Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: tgEj/0qpk/EjEHz7alE0ssaR0BOv1z+hpB+xi3ZylfM=
Subject key identifier: EC:C8:5A:27:22:0B:FD:C2:8A:3D:49:74:FF:B9:1E:4B:40:90:0A:80
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 0198A196A588F1B1DD33FDBE6B61347CD5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 162B
Signing time: Wed 13 Aug 2025 04:01:01 +0000
Manifest this update: Wed 13 Aug 2025 04:01:01 +0000
Manifest next update: Thu 14 Aug 2025 04:01:01 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: Tqb0C4m4Xmc4y3WeGcqyn3FLwpwgqWkwMFJZ9aBOXd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:a5:88:f1:b1:dd:33:fd:be:6b:61:34:7c:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Aug 13 04:01:01 2025 GMT
Not After : Aug 14 04:01:01 2025 GMT
Subject: CN=ecc85a27220bfdc28a3d4974ffb91e4b40900a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:8b:6a:46:92:34:e9:0b:6d:45:5f:31:5a:
85:2d:eb:4b:88:6e:cb:3a:75:f4:03:c2:5a:df:fc:
b0:11:d1:fe:86:21:77:a7:31:e9:05:7e:6e:3b:30:
2e:36:5b:de:2b:df:e3:76:97:2d:39:10:51:ea:0a:
07:20:e1:a8:2f:d4:f0:89:0b:5a:41:f3:e1:48:d2:
ae:0c:0b:0c:87:22:2f:ef:58:d0:7b:bf:47:13:c3:
40:e3:ef:d0:e8:09:07:ff:d8:49:2d:be:01:c2:ff:
1c:99:ea:f7:fc:3b:4a:66:dd:39:58:a3:9a:88:87:
56:d1:3e:f1:09:10:6e:ed:d0:47:d7:d2:01:81:bd:
18:f6:1b:fb:a6:fa:6d:6f:0f:76:b7:8d:d4:3b:73:
e1:f9:2f:f4:c8:a2:ac:76:b6:31:30:e3:8f:6e:2f:
f6:e3:92:61:87:62:2c:60:13:81:49:6c:cc:d6:c5:
7d:9b:c8:7c:28:a0:b0:6e:3b:c7:aa:58:a0:c9:87:
b4:57:cd:b6:72:86:01:8b:fb:82:f2:f0:95:55:ff:
75:70:39:f5:59:b8:e7:09:63:08:e7:6e:1f:02:3f:
bf:53:a1:4f:30:a1:3c:e8:cc:ab:38:57:91:0b:50:
e8:72:d7:b3:6d:17:9b:5c:fe:41:47:14:d8:f3:93:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:5A:27:22:0B:FD:C2:8A:3D:49:74:FF:B9:1E:4B:40:90:0A:80
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b9:10:c0:c4:52:1d:26:65:e1:25:aa:26:9c:33:31:2e:64:
21:16:c8:31:87:ba:aa:f6:ba:18:b7:83:dc:54:41:b7:88:6f:
c7:7d:91:ae:74:d9:64:82:9b:83:40:f3:a1:d2:b7:52:4e:c2:
2b:34:96:41:02:9e:10:f3:80:82:2a:51:75:a9:91:40:38:36:
de:02:ec:30:e4:a1:ee:26:2d:9f:d5:61:b1:e6:88:ce:06:46:
a3:03:c8:cd:53:75:c3:1d:dc:25:82:75:0c:c3:1f:44:36:86:
14:ce:0f:02:5e:de:fd:7c:82:6a:28:22:4d:eb:90:1c:09:fb:
92:9f:fa:3b:cd:2e:e0:db:82:3a:aa:0f:8d:0c:3a:0c:54:ba:
d7:8e:69:27:c0:4d:88:c8:d0:38:0c:52:e7:e4:a0:7b:b1:54:
fa:66:9a:25:c4:db:66:b6:f7:24:f5:a4:12:1e:7f:c0:ec:d6:
ca:3d:b8:05:27:d6:0e:e0:54:20:83:2f:b0:9d:78:80:e0:9c:
8f:3c:3b:61:8d:9d:3d:53:1c:52:47:0a:12:ce:70:3a:19:4a:
e1:0b:bb:28:70:15:73:fc:83:fd:2b:2b:31:3b:e6:29:a4:05:
4b:10:82:5b:9e:46:50:79:bf:f7:95:8f:fc:52:3b:fb:45:fc:
65:6f:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:59:21 2025 by rpki-client