Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: HbDglQZAJIBDmPZVQHjCSpjpOPeETHrCD43SEXj0j5s=
Subject key identifier: 8F:6C:08:D7:5F:64:DE:58:E5:70:F9:85:9B:72:96:61:DF:68:57:45
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 01987C774C2F86294AEB63505F4294379C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0C73
Signing time: Tue 05 Aug 2025 23:00:49 +0000
Manifest this update: Tue 05 Aug 2025 23:00:49 +0000
Manifest next update: Wed 06 Aug 2025 23:00:49 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: tLYePh6XpaNpfLT+rw2QgyoHLIghi8GeAz4AmpN7spk=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:4c:2f:86:29:4a:eb:63:50:5f:42:94:37:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Aug 5 23:00:49 2025 GMT
Not After : Aug 6 23:00:49 2025 GMT
Subject: CN=8f6c08d75f64de58e570f9859b729661df685745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:05:f2:bd:db:4c:f3:c8:7a:6e:9b:04:c9:
ae:61:dc:cc:00:c3:ab:9a:32:02:b9:db:e2:75:42:
57:b0:ad:6a:49:27:dd:97:f5:35:70:f2:93:ee:ce:
59:88:bc:cc:bb:c0:f9:ee:0d:d4:22:b6:8c:3f:0b:
f5:32:e3:d4:3e:fd:0b:d3:0f:4b:4b:21:52:6e:7b:
26:51:67:8d:81:76:e9:52:23:d1:d3:2d:5c:6c:33:
4e:39:b5:b0:a4:5c:bd:0a:52:9e:19:54:5d:2b:5b:
c1:b5:54:3a:02:50:c3:97:ea:7a:eb:a9:85:19:f1:
5f:49:6a:5f:e3:f9:41:6f:1e:49:78:15:e6:56:12:
eb:29:1c:6b:1f:7f:ea:c9:16:ec:a7:a0:15:d8:04:
b7:c1:8c:be:44:ec:08:64:3e:3a:2c:7b:e6:37:be:
38:ba:43:ef:1b:5a:3d:07:06:9a:56:a8:37:1c:f9:
b4:95:39:d7:9a:93:0c:94:ef:e4:59:7d:a1:48:24:
70:68:35:0c:99:6b:2c:32:b0:3b:49:9e:39:8b:c5:
bf:88:7c:c3:83:d6:af:69:7c:91:96:80:f8:eb:a0:
66:d7:dd:1c:db:bb:83:1b:e2:79:9d:9c:38:5d:ce:
4f:c0:1f:13:84:8c:85:39:37:16:10:01:ed:f5:8e:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:08:D7:5F:64:DE:58:E5:70:F9:85:9B:72:96:61:DF:68:57:45
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b0:da:3b:14:f4:bf:92:3e:b8:59:98:cb:d0:7c:58:72:6b:
d3:dc:3a:53:4c:c0:88:ed:35:5f:a9:b6:53:ec:1c:f0:4d:42:
9f:81:00:6a:59:f3:d7:cd:81:a9:2e:27:79:56:93:06:48:74:
99:4f:97:3f:47:4e:61:ec:a7:9a:73:ce:d3:e0:e6:1c:c3:ee:
2d:ff:a8:27:32:bb:76:2b:1f:df:91:fb:0d:c2:fd:8f:c2:40:
46:2d:3b:bb:f9:f6:e8:12:29:53:34:34:68:5d:3b:cc:48:16:
75:b9:48:32:05:08:b3:81:25:5c:31:2a:0c:e6:ca:2b:25:5f:
3f:d4:74:f6:3b:7f:ce:f3:31:f2:46:1d:32:4b:e6:71:fe:f7:
bf:ce:3a:42:5c:0a:86:c9:fd:10:6b:a0:d3:6a:d8:46:9a:c2:
e6:48:80:91:c2:07:71:65:4b:e9:6c:73:80:7a:37:58:00:7c:
af:b6:0e:fe:bf:69:84:11:32:cf:39:72:8c:a5:a8:b4:b7:79:
d0:62:e2:5e:0c:3a:4c:33:19:3c:40:7f:cb:cd:a5:4e:23:b0:
4c:c8:0c:3e:7f:89:89:53:cc:64:b6:43:83:a7:cd:69:16:25:
72:49:f7:39:10:5a:b8:5e:d5:cc:c2:7c:51:97:03:d4:0e:b3:
4a:0c:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:47 2025 by rpki-client