Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: 4IDhJ30bBukVX77FWtIAh2/tK24FerorF6BgzolF/WA=
Subject key identifier: 53:86:29:14:0A:D7:8C:5A:90:15:B7:A3:1A:44:AA:11:AD:D4:90:36
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019881D4CAC03C4A03AF31936D1D32B7CD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 0413
Signing time: Thu 07 Aug 2025 00:01:03 +0000
Manifest this update: Thu 07 Aug 2025 00:01:03 +0000
Manifest next update: Fri 08 Aug 2025 00:01:03 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: fKYl8PqmYL2r/YVdSk4INmF1jsFh6ZT395Roa8Je3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:ca:c0:3c:4a:03:af:31:93:6d:1d:32:b7:cd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Aug 7 00:01:03 2025 GMT
Not After : Aug 8 00:01:03 2025 GMT
Subject: CN=538629140ad78c5a9015b7a31a44aa11add49036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:95:9c:97:2e:6c:43:2e:c0:de:b7:3c:13:
22:1d:29:79:d4:43:75:27:44:d6:4b:8f:fa:56:76:
ae:29:d8:a8:f9:b1:0b:a5:c4:00:e2:00:b3:a6:82:
51:b3:9d:78:46:7c:f8:18:bc:ac:db:3c:64:c1:7f:
02:47:c6:26:e9:4c:1e:45:21:60:ea:26:8a:16:6e:
7c:1b:5d:fb:ff:5c:63:8d:a2:d2:27:eb:0a:62:99:
71:8c:9d:90:b8:54:b1:9d:bf:8c:18:8f:97:ad:eb:
3c:ad:6f:b6:ae:41:c2:96:4a:e8:6f:ba:e6:f6:f3:
15:e3:0a:2e:10:f6:9e:fc:62:2a:b2:6c:ce:6b:de:
e4:d6:5b:65:ae:80:c1:a3:d6:15:78:89:72:29:43:
e5:c3:07:37:81:fb:2a:df:df:8d:2c:f8:9f:51:0b:
4a:6f:4c:2c:50:e4:42:cf:a4:62:00:7f:61:6b:76:
90:a6:5a:df:a5:bd:32:9e:34:13:15:3a:83:07:9d:
e3:bf:d9:ad:2c:f9:88:9a:fa:4b:b2:85:b7:7f:ef:
d4:15:21:b1:ec:e4:88:50:bc:bf:67:26:32:3d:58:
2d:bb:8b:b4:0d:16:1e:68:75:8f:fb:2f:e3:6d:81:
02:3b:20:af:36:79:91:18:80:57:01:ea:7a:22:e3:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:29:14:0A:D7:8C:5A:90:15:B7:A3:1A:44:AA:11:AD:D4:90:36
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:4c:b1:62:ca:08:49:17:e9:7d:b2:41:d3:19:bf:6d:07:
e7:55:ca:4b:6f:31:1e:b7:a3:b5:a7:31:0d:96:7b:d9:ee:cc:
d6:5c:35:cf:71:ad:92:2f:17:d8:5e:2f:5a:18:31:3b:ae:2a:
e1:66:2d:cc:6a:2e:f1:ba:07:f7:c9:3a:b7:ba:0f:02:86:46:
fe:0b:32:af:63:37:d8:20:da:ad:8e:4b:85:a9:0c:ef:9a:ef:
3d:2a:b2:bc:2a:b3:b9:39:c4:93:72:ff:c6:3c:44:6f:37:9b:
f3:e0:6a:5c:f6:2d:fe:a7:bd:12:ef:ec:c0:65:34:f3:f8:a3:
d9:61:28:2d:8f:4f:26:72:ba:e3:07:79:4b:1c:32:48:bb:ab:
e2:f4:9f:88:68:46:5f:08:c3:cd:b0:04:2c:2e:df:b2:83:8b:
b1:f7:08:69:bd:41:63:30:05:0b:32:c5:04:36:f8:76:1b:61:
69:af:ac:68:14:dc:84:c3:9b:f1:dd:ef:22:80:93:9d:72:6d:
6f:b4:c5:cd:7e:16:4e:c0:93:ba:74:4b:9f:b7:82:80:ee:af:
16:48:9a:31:d3:4d:c4:a6:20:2a:61:28:17:aa:9d:2d:9c:71:
6e:b9:cb:86:62:18:85:37:1b:7f:1d:d2:81:ce:c7:9b:4c:0c:
e5:34:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:06 2025 by rpki-client