Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: fDjbXWed//9fZqY0MUTvGNDXw7+lXYf/4sorneQQ/O4=
Subject key identifier: E4:D2:DF:62:9D:CC:E7:79:87:4C:93:5C:F2:6A:0A:40:9C:04:6F:08
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 019873747B58602694DBFEAC607948AEE169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 030B
Signing time: Mon 04 Aug 2025 05:01:10 +0000
Manifest this update: Mon 04 Aug 2025 05:01:10 +0000
Manifest next update: Tue 05 Aug 2025 05:01:10 +0000
Files and hashes: 1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: XojofptWWigLyYJ3XDv4XgSsAfFFd/b8wo9Hu6NTTMI=)
3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:7b:58:60:26:94:db:fe:ac:60:79:48:ae:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Aug 4 05:01:10 2025 GMT
Not After : Aug 5 05:01:10 2025 GMT
Subject: CN=e4d2df629dcce779874c935cf26a0a409c046f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:03:ac:3e:1f:7e:a4:f7:8f:95:d4:b6:0f:
c8:a7:a5:c8:77:2f:6f:02:12:c0:24:0f:51:d6:ee:
69:e2:e4:43:98:ac:a4:57:a0:88:f1:5f:99:93:28:
d4:3e:33:f6:41:4f:5b:8a:66:b4:0e:f0:eb:8d:91:
e3:c8:36:db:80:a9:ab:a1:a3:b7:3f:16:52:1a:6e:
58:45:45:91:eb:53:15:3e:aa:39:02:55:62:d7:02:
19:b9:ee:09:ec:19:e6:c0:84:e1:d7:4d:f5:54:5b:
84:c6:63:a9:b9:23:6a:c1:eb:f5:8d:ef:04:fc:24:
ca:c3:76:93:c2:93:1f:83:56:ce:ef:0a:d7:fe:06:
d1:d2:34:87:b0:9b:75:50:f1:b7:98:26:13:f3:96:
53:9c:71:d1:ba:f3:ac:aa:9c:47:95:8c:6e:8c:52:
c8:4b:90:40:55:fd:ee:d3:a1:08:f1:26:11:c2:f8:
8b:17:97:2a:f3:ad:e9:21:cb:03:45:13:26:e3:bc:
9d:35:2d:62:3a:98:26:d4:ea:61:02:cb:c2:e3:1e:
6f:3c:ce:65:71:8f:24:33:8a:a5:7a:38:02:3b:e5:
85:f9:20:b5:02:8a:ed:a6:47:6f:3e:c3:f6:17:db:
0a:b5:b8:c4:ed:a0:3e:94:72:6f:59:42:6b:e4:00:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:DF:62:9D:CC:E7:79:87:4C:93:5C:F2:6A:0A:40:9C:04:6F:08
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4e:7c:9d:bf:50:cd:d7:1b:ef:bc:9b:ae:8b:b1:ab:d3:25:
af:dc:c2:25:de:aa:1e:00:d2:af:40:d5:a6:11:cd:f6:bb:42:
52:e9:a9:69:ec:35:a6:1e:6b:f4:39:2b:77:9b:b1:b5:0a:de:
26:c3:d8:ba:d4:1b:7e:8a:00:0f:c6:6a:13:02:b7:9a:00:02:
c9:86:e5:32:ff:bb:b8:3e:9b:a4:13:96:4b:36:08:3c:fd:6e:
62:85:4a:95:53:b3:5c:25:b1:c6:a2:8b:6e:ee:6d:97:48:1d:
fb:cd:5e:84:99:04:3b:b8:1b:f1:21:db:f8:14:ba:74:07:8a:
13:14:e6:9a:ba:b3:50:58:e6:6b:04:84:83:d4:a8:58:e3:28:
0c:59:2d:8d:72:54:ca:70:58:b9:53:6f:0a:d9:e4:f4:3c:b7:
5e:4f:3c:09:96:b8:56:56:98:50:51:ec:42:e0:26:09:0f:fe:
db:e7:6a:b8:3c:43:5b:70:cc:02:b6:3b:86:d9:85:60:ac:56:
78:84:ef:08:24:39:bb:6a:5c:ce:2e:a3:d3:ac:b9:90:57:5b:
b3:13:c2:42:0c:fe:f3:43:1b:cd:de:df:a5:de:10:42:e5:80:
86:43:24:0e:bb:69:12:be:93:a8:0c:ad:3b:ef:92:df:64:c7:
da:ff:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:42 2025 by rpki-client