Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: peGbJr2CaOHyu7q/2quPYTmD45K03y4QXTYoW9cnQI4=
Subject key identifier: C8:DE:08:C3:35:3A:F8:11:FD:56:A2:5D:C7:25:49:C9:C2:A1:E2:44
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 01976960C1EDFF16AE4E0CB2BD922EE32FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 08CF
Signing time: Fri 13 Jun 2025 13:00:38 +0000
Manifest this update: Fri 13 Jun 2025 13:00:38 +0000
Manifest next update: Sat 14 Jun 2025 13:00:38 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: 4C8y4YkwVeH7a1Y1gI7W5PuhtN4Tfq1HVzw/GqD80WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:c1:ed:ff:16:ae:4e:0c:b2:bd:92:2e:e3:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Jun 13 13:00:38 2025 GMT
Not After : Jun 14 13:00:38 2025 GMT
Subject: CN=c8de08c3353af811fd56a25dc72549c9c2a1e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:0e:f0:aa:05:9c:26:b4:74:8f:1c:a9:87:
31:a0:64:73:b8:10:58:52:e5:25:bc:98:04:6b:9f:
20:3d:ac:c9:f7:45:21:80:fe:62:f3:69:7e:58:e3:
ef:cd:45:60:35:8d:ce:90:f2:c5:b1:94:03:90:a7:
71:a5:5c:cc:48:24:ef:04:ff:a3:01:09:79:9b:a2:
31:1b:ed:cf:a0:18:86:0b:96:f3:f9:e4:b1:a8:97:
a9:59:a6:6a:e1:4c:8d:5c:53:97:20:d2:cf:31:a2:
0f:d4:d8:9a:90:62:6b:af:4d:b3:83:01:3d:80:91:
bd:8f:06:e4:db:f5:ed:15:3f:be:7a:a0:cd:5d:6c:
56:40:2d:e2:23:68:f1:52:88:12:b3:7f:8d:8b:ca:
f1:8a:a9:9f:ec:f7:5d:16:87:8d:51:35:66:54:4a:
28:86:c3:93:e6:23:df:78:8e:9f:c1:fb:db:0b:1d:
e3:83:c8:80:f4:4d:12:67:cf:fa:a0:62:07:e5:f8:
64:dd:d9:f1:53:86:b3:75:85:0f:a7:b0:7f:7c:5b:
e8:7a:66:12:24:50:96:23:06:7d:6b:3d:30:1b:f2:
70:19:d1:41:8f:43:b9:55:1a:fc:1b:7c:16:70:b2:
88:e5:9b:4d:5c:78:d7:e5:14:b0:90:98:a5:f3:34:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:08:C3:35:3A:F8:11:FD:56:A2:5D:C7:25:49:C9:C2:A1:E2:44
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b3:6d:43:3f:36:9e:12:50:72:f0:5d:58:57:3f:18:2b:29:
fc:c6:fe:d9:84:8f:b0:44:0a:7c:75:29:f6:16:c6:f6:c4:6d:
d6:d0:51:b4:a9:b6:ea:78:a7:a5:2f:c8:4a:32:b2:48:88:93:
b6:ef:df:a6:71:3a:a4:67:1e:29:d7:82:55:b9:33:af:a5:2e:
1d:d1:3c:0c:19:8d:2d:b1:31:6b:38:9e:85:0d:65:77:a9:fd:
4e:a4:c1:0b:64:29:b7:11:0b:02:29:dc:a0:c3:97:90:cb:cc:
48:0a:ff:88:88:66:be:01:45:fd:1f:f8:10:cb:98:16:dc:48:
2c:8a:48:e7:0c:9d:2d:fc:ba:48:64:9f:40:b6:f5:10:47:94:
8c:9d:25:19:6f:af:63:9f:04:d2:9c:83:f6:14:5d:b5:2e:b1:
6a:b1:56:99:78:88:71:e8:09:76:43:ca:79:0f:e2:50:3a:33:
b5:23:bc:fa:af:33:0a:1f:4b:2b:ec:3e:fd:2c:d7:8b:3f:e0:
52:f2:92:e7:17:9a:bd:be:5d:b2:f0:05:99:16:67:6e:ae:9e:
04:b2:ad:fb:5a:69:68:fb:40:5e:07:89:7c:97:bf:d4:92:d0:
51:72:68:40:2e:72:68:82:c4:73:ad:c2:8a:f5:c0:20:c9:59:
79:36:91:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYMHt/xauTgyyvZIu4y/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2M1OWI1YmZiYmRlNDk0ZmQxM2Q3NzhlNmYyMmRkYTc0
OTYyYzEwHhcNMjUwNjEzMTMwMDM4WhcNMjUwNjE0MTMwMDM4WjAzMTEwLwYDVQQD
EyhjOGRlMDhjMzM1M2FmODExZmQ1NmEyNWRjNzI1NDljOWMyYTFlMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37gO8KoFnCa0dI8cqYcxoGRzuBBY
UuUlvJgEa58gPazJ90UhgP5i82l+WOPvzUVgNY3OkPLFsZQDkKdxpVzMSCTvBP+j
AQl5m6IxG+3PoBiGC5bz+eSxqJepWaZq4UyNXFOXINLPMaIP1NiakGJrr02zgwE9
gJG9jwbk2/XtFT++eqDNXWxWQC3iI2jxUogSs3+Ni8rxiqmf7PddFoeNUTVmVEoo
hsOT5iPfeI6fwfvbCx3jg8iA9E0SZ8/6oGIH5fhk3dnxU4azdYUPp7B/fFvoemYS
JFCWIwZ9az0wG/JwGdFBj0O5VRr8G3wWcLKI5ZtNXHjX5RSwkJil8zRe4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjeCMM1OvgR/VaiXcclScnCoeJEMB8GA1UdIwQY
MBaAFE58WbW/u95JT9E9d45vIt2nSWLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTct
YzA3ZjZjNWEwYWE3LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTctYzA3ZjZjNWEwYWE3
LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7NtQz82
nhJQcvBdWFc/GCsp/Mb+2YSPsEQKfHUp9hbG9sRt1tBRtKm26ninpS/ISjKySIiT
tu/fpnE6pGceKdeCVbkzr6UuHdE8DBmNLbExaziehQ1ld6n9TqTBC2QptxELAinc
oMOXkMvMSAr/iIhmvgFF/R/4EMuYFtxILIpI5wydLfy6SGSfQLb1EEeUjJ0lGW+v
Y58E0pyD9hRdtS6xarFWmXiIcegJdkPKeQ/iUDoztSO8+q8zCh9LK+w+/SzXiz/g
UvKS5xeavb5dsvAFmRZnbq6eBLKt+1ppaPtAXgeJfJe/1JLQUXJoQC5yaILEc63C
ivXAIMlZeTaR/g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:16 2025 by rpki-client