Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: xtAloTJdkigb+8N3Lyq5Qpda70G6kfiGuN34KcqqpI4=
Subject key identifier: 39:35:C8:65:4A:05:9F:17:DB:3A:BD:54:3B:6C:3A:F3:75:0E:42:08
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 0199FBEB58B70C86D260F9CC8274117CC40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 0A24
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: 7lwgElDfk/+7P2yr+00+QWk+PDvvBkR16BtTPboQyPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:b7:0c:86:d2:60:f9:cc:82:74:11:7c:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=3935c8654a059f17db3abd543b6c3af3750e4208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:b5:84:23:1c:3e:23:72:9e:04:8b:73:6e:
83:4f:06:4b:12:e6:35:30:ed:7f:f4:63:c8:83:52:
ee:dc:86:85:38:59:4c:1b:c9:53:c2:df:e6:2c:27:
e7:75:8a:68:ee:39:aa:b1:85:0e:db:c4:5b:3a:25:
f1:08:49:60:4c:2e:9d:72:25:27:0d:7c:62:6d:d6:
43:c7:4e:3d:69:0e:eb:ff:57:2a:68:e2:c0:54:36:
3b:97:c3:77:cc:cd:96:ee:36:d5:36:cd:8b:5f:06:
5b:a4:1e:d2:c1:61:69:17:f4:68:31:6e:81:23:73:
47:90:9a:bf:b9:9f:fc:2d:c4:48:b0:ee:37:8d:ec:
d3:a9:15:be:67:2e:4e:d8:c4:fc:ae:2a:8b:a5:f9:
c9:8b:bf:46:bc:7c:8c:a7:0a:2e:70:b8:54:d2:59:
9a:28:7d:6c:2d:50:54:81:a0:56:79:d3:05:e6:3d:
88:ab:eb:a3:68:08:38:8a:6f:7d:11:9f:b0:fb:85:
e2:a4:da:b0:60:e3:65:a7:c7:9a:8c:00:22:c7:30:
b1:14:07:e7:a4:16:32:b7:0a:b4:78:f4:0b:8c:2d:
53:7d:ac:82:97:2f:74:d8:ef:67:b4:0c:76:a3:e8:
9f:cc:68:55:9c:27:96:ae:62:69:15:73:b4:4d:93:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:C8:65:4A:05:9F:17:DB:3A:BD:54:3B:6C:3A:F3:75:0E:42:08
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:6e:09:f7:cc:18:e4:82:dd:06:ef:c2:b3:c4:3f:3e:ec:
f0:cd:17:02:9d:24:37:fd:6e:f3:9f:9d:f5:62:ed:d9:64:41:
31:6f:27:7a:6c:94:b0:be:67:f5:1b:25:08:ea:2f:2d:59:c8:
8d:d3:bc:58:90:68:b6:f4:c5:c1:25:5c:ed:df:41:3a:fe:36:
ec:5d:4d:ec:cc:cd:8e:e3:6a:66:42:3c:9c:aa:d5:aa:cc:ea:
a6:05:33:e6:79:3f:eb:c1:2c:a7:9b:6b:ce:a7:08:7c:99:65:
91:c0:93:e7:2b:13:2b:29:ad:f7:18:a5:fa:62:2f:6e:c7:d3:
54:50:d4:6c:12:34:d6:68:c2:48:08:f1:0e:02:ea:09:16:1e:
31:85:c4:36:bb:44:ad:6c:8b:9e:47:64:9f:4e:e1:f9:ca:2d:
3e:9d:03:b3:60:8b:e3:9f:e2:46:5d:2a:08:f9:40:cf:38:bf:
e8:7b:cc:0d:2c:96:1a:b9:c3:01:4b:14:9d:78:8e:aa:b2:2f:
38:2e:03:49:04:05:f5:15:df:ce:df:d8:cb:4f:b9:d2:d9:fb:
a0:d5:96:69:69:08:43:c5:2d:5f:17:1c:c3:a4:7e:00:c9:5a:
81:56:94:60:a3:b8:31:ea:91:2b:35:05:d4:f6:00:17:5e:86:
96:6c:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:46 2025 by rpki-client