:9c:ab:6d:35:8e:ea:06:9b:b1:33:1c:68:24:45:
c8:26:c0:b8:6e:f4:68:65:68:4d:d2:36:d2:e6:53:f1:b9:12:
52:3e:87:34:15:25:fa:f1:b6:c8:d2:82:08:5c:9d:f7:24:12:
6b:e2:69:f4:61:c4:dc:72:ef:73:84:b7:06:6d:66:84:53:f7:
5d:c3:44:5b:c7:55:9e:63:4d:17:e9:aa:f7:ac:06:87:5a:78:
fe:05:74:28:85:df:19:03:f3:1b:f8:aa:69:93:b9:a6:d8:bb:
e9:96:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:04:07 2025 by rpki-client