Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: WKJ4/RLzyJmLVCsQF4PuKvT2AB4z95UwE+3Bou9HzxE=
Subject key identifier: 4E:B7:58:EC:39:1D:87:B4:64:D9:47:0B:19:C8:73:7F:10:58:62:E1
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 01967D20CFE39094228768B7944FCFB9FB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 16:00:24 +0000
Manifest this update: Mon 28 Apr 2025 16:00:24 +0000
Manifest next update: Tue 29 Apr 2025 16:00:24 +0000
Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: vgtqdCX6qRcvlfJMYcCUjVouAjVD0CKMBY+bbAjlK48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:cf:e3:90:94:22:87:68:b7:94:4f:cf:b9:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Apr 28 16:00:24 2025 GMT
Not After : Apr 29 16:00:24 2025 GMT
Subject: CN=4eb758ec391d87b464d9470b19c8737f105862e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:64:ba:bf:b3:07:93:84:84:cc:6f:9b:6c:
c8:2d:63:43:d0:09:51:7b:00:9b:39:e4:ae:8b:b7:
b6:76:b2:43:c7:a7:9b:3f:16:58:d1:d5:a2:ed:8d:
f2:c4:80:46:b7:26:7b:09:fa:a1:4d:ed:e6:3f:65:
62:61:25:12:5a:ff:fa:1a:54:36:b3:19:8b:cc:2c:
8b:e0:3c:2d:e9:bd:5a:89:3e:4d:ca:d7:9f:f8:db:
46:d0:d1:af:16:71:04:b8:75:6a:03:1a:08:61:38:
e4:8c:b3:a2:3d:54:10:21:70:e3:25:0d:b6:29:dd:
1b:49:20:70:ad:8f:85:58:5f:ea:42:7d:38:f3:98:
59:76:97:85:c3:3d:98:27:f1:c3:f4:d1:c2:94:22:
56:e3:38:de:47:36:76:96:2d:3e:a6:4a:b1:d5:d8:
44:da:c0:bd:2b:a9:3a:89:b8:ec:ec:73:19:83:2e:
73:11:36:e4:3f:a9:f4:64:44:85:da:3f:25:4a:d5:
2b:7b:e8:47:1a:27:7b:68:1f:37:d9:4c:fd:22:22:
a9:8e:07:7f:b7:a0:24:b1:8b:6d:fd:c5:62:3a:78:
ed:64:29:75:e4:04:2b:7b:9e:d6:ae:57:be:7a:90:
99:3b:dc:d4:3b:9b:fb:cd:8c:d1:1a:b2:54:a3:a6:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:58:EC:39:1D:87:B4:64:D9:47:0B:19:C8:73:7F:10:58:62:E1
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:a8:00:e5:ff:60:6c:2a:9b:85:fc:e6:60:72:1c:87:3e:
bc:2a:56:74:52:66:27:bf:2e:dc:32:00:d9:d7:45:8b:36:48:
03:93:16:48:ba:49:b3:6d:32:9c:e9:1f:16:e9:ce:69:94:5b:
73:e2:c5:b3:6e:37:2a:20:6d:d1:3d:c9:4c:6b:6e:b8:01:dc:
81:1c:ee:3b:41:81:4f:0f:c6:9d:3f:a7:79:01:fc:41:c5:e4:
e4:d0:69:e7:47:2c:9f:8b:3b:01:5b:08:a6:e8:05:05:3f:f2:
98:c1:bf:2c:4d:95:b8:3b:47:02:84:72:e5:01:91:60:91:a1:
a1:9f:5d:ae:af:82:f9:0b:e3:81:f0:24:68:cb:e7:7c:41:b9:
12:25:3c:ba:ba:68:72:da:f6:5d:08:16:71:c5:ab:08:8f:64:
5f:5d:24:92:36:26:43:76:55:b4:69:e5:a7:41:1b:ad:e3:b8:
3e:78:b8:ce:6c:17:70:41:62:a0:c7:b4:3d:cb:30:c2:07:8d:
be:55:63:09:be:75:f8:9a:2a:79:5f:88:3b:91:d3:7a:cd:92:
77:bb:36:15:99:bf:11:e7:7c:63:e6:e9:8b:97:fa:1b:b8:f4:
38:6d:be:8a:35:5b:ea:7e:63:fa:75:d2:22:e9:1e:36:e9:4a:
df:a3:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:46:57 2025 by rpki-client