Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: Sdgiome2VBicuVBj8rrlsK+NQzxmQ9Eh5GTFuDWmhBE=
Subject key identifier: 21:5C:E6:78:29:FF:09:FA:CF:42:B0:EE:3D:44:5C:2D:B7:93:1A:EF
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 019A4EF479C05DE191E9976DECB456CDF70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0D77
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: G72xaFLDRc9tZJuijx+WBc9z/4EKbnWQp8a9oaCk2Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:79:c0:5d:e1:91:e9:97:6d:ec:b4:56:cd:f7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=215ce67829ff09facf42b0ee3d445c2db7931aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:61:d9:65:b3:ee:1d:e5:92:b3:67:fe:88:
93:49:dd:db:50:4f:92:5a:ac:d2:fb:d3:a9:fb:07:
59:9c:82:86:35:17:47:22:c8:94:78:ba:23:2e:1e:
80:87:3d:79:9c:f2:4f:a4:e6:fe:9e:13:23:d8:e5:
bb:0f:27:78:d8:c0:21:42:a4:c2:55:05:b8:c8:2f:
24:36:3b:e2:64:3e:ec:99:2c:44:4e:4f:ce:4f:c4:
27:03:dd:aa:42:0a:56:2a:8d:52:70:8d:5a:e8:0a:
67:34:d1:b4:fe:63:73:0a:ff:d9:ed:ce:8f:ab:f5:
af:b6:3f:a1:3f:5f:0f:18:22:d4:0f:35:db:3b:ec:
28:fe:c3:13:13:e9:37:59:9f:47:23:f4:da:d4:7f:
ea:6c:9a:60:0d:9c:a5:4c:67:4c:69:04:9d:d1:be:
13:c1:4d:bc:58:2a:7a:65:4d:a5:25:39:24:b7:26:
df:3c:08:e8:c7:56:00:db:7a:8b:70:28:bd:e1:c1:
45:2d:5f:2f:c4:ba:af:34:22:41:d0:03:01:ee:0f:
b1:77:e5:8c:2d:04:00:ac:f7:55:73:37:7e:af:e1:
86:79:a6:83:a4:b2:9e:cb:a9:12:c2:d3:07:01:aa:
78:c7:75:e3:06:88:ea:2a:6c:d6:e0:93:f6:5a:cf:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:E6:78:29:FF:09:FA:CF:42:B0:EE:3D:44:5C:2D:B7:93:1A:EF
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b4:a4:fd:bb:46:37:46:23:72:da:3e:bf:e0:a2:85:7e:1a:
99:6c:a0:4e:32:d9:48:43:8e:70:32:4c:aa:fb:73:74:89:72:
b8:59:c4:dc:95:c3:3f:0d:0f:17:ce:8b:68:1d:ff:d0:df:a8:
2c:45:e7:e1:75:65:03:8f:b6:f8:01:40:7e:59:97:a5:fc:c8:
ca:72:28:f3:a3:3b:03:75:92:b4:4a:97:e9:1c:37:3f:ec:ec:
b1:d1:9a:52:c0:42:5d:7d:48:10:fb:04:bd:2a:8c:7d:4a:a7:
32:d1:8e:8f:50:de:5b:8d:e2:04:16:45:16:2c:be:50:10:80:
e1:0d:7c:87:aa:62:4b:b3:89:06:77:9f:3a:6b:16:65:60:f8:
0b:52:6a:40:64:04:80:f2:0d:f0:a1:bc:90:42:97:f8:a9:e2:
cb:31:67:da:cf:f1:a3:51:66:79:21:e4:bb:2d:fc:1c:27:d3:
21:6d:0e:32:48:44:e2:e6:c6:c8:3b:c8:20:a1:52:cd:c7:fc:
43:71:43:ec:82:ce:5d:46:b3:93:29:2f:2b:d1:df:65:85:02:
6f:8a:4a:d1:a9:40:5b:61:9c:7c:31:e4:25:e4:66:1f:39:21:
7e:52:2f:b4:ed:70:2d:da:10:72:dd:29:e9:72:fd:cf:31:49:
1c:06:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:11 2025 by rpki-client