Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: DIRQg3D3emA5UTiEvjOGdpp/KEBAKpfc+5wJAMlz6Ws=
Subject key identifier: EE:CC:E5:49:FC:50:BE:8B:44:26:66:50:D9:37:FA:B5:5C:EA:52:FF
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0197684E72F6E70811EB200E6CFF51580DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0BE4
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: uUL3J27yp7IlLJCuTVYPzRQnT3fARNRC3PKHqndNFlk=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:72:f6:e7:08:11:eb:20:0e:6c:ff:51:58:0d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=eecce549fc50be8b44266650d937fab55cea52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:f2:db:47:00:d0:ce:b0:ba:8f:bf:e6:d1:
f7:ea:1b:c9:3e:e0:0a:74:52:a3:02:65:b3:cd:05:
f7:c3:08:b1:a2:a0:0e:9e:c7:e6:39:05:ff:80:f4:
6e:a7:c4:7e:31:90:ca:4e:ff:51:d9:a1:b0:c0:d3:
3f:2c:63:cc:d1:1f:2b:fe:95:99:4a:4b:e4:f4:94:
e2:2a:6b:85:b5:73:24:07:ee:a5:4e:48:58:97:fa:
cc:a7:9d:09:08:17:0c:c8:70:08:67:bd:6b:27:c3:
9c:dc:8b:7d:5b:8a:95:b2:22:2c:24:ca:9e:06:3d:
3b:25:b9:3f:0e:b0:f7:02:4b:db:71:c3:a2:d5:a9:
5f:b9:8a:01:e0:49:73:38:c2:7c:9b:98:0b:9a:fc:
ac:a5:e5:7c:0c:de:bb:ca:57:b2:b1:e6:53:79:06:
b9:9e:a8:fe:4f:33:07:06:d5:f6:3e:08:f8:96:48:
6a:21:66:19:47:1c:5c:4f:e9:f5:7f:84:e3:27:be:
b6:f3:6c:36:eb:c8:77:cc:6f:73:93:28:d1:78:54:
e9:2f:24:ac:d1:d8:8d:b5:e6:66:90:47:e2:3b:f5:
a2:27:ab:00:41:c9:e2:fe:63:bb:68:62:17:8a:ae:
93:f1:55:a0:6b:4e:37:42:99:e0:ea:21:fd:13:ff:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:E5:49:FC:50:BE:8B:44:26:66:50:D9:37:FA:B5:5C:EA:52:FF
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:ff:98:d2:9b:ec:ee:40:35:af:2a:81:3d:a2:46:58:b4:
2c:40:3a:c2:3b:8e:c8:ea:5c:a4:20:c6:e9:ee:74:32:a9:5e:
ca:0b:ff:d7:65:f7:c8:b5:6f:c0:48:2d:e8:ee:d1:32:ff:8f:
0c:91:10:46:0a:b4:d4:26:41:03:3e:76:cf:80:f8:ee:1b:e4:
0a:83:27:d6:8f:d7:39:0a:ec:00:2b:1a:4f:2c:fc:47:ea:1d:
07:8e:70:43:71:51:16:57:0d:9e:eb:ad:bc:4f:62:26:f0:81:
b0:93:98:d7:05:be:44:af:5f:ce:77:c5:6a:96:9c:18:6a:3f:
5e:c5:ea:83:56:b9:32:79:a1:91:41:e2:c7:97:e9:1e:6f:e2:
c5:60:81:fc:ce:c3:56:2b:9f:91:10:e6:33:6b:08:b7:85:fd:
22:2e:65:cf:f3:69:ce:00:8e:94:97:70:df:de:ac:b8:5c:71:
80:ac:39:ac:94:44:be:4d:87:0e:6d:95:9a:2a:63:00:fb:36:
46:37:e3:88:2b:9c:17:e1:c9:0b:bb:b2:10:84:0f:94:98:5e:
dd:7a:b4:1b:00:30:1a:31:a5:19:3b:0b:46:49:cf:0c:1c:c6:
12:3a:da:63:aa:9c:ab:be:7c:2d:f6:33:79:ff:71:8e:22:2b:
a4:ba:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:01 2025 by rpki-client