Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: qkJ8QOj7Is/GyQUB5AxSby+irI6tQoUIHWdwPUmGKrQ=
Subject key identifier: BA:2D:38:AD:27:7F:0A:C3:5F:C5:DF:43:9E:19:AB:0D:D4:DC:9E:DF
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 01974967FDE2F5C0B26EF1CC6FA1A7941E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 08:00:41 +0000
Manifest this update: Sat 07 Jun 2025 08:00:41 +0000
Manifest next update: Sun 08 Jun 2025 08:00:41 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: KUPb18jq/rb5QcIdcExIuOKCYDHalUsylzMLyw6q1Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:fd:e2:f5:c0:b2:6e:f1:cc:6f:a1:a7:94:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Jun 7 08:00:41 2025 GMT
Not After : Jun 8 08:00:41 2025 GMT
Subject: CN=ba2d38ad277f0ac35fc5df439e19ab0dd4dc9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:5d:67:ee:c3:cb:3b:c8:30:28:2e:95:55:
96:6f:af:0d:38:cd:7c:ea:36:cb:98:42:0a:6f:fa:
ef:2f:10:fc:07:65:fb:2d:66:1d:4c:57:d8:5f:85:
a9:58:3c:06:1a:4b:05:09:01:57:97:b2:06:96:90:
d6:d3:0c:15:2a:1c:91:e0:8d:6d:36:ba:87:9b:0d:
37:1d:33:01:a0:cf:e3:c7:7b:b8:2d:37:ed:0b:54:
02:8e:ef:65:e4:6a:66:cf:25:69:0b:a4:d2:53:12:
31:c6:98:6f:43:fe:78:7c:84:51:6b:c7:62:2f:9b:
e6:0c:9f:db:ab:3d:e6:55:3f:c1:7f:64:5e:55:3d:
51:e4:33:f0:45:13:c3:e6:6d:2c:63:35:f7:e1:7f:
72:9f:c3:ff:b4:31:26:8c:cb:40:93:2d:66:d0:47:
35:50:ff:64:31:b9:7c:ac:58:b9:18:e1:0a:46:fa:
59:26:04:de:8a:70:92:ee:14:b0:98:12:0b:c9:e3:
4e:d6:68:5c:ec:c3:4e:45:e8:27:16:8a:7e:7d:fa:
27:0d:09:0a:3c:00:40:04:3c:d2:c9:e3:5e:48:a9:
84:20:d3:22:1a:d9:89:15:9b:26:ea:3b:63:2b:c1:
37:3c:f3:64:38:03:b1:f0:60:2e:74:ca:8d:37:7d:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:38:AD:27:7F:0A:C3:5F:C5:DF:43:9E:19:AB:0D:D4:DC:9E:DF
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ed:45:63:79:95:da:e6:1e:17:b8:2f:29:99:e8:81:d6:70:
aa:76:11:e2:71:25:4d:ad:98:72:e9:dd:c7:54:9f:93:bb:4b:
de:8b:b3:76:3f:b3:31:e5:7a:07:b0:48:34:8e:c9:23:ae:4c:
e7:af:42:cf:49:4b:bc:d0:72:bb:c9:81:ef:fc:d6:10:18:c1:
00:1d:54:a3:c1:6d:f3:8d:2b:06:cc:0f:75:ba:54:55:f3:80:
42:85:72:90:e6:09:45:cd:fa:ba:f3:f0:06:86:66:29:67:dd:
65:6f:2e:84:28:77:bd:a7:f1:30:84:20:88:d6:24:bb:ae:0b:
f8:93:7d:e6:74:4d:ce:f5:d1:7c:c7:b1:fd:21:f2:e5:da:31:
41:7e:2a:47:80:17:c7:d4:aa:92:d7:42:f8:43:63:71:fe:ec:
ea:f8:85:c2:15:79:8d:08:48:28:3b:fe:99:6f:5e:14:21:46:
c7:72:25:ad:01:15:26:5d:15:27:6b:62:8c:89:2f:c4:3b:63:
ce:8d:c2:a4:dd:23:22:60:09:c1:54:41:cb:bd:16:08:f0:40:
5a:9e:d8:eb:7d:15:0f:a4:ec:d3:37:8c:17:d7:13:08:65:17:
62:07:93:25:46:01:93:36:91:61:e0:f0:e2:7f:49:da:0c:56:
5c:a6:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:05 2025 by rpki-client