Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: jUN2efRegpxi3rPTtndu96oX/1X1hggR82VyNq8NITE=
Subject key identifier: 5F:CD:94:0D:20:CF:89:D1:5D:4B:D6:42:14:D1:D9:CC:65:32:B3:CB
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 019768BC13FC8BFE9E7BFEED15305B8B38AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 10:00:45 +0000
Manifest this update: Fri 13 Jun 2025 10:00:45 +0000
Manifest next update: Sat 14 Jun 2025 10:00:45 +0000
Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: A537XoPYLsEOgDFkEjYx/hST3GSqGjpN8KJh3/ESUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:13:fc:8b:fe:9e:7b:fe:ed:15:30:5b:8b:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Jun 13 10:00:45 2025 GMT
Not After : Jun 14 10:00:45 2025 GMT
Subject: CN=5fcd940d20cf89d15d4bd64214d1d9cc6532b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:b4:82:07:7f:2c:5a:06:92:c5:9e:68:fb:
65:d7:5a:dd:3a:68:7d:3a:c1:22:25:6c:2d:48:87:
4e:b4:99:5b:bb:ec:a5:f0:f3:ab:ea:49:6d:c8:be:
fe:ca:d7:bf:88:32:96:fa:91:d4:5d:a7:9b:6a:bb:
75:37:19:29:16:e9:b3:ef:9d:39:79:a7:37:8e:38:
8f:d1:2d:9b:e3:64:46:cb:3c:98:8b:f4:fd:3f:b3:
8c:cf:08:2c:49:d1:7e:1d:24:6c:b4:b5:32:9a:eb:
37:c3:00:c1:4f:35:44:55:4f:ee:81:7f:50:2d:14:
d5:1b:73:22:5d:c3:66:a3:29:a8:42:e3:5a:6d:e4:
d4:ad:eb:a3:62:c6:97:2e:a6:a5:b8:ae:6e:66:e2:
0d:c9:82:74:37:5c:74:65:56:cb:98:d5:75:a1:d7:
38:b3:91:c6:be:b9:49:aa:49:de:c1:9e:0c:2a:77:
62:5e:bd:f0:24:3d:e6:5c:1f:86:a2:00:f7:f7:84:
64:1f:22:88:c9:b6:33:51:9e:ee:97:92:af:12:38:
06:8a:ec:19:b8:8e:d6:02:04:a7:02:50:63:1b:63:
4e:90:69:15:bb:46:38:32:1a:0d:2b:1e:33:c2:74:
2e:8f:f3:cf:47:d1:ae:27:b1:b1:41:9a:bd:f0:6d:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:94:0D:20:CF:89:D1:5D:4B:D6:42:14:D1:D9:CC:65:32:B3:CB
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:b9:87:52:8c:51:27:aa:01:da:26:01:6f:54:7e:b7:5b:
25:21:1a:54:8c:c2:85:79:da:88:18:39:97:41:61:b7:f7:78:
a7:b2:c1:65:6f:55:79:5c:81:7e:3c:30:36:ce:8e:f1:a5:ab:
e6:96:c5:d7:80:67:d4:d6:3f:71:75:cf:85:6d:d6:21:98:10:
8b:68:8b:16:0c:21:99:c3:35:67:06:69:95:13:6f:3d:50:0a:
98:11:65:5b:f0:6b:a9:ac:22:21:5e:a6:8a:4a:17:09:47:07:
5a:e5:54:32:b9:1d:18:7e:64:33:2d:7d:4e:9e:83:3a:e9:5a:
6d:03:5d:f6:33:4b:1c:62:4d:d5:98:a8:8d:d4:2c:64:4d:77:
47:b8:ba:f4:6e:a7:49:09:0a:fc:cc:6a:3a:dd:3d:1b:36:09:
1f:f7:fa:b5:2f:b6:55:65:85:d9:f4:6d:f5:75:e9:f2:3c:7f:
04:ca:a4:37:65:98:62:ff:e5:38:e2:76:b7:8b:fe:f9:5f:67:
7c:d1:b0:52:01:de:b2:a8:01:73:4b:05:11:cb:a1:df:26:87:
78:e4:b2:a6:c2:83:58:d8:6f:ec:d9:5b:e1:3c:da:a2:d8:71:
1f:e1:1d:ad:39:51:ae:58:3e:c5:2e:17:b8:78:b2:d9:d8:b4:
0e:0d:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:23 2025 by rpki-client