Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: Oe7Rm1NzkRG1+t+585Dlh+P7/HR++zD9ym8Vw2TW8Lc=
Subject key identifier: 7F:1E:71:48:60:DE:85:FB:6A:D7:DA:2E:FA:3F:3D:CB:EF:CA:4D:A2
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 01976D3E567F763720951485525870B2FD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0BF9
Signing time: Sat 14 Jun 2025 07:01:31 +0000
Manifest this update: Sat 14 Jun 2025 07:01:31 +0000
Manifest next update: Sun 15 Jun 2025 07:01:31 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: cnCytnepG8JwXRFyqlsKkekpVqKhZoa41twVsObfcx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:56:7f:76:37:20:95:14:85:52:58:70:b2:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Jun 14 07:01:31 2025 GMT
Not After : Jun 15 07:01:31 2025 GMT
Subject: CN=7f1e714860de85fb6ad7da2efa3f3dcbefca4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:b8:52:69:3f:0a:be:44:2a:41:e4:8d:4f:
7c:08:7e:5f:6a:51:79:32:c4:7d:66:6c:09:a2:3e:
4d:db:3c:f3:54:c4:74:67:ab:70:a6:c4:45:4a:f2:
18:65:8c:dc:1d:d5:00:45:9c:61:48:55:8d:75:31:
a2:bb:e8:d8:28:7a:13:7b:67:72:b7:74:50:95:04:
ac:56:6b:38:8c:15:d1:f3:fe:d3:75:6b:25:58:e2:
37:f3:e5:a6:eb:37:17:1f:f0:0c:19:0f:db:11:8b:
cc:92:bd:6b:bb:a9:db:92:00:3d:e9:49:d7:68:c6:
d7:ab:10:c2:d1:62:ff:85:e5:6a:78:02:da:c4:53:
75:4d:5e:fb:78:7d:8c:74:1a:a9:c8:c2:e3:a0:31:
ea:7c:7c:89:b8:e7:92:77:da:ff:83:fe:73:5e:da:
e5:90:0a:f2:54:c6:e9:e3:01:f0:ef:55:4c:ce:be:
d3:1d:32:0c:d3:6f:7d:79:2d:89:22:7e:03:21:35:
43:d2:88:ec:d1:28:11:24:7a:b5:fa:c2:81:65:00:
25:34:dc:b7:34:12:d9:a0:7c:05:94:9d:c0:fb:06:
4d:18:36:03:a8:15:87:cd:37:5c:92:a4:36:17:ab:
be:0c:a2:5f:f2:c3:99:68:fb:d2:e3:9e:49:e2:82:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:71:48:60:DE:85:FB:6A:D7:DA:2E:FA:3F:3D:CB:EF:CA:4D:A2
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f6:fd:c4:0c:cd:ca:1c:65:41:8b:9b:85:a2:9c:68:fc:0f:
63:ec:99:41:11:9c:8e:bf:11:bc:3e:0b:e5:1d:06:10:2b:27:
58:f6:f5:62:32:4e:cf:b0:3f:d9:61:4d:2a:22:7e:74:ab:d0:
d6:ca:46:34:42:5b:9f:32:ea:8c:77:11:3f:88:1b:08:0b:4a:
6f:a3:88:46:d4:64:46:ea:ef:0f:44:31:03:9d:f1:90:5e:85:
a5:2c:fe:09:14:63:ef:db:ae:8a:3a:ef:96:06:17:79:c1:cc:
08:bf:6e:c7:d3:3b:68:65:fb:a6:a6:03:6b:d8:9f:16:02:e5:
75:c5:e2:b2:8f:0b:33:f1:d5:a6:66:45:30:b3:85:5f:0f:47:
d5:fc:81:bb:32:de:8a:42:95:98:cf:96:07:1d:83:55:43:36:
d7:3c:cf:6b:f4:ad:6c:c7:bd:88:0d:e5:93:f3:40:8d:d4:55:
22:7e:59:23:3c:61:18:be:af:4d:de:b9:7e:d2:5c:bb:d1:c6:
95:38:dc:b7:66:db:1b:d7:c3:d7:8a:d6:b9:6d:4b:f0:53:88:
a3:65:be:04:ef:8f:ee:19:0e:9c:de:e3:df:fc:cc:3d:fa:b1:
b4:ae:58:af:89:ef:a1:4d:ee:e3:85:cc:ed:be:bd:cf:88:42:
f8:d3:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:20:10 2025 by rpki-client