Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
File: tkDbwv_PXWNFicBEAV1xdcuv8-0.mft (raw, json)
Hash identifier: 9u3BDxV/g+yLMhy++zbfuUU0qkoNJUcUZPxvGsp8of0=
Subject key identifier: 13:EB:F6:75:CF:0F:A6:7F:AD:41:C7:6B:F9:E1:F6:B9:2F:E9:10:1F
Authority key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
Certificate issuer: /CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Certificate serial: 0198D70612B455283DC8F7BCC9BCA048FFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
Manifest number: 10E9
Signing time: Sat 23 Aug 2025 13:02:35 +0000
Manifest this update: Sat 23 Aug 2025 13:02:35 +0000
Manifest next update: Sun 24 Aug 2025 13:02:35 +0000
Files and hashes: 1: tkDbwv_PXWNFicBEAV1xdcuv8-0.crl (hash: BZ+oRHl4HSwIFnC/soLVyjyn3CjK/kueqhYp2oU7N1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:12:b4:55:28:3d:c8:f7:bc:c9:bc:a0:48:ff:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Validity
Not Before: Aug 23 13:02:35 2025 GMT
Not After : Aug 24 13:02:35 2025 GMT
Subject: CN=13ebf675cf0fa67fad41c76bf9e1f6b92fe9101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:fb:67:e0:48:64:d9:18:44:87:96:e9:f7:
08:de:90:29:2d:a6:87:42:90:8c:7c:a9:63:fd:f7:
cb:dd:8f:77:c4:22:5a:7c:e1:34:e3:b2:40:87:7b:
91:7c:db:a5:10:eb:87:2b:0a:11:1c:4e:10:47:71:
47:7a:65:2e:b7:95:da:a7:6a:52:08:b9:aa:e3:13:
38:c5:ee:a0:5a:ec:50:b0:1e:8b:a8:49:f1:e0:bc:
66:80:11:77:e5:e6:bf:1f:2c:82:10:20:e8:ed:65:
eb:65:10:94:28:88:c6:78:83:87:3e:eb:0f:68:69:
91:85:9b:1f:3a:80:9c:47:32:dd:7a:33:6f:ec:11:
f6:8f:26:d8:eb:cb:ac:63:09:48:ac:52:72:90:f4:
72:f1:d0:74:67:d8:67:88:36:bf:fb:ee:f7:41:be:
1f:5a:61:e2:5c:a7:61:06:f4:92:51:dd:a9:64:c0:
7a:e6:d1:30:c3:cb:6b:07:da:b6:c5:47:be:56:dd:
7d:11:a4:a4:33:19:f3:f5:31:a3:e9:47:00:b9:54:
ca:b3:30:0c:1b:4b:b1:76:0c:30:d9:b7:28:e2:69:
54:66:41:a5:bb:b9:86:43:91:20:b8:0f:a6:d3:6d:
37:59:4d:ca:c5:4d:03:22:18:39:d2:6e:10:9f:0d:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:F6:75:CF:0F:A6:7F:AD:41:C7:6B:F9:E1:F6:B9:2F:E9:10:1F
X509v3 Authority Key Identifier:
keyid:B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:60:b8:44:ba:c6:14:7b:79:d1:42:b5:e8:0e:8b:8d:41:
33:d6:d2:1d:b5:c7:02:92:d0:4a:a3:db:f9:b7:3b:f5:0d:bb:
48:21:9f:09:ac:92:83:03:44:9b:fb:2d:fd:4d:85:34:9b:a0:
00:2e:45:c0:b3:fc:bf:fa:63:27:32:f9:ae:1c:20:c0:d2:67:
be:73:8a:c2:16:e8:e9:8d:49:bc:83:2c:6e:83:84:81:9e:69:
c4:8d:ff:98:6e:a4:aa:ac:c9:dd:45:83:de:0f:79:e3:91:a9:
21:b8:7c:49:66:0d:6a:e8:4e:5e:1e:c2:ed:eb:cc:9b:be:2b:
7b:2c:c3:83:42:44:e1:26:2b:9b:8c:ba:f0:88:6c:23:80:e6:
22:36:57:bb:8f:24:dc:b0:21:5c:0b:2c:70:77:b1:e8:16:20:
41:da:03:a6:36:81:4d:35:b2:d3:5f:2a:0b:da:0b:da:f9:47:
87:16:f1:13:35:e6:59:0c:62:e9:6f:9d:1d:01:51:33:8a:6a:
b9:a7:44:70:22:ce:b5:e5:f7:f4:55:3c:ee:6a:1f:2d:82:88:
0e:ab:6d:4c:b1:f1:fd:a5:31:53:51:fe:55:67:e9:e7:93:f2:
45:76:e1:52:41:ee:4a:0b:6c:4d:0f:33:bf:a4:9a:ee:93:ad:
3f:59:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:41 2025 by rpki-client