Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: 95ylq+0AOu5EpBxDIqA8oH2zu7CBr9I4tFCs8IHmuN4=
Subject key identifier: 88:FF:29:64:64:ED:69:B2:C7:F8:1E:20:CE:E9:0C:A2:B2:07:01:85
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 01976C2ACA47F9176DF5F6B71A0989E81E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 02:00:32 +0000
Manifest this update: Sat 14 Jun 2025 02:00:32 +0000
Manifest next update: Sun 15 Jun 2025 02:00:32 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: rzMTT+l6Y1PVbmnTmL00R3972jKsmfOAyG45YRP6YEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ca:47:f9:17:6d:f5:f6:b7:1a:09:89:e8:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Jun 14 02:00:32 2025 GMT
Not After : Jun 15 02:00:32 2025 GMT
Subject: CN=88ff296464ed69b2c7f81e20cee90ca2b2070185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:fe:cf:77:fc:85:0a:31:22:9b:2b:ff:a4:
6a:a3:90:40:f3:2c:a2:c3:d0:99:b5:0f:6b:e1:22:
f4:3d:c9:d4:fc:18:a4:b3:3a:14:36:c9:09:8c:67:
d6:2f:1c:cc:8b:08:a8:35:0d:cb:e3:82:43:1a:e1:
32:c5:6b:9f:e2:30:42:30:93:8d:70:58:45:c6:c0:
8d:ba:6d:4e:10:60:04:96:08:74:40:4a:79:52:c2:
2a:8a:2e:92:68:3c:d4:e1:2a:84:f6:84:23:dc:22:
d1:c2:3b:a7:e3:a0:62:6c:31:03:33:8b:95:ba:f1:
2c:96:34:6e:0e:9f:0b:0d:fb:c0:81:45:50:7b:7f:
ba:2a:90:28:7d:f0:37:7e:aa:d8:71:3f:79:2d:38:
e8:5b:d4:72:ed:7e:e8:eb:16:d5:ae:6f:5e:12:a3:
17:3f:05:9f:46:e7:27:9a:5e:36:b1:84:2d:6c:37:
41:3b:64:2e:cc:1f:98:6b:1f:61:fa:7a:19:c9:39:
92:44:86:63:b0:e4:f9:8b:36:5a:71:9b:26:c2:88:
4a:9d:82:ca:6e:e1:e0:67:b9:44:9a:08:70:45:38:
3d:91:46:82:91:b2:a8:8d:d1:39:7d:02:89:17:94:
ac:e0:fc:35:49:ef:5c:b4:d2:22:18:df:c8:8d:e2:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:29:64:64:ED:69:B2:C7:F8:1E:20:CE:E9:0C:A2:B2:07:01:85
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4f:f4:0f:d3:45:f1:05:6c:19:06:93:91:6d:25:26:9e:33:
d3:d9:ab:88:c7:1b:57:3d:e3:a4:4f:2f:95:9d:5a:53:c8:fb:
52:04:12:ca:6e:4b:5b:ac:55:52:be:1e:e5:c5:21:2c:3d:de:
ba:48:b5:6c:d8:a8:c7:4e:cd:4b:fe:ae:a1:ad:8f:cd:38:08:
37:aa:75:b7:62:ca:be:82:3d:58:33:fd:a6:0c:b4:4b:92:1e:
ad:be:91:da:9e:aa:03:5f:43:7a:ac:5f:a2:1d:cf:60:4e:ee:
9a:14:da:2f:93:f7:ef:39:14:7a:3b:3c:ef:50:a9:8f:67:cf:
e2:ad:d6:c3:36:c6:0c:74:ed:e9:aa:4c:2e:06:20:dc:bf:9d:
95:7f:d6:c3:14:cb:c9:ee:38:91:3f:f6:5f:c9:80:ce:6d:5c:
e5:9e:3d:19:9d:b2:3c:68:b4:0d:cd:05:6c:84:5c:f7:d4:b0:
22:b0:63:dc:dc:2f:e3:19:b7:c6:87:55:55:3f:e6:6e:75:ea:
f2:96:cb:ba:c8:26:97:5c:df:bb:cb:1a:86:9d:57:e9:2b:ac:
f4:6f:85:3a:90:50:38:08:de:3b:bb:94:69:3d:d5:45:74:b1:
03:b0:2b:3b:8a:1a:5c:d4:d4:b4:a4:d9:4d:1a:a6:b9:ae:3e:
03:b4:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:41 2025 by rpki-client