Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: 7cJP4YXYH+0266GBqv4/RaAT/+hRk5tCc0F8Jo8eVRI=
Subject key identifier: EA:B1:12:F8:C8:2D:6B:66:FA:56:11:A7:C3:8F:4C:71:57:9F:C3:23
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 01988DD9685E26BDE942C783F892A20029D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 1620
Signing time: Sat 09 Aug 2025 08:01:32 +0000
Manifest this update: Sat 09 Aug 2025 08:01:32 +0000
Manifest next update: Sun 10 Aug 2025 08:01:32 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: lqpi0IPFLqIm41UwxYpJd48wAlTlxdPRuzHn6FJvW1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:68:5e:26:bd:e9:42:c7:83:f8:92:a2:00:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Aug 9 08:01:32 2025 GMT
Not After : Aug 10 08:01:32 2025 GMT
Subject: CN=eab112f8c82d6b66fa5611a7c38f4c71579fc323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:9d:1e:3c:75:0f:5c:5b:38:9e:34:9a:4a:
50:89:94:c4:17:52:b8:81:5a:07:85:cc:90:05:06:
bf:d0:5f:e8:6c:af:cd:15:78:17:42:ae:bc:cb:e2:
aa:b4:75:4c:af:15:34:64:3f:1b:52:2e:5a:a3:92:
7e:83:10:76:95:3f:73:36:8f:a5:19:11:d7:17:b9:
97:db:6f:4a:72:3e:ef:ed:50:28:c1:dc:c5:8f:ac:
57:cf:1f:b1:39:93:4d:19:0f:23:d7:44:c3:db:5e:
b8:04:8a:c2:03:88:30:24:6d:95:ef:be:41:da:87:
55:f7:72:0e:ac:47:cf:23:3c:59:14:d7:25:6e:d0:
a1:6b:db:6e:10:ff:1c:ee:73:45:7e:92:90:ef:5e:
27:74:1c:bb:b5:9e:6c:64:a7:d6:a1:8a:3b:58:d0:
ee:c2:ac:4c:42:76:01:b7:19:1c:f4:23:3d:3a:03:
90:93:0c:7a:0a:e6:1c:e5:fd:37:9f:dd:c8:4a:c3:
6b:12:d1:6e:30:32:51:c7:43:7e:37:fe:55:18:c8:
cd:bb:27:80:4d:07:65:0c:28:37:11:bb:a6:93:b1:
19:d8:b6:6b:6f:09:c5:e9:6a:47:9f:e3:32:e1:58:
76:12:1d:3e:3a:d5:14:64:81:4e:c9:e9:9e:0f:de:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B1:12:F8:C8:2D:6B:66:FA:56:11:A7:C3:8F:4C:71:57:9F:C3:23
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fd:a0:c5:64:86:89:64:17:c4:26:0f:93:09:46:94:51:d9:
ad:26:fa:7a:bc:b1:a6:95:8d:81:89:ab:43:82:bc:76:0c:31:
27:0d:ed:9e:da:16:a9:0f:f6:e4:4f:4a:4c:be:ce:a1:02:92:
f8:fa:16:67:ae:79:6b:73:a3:37:28:41:af:65:3d:07:2d:da:
db:ef:b1:35:84:77:ec:cf:7b:99:90:70:fa:0a:05:3e:6d:84:
13:96:7e:a1:0c:ca:7f:d4:5f:6c:02:cc:7a:2b:07:83:5c:50:
ae:12:21:fa:c4:14:14:cf:9f:4e:c5:10:64:77:60:77:92:cb:
54:d3:aa:35:27:b1:d4:2b:6c:7e:37:c0:52:94:7c:47:33:4c:
85:97:9b:fa:b1:01:bc:2c:d9:0f:b2:53:98:bb:03:33:8b:d8:
36:f8:66:e5:df:17:a7:86:3f:88:57:54:e6:0c:01:80:cb:56:
45:f0:07:65:ec:6e:e5:5f:bb:1b:64:d3:b5:cc:a0:54:d8:db:
16:2f:f8:03:e2:05:37:c0:32:91:aa:38:66:e6:6e:2f:db:d7:
bd:3c:d4:ec:1b:54:53:ae:e8:8b:a4:92:eb:a6:29:f8:f4:a8:
3a:46:9b:d3:af:c6:a2:cb:b5:f8:2d:50:ce:0d:43:2f:f0:7d:
d0:9f:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:25 2025 by rpki-client