Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: ZjhmWoORNIkhqE2pu2tUhAX+tz6LeVWZAzTNGiobztg=
Subject key identifier: 06:F4:D9:81:D6:54:31:A1:FD:DE:7E:9B:EA:AF:5D:72:1B:D1:71:B7
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 0198816710F0C0761AB629AC651D7764AFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0C88
Signing time: Wed 06 Aug 2025 22:01:12 +0000
Manifest this update: Wed 06 Aug 2025 22:01:12 +0000
Manifest next update: Thu 07 Aug 2025 22:01:12 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: 2/feBtY6LXvmDvqR5UCaU3wzlhb03L63xuvW6E7ncdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:10:f0:c0:76:1a:b6:29:ac:65:1d:77:64:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Aug 6 22:01:12 2025 GMT
Not After : Aug 7 22:01:12 2025 GMT
Subject: CN=06f4d981d65431a1fdde7e9beaaf5d721bd171b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:8b:4e:7c:a6:b5:1b:b1:8c:4c:90:76:76:
32:28:9d:21:8c:e2:d6:ab:45:f6:50:1c:b3:5b:9c:
10:6a:61:be:bb:5a:11:56:93:48:64:00:b9:b8:57:
dc:67:c7:df:e6:69:26:95:7f:6d:e5:29:38:45:cd:
6f:dd:59:c9:e6:8d:89:7c:16:f3:d5:dd:c0:7c:44:
e4:78:62:3f:70:3b:62:e4:69:57:5a:27:54:52:1a:
f3:75:bb:4a:5d:8c:3b:9f:bd:c0:90:a0:71:15:f8:
57:66:6f:72:d2:92:55:9c:2a:bc:92:6c:4b:04:48:
40:35:83:17:fb:9b:ad:f5:82:52:f8:92:16:90:e8:
ee:53:ec:7b:5b:76:66:cc:af:bc:f9:a8:54:99:35:
74:93:4a:19:b5:b7:e9:fd:f0:c9:04:62:46:63:07:
1b:52:f8:c8:ba:72:8b:2a:55:67:55:e6:97:c8:30:
f7:2e:54:6f:55:d7:62:45:9e:8b:ea:55:8f:18:fd:
3d:2c:c1:8e:a4:d6:ec:13:42:c4:8c:ea:29:82:5a:
22:4e:77:80:ff:47:08:d0:4b:f6:9a:f9:45:c5:ff:
7d:c5:ec:cd:21:6f:66:98:f1:28:48:f2:0e:be:8e:
df:2b:a3:03:0f:9b:e1:75:fb:97:35:ae:80:c5:1d:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:D9:81:D6:54:31:A1:FD:DE:7E:9B:EA:AF:5D:72:1B:D1:71:B7
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:76:39:79:8f:14:98:e1:0f:1b:31:8f:aa:9f:1c:e6:f9:
d2:91:f4:4d:03:1f:4a:63:37:99:19:a4:63:e6:e7:34:41:b0:
5f:ce:6e:30:dc:7a:46:5e:4d:fd:fc:dc:e8:c3:2e:a5:7c:98:
30:fd:96:79:e3:fe:0f:46:0a:0e:a0:31:dc:74:35:47:b8:df:
99:5d:83:e7:1a:5b:10:5e:c7:42:ed:f4:47:58:60:27:cb:a7:
4e:a1:ee:77:83:80:12:78:36:40:99:35:55:ce:48:41:91:e0:
ad:3b:60:93:40:7a:ed:32:84:0b:cd:50:6a:7d:4b:a3:33:99:
18:0e:ee:78:ab:1c:75:ea:96:a5:09:a9:1c:95:8c:f6:e9:b6:
40:21:19:7f:fe:73:f4:55:ee:bf:39:2d:59:10:e9:56:fb:aa:
62:bc:db:06:3c:88:d6:75:a5:3a:21:dc:51:d8:de:57:2a:6f:
ed:b9:6f:37:e9:c3:e7:8a:b7:cc:0d:80:d4:d6:fe:e8:c5:d3:
29:11:8b:11:49:91:b5:02:df:80:72:b4:b8:99:28:be:4f:5b:
64:4c:c9:4b:a3:b4:cf:51:b3:fc:3f:eb:11:2c:24:c0:c0:12:
1d:75:be:55:a3:5b:65:59:31:06:1b:ba:dd:4c:7f:a7:a0:65:
c0:da:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:53:30 2025 by rpki-client