Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: 4u+rPL7hd3FJnZc+kl3IEmbNtmW+RlCIdRnCjTfR2cg=
Subject key identifier: E0:A6:8C:42:D0:03:0E:FB:88:4A:63:B5:1C:6F:F2:37:71:44:7B:C6
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 019873E232C6AE961E68E93217FA6CA5E1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 0959
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: QSVg50E+giNIr/XMD4cZ3aEOtHBqxwlqh9hm8p+1kQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:32:c6:ae:96:1e:68:e9:32:17:fa:6c:a5:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=e0a68c42d0030efb884a63b51c6ff23771447bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:2a:e2:33:2d:07:02:8f:37:58:7b:2b:e2:
92:1b:8d:d5:0c:56:a0:d6:97:4c:ea:e7:90:99:fd:
90:33:8f:9c:64:07:45:37:51:ec:3f:ba:3b:12:e1:
6c:31:8a:e2:4b:77:25:22:e5:16:7a:09:99:61:58:
f1:2b:71:ae:3e:16:89:fd:78:cb:7c:dd:2e:c7:d5:
5b:21:a2:e5:7d:41:11:5e:0c:b2:b3:ea:9b:0b:92:
45:16:a5:68:1c:b6:96:a8:49:1f:be:72:02:2f:16:
f6:9e:96:20:2b:6a:3e:ff:4a:a2:52:0f:95:7b:4b:
50:21:43:dc:7d:ba:11:2a:27:e3:12:f8:e6:f0:ba:
a3:ff:8e:c4:96:68:5c:a3:d7:40:2b:c1:4f:39:aa:
7d:69:04:08:a0:66:39:bb:b1:b4:bb:df:c1:b9:f1:
c7:d0:ea:b0:73:a5:3d:2e:3d:da:45:e6:1f:a6:fc:
d5:ce:b9:56:10:38:f8:bb:09:9b:cf:4c:53:0b:5f:
38:18:79:a3:eb:0a:68:63:fb:02:04:39:e5:80:7d:
79:f0:61:58:1b:8a:2b:fd:82:5a:00:5b:7a:44:b0:
77:6c:51:34:af:04:d5:e8:81:98:92:46:83:2f:1b:
fd:b1:44:9f:ae:fb:b9:49:a9:8a:43:b5:52:d1:e0:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:8C:42:D0:03:0E:FB:88:4A:63:B5:1C:6F:F2:37:71:44:7B:C6
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:4c:74:d9:04:f2:95:a8:08:9a:b6:1b:e8:10:fa:26:17:
b4:5a:01:72:79:cc:0a:65:0d:5c:c9:09:bf:ed:a0:0d:cb:16:
16:bd:73:fa:77:b0:3a:26:52:de:32:0c:4c:84:d2:2f:2a:85:
1d:e6:66:69:c7:e9:b9:41:94:05:6c:06:89:97:2b:2b:5a:d3:
84:32:9b:eb:49:c4:e9:bd:ee:96:60:0e:87:a7:6e:0c:09:f7:
18:a2:f0:b1:df:80:1e:1a:f5:d1:59:1d:7c:a6:98:3a:61:a8:
7d:cf:b3:08:c1:a7:65:6f:3e:ba:52:e6:01:db:42:b8:30:37:
57:f8:68:38:cb:51:6e:80:e4:02:80:1e:ad:93:83:05:6d:73:
ff:d9:d5:60:ef:6c:ee:2b:45:11:47:26:51:a2:cb:80:3d:9b:
bb:4c:07:aa:55:28:f0:7d:85:72:de:3b:97:2d:f7:b2:cf:a0:
3f:c3:1d:fd:a6:c0:00:82:cd:a2:77:80:cb:ba:fd:ee:77:d0:
ff:7f:5c:d5:91:f7:55:44:e2:32:5f:6c:da:a5:ec:e1:ff:03:
c0:c5:1b:30:8a:88:ef:aa:28:4c:1b:c6:45:05:8a:e0:28:47:
61:48:c2:fe:4a:2b:2e:98:be:69:18:f0:e2:84:e7:c2:3a:2a:
8a:fb:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:52 2025 by rpki-client