Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: VE4GSslycwdQdV+WDkHXIMHOV22dtv076jkOF4q1zmY=
Subject key identifier: 52:A6:BF:15:85:C1:45:19:A2:D0:71:24:3C:AD:2A:DA:2B:63:DD:20
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 0198D47287529AB37A87222CD5D6177F69F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 098B
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: Laz8af+UYdazKWUnC6FHeHIp/Xzuyj1ptJu/PCo6/io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:87:52:9a:b3:7a:87:22:2c:d5:d6:17:7f:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=52a6bf1585c14519a2d071243cad2ada2b63dd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:4f:78:5c:20:bd:ce:1c:89:81:89:17:04:
41:2c:8b:98:64:07:42:fe:45:cb:83:7b:b3:2c:ab:
fa:2f:a9:0c:e1:ef:d0:0a:09:5f:d2:e1:06:b6:cf:
77:6e:fc:b3:1c:19:1c:bf:25:e6:d0:fb:04:38:53:
ca:67:8f:c1:15:a9:02:ea:36:06:18:0b:d7:92:fb:
57:b4:2b:b4:1d:ed:cb:29:28:c2:02:80:79:e3:1d:
3a:3b:4b:ed:b3:61:2c:0b:a1:c3:16:dd:b5:79:26:
a5:99:9c:a8:d2:ef:c8:ab:17:8c:c5:e3:e8:00:98:
b1:81:ff:c0:9b:1f:42:a2:ad:c1:c2:29:04:36:f5:
13:90:9b:c4:16:9c:5f:9d:5e:6d:7d:f7:72:09:75:
3a:5d:45:f6:cf:d9:47:03:d9:82:e0:c2:1d:51:af:
a4:2f:db:31:f2:27:5e:f9:27:6b:cf:20:43:20:0a:
c6:fc:ba:25:19:00:9d:c9:b5:26:c2:11:58:cc:e7:
bb:e8:17:27:53:a9:87:fa:3c:3f:20:2d:ca:0d:6a:
12:b8:82:3c:08:2b:39:2e:1d:33:cc:e3:04:a5:68:
05:28:67:1b:f1:f3:70:ef:e0:91:bc:32:dd:f1:05:
d2:19:eb:44:01:30:d9:a8:b3:c7:9a:37:15:ab:b3:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:BF:15:85:C1:45:19:A2:D0:71:24:3C:AD:2A:DA:2B:63:DD:20
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7d:fc:c4:da:28:be:27:43:d2:97:02:f3:48:fc:fe:cd:25:
29:c4:47:27:11:5f:ad:7c:54:c2:41:66:17:b9:e0:7d:b2:a2:
ca:06:41:84:c7:ea:36:10:8f:ac:4b:c6:db:8c:f8:10:d1:e7:
eb:f9:95:8e:d4:7b:15:13:81:1b:3a:ad:bb:88:c0:85:6b:74:
de:f0:61:83:d5:77:7a:ed:0e:37:44:4c:a8:73:54:12:14:d1:
f8:d2:01:34:6b:a8:57:27:49:9e:35:48:8b:43:08:cd:6d:0e:
38:ae:a9:64:55:54:2b:96:e3:f7:08:58:dc:b3:00:fb:6a:03:
81:e4:04:38:51:fc:0b:b4:aa:8b:83:8d:75:53:73:a1:61:89:
93:77:f3:7b:1f:f2:22:1e:96:73:07:13:40:99:77:94:55:81:
ce:90:0e:75:ce:63:77:b0:68:3d:0d:17:5f:2d:8b:61:81:19:
6f:4b:7f:f8:08:fb:74:e5:b4:72:ca:91:e7:60:d8:b7:7d:1d:
22:45:9b:c3:d1:c8:9a:7d:cb:cc:5f:5a:c5:f7:cc:be:5c:28:
e2:88:e5:d8:71:f5:cd:09:32:e8:4d:fa:70:63:d3:49:ac:ad:
00:94:c6:1e:a9:2c:32:37:cd:99:5e:27:a9:23:ff:2f:5e:75:
22:ae:98:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcodSmrN6hyIs1dYXf2nzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2M1OWI1YmZiYmRlNDk0ZmQxM2Q3NzhlNmYyMmRkYTc0
OTYyYzEwHhcNMjUwODIzMDEwMjEyWhcNMjUwODI0MDEwMjEyWjAzMTEwLwYDVQQD
Eyg1MmE2YmYxNTg1YzE0NTE5YTJkMDcxMjQzY2FkMmFkYTJiNjNkZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJxPeFwgvc4ciYGJFwRBLIuYZAdC
/kXLg3uzLKv6L6kM4e/QCglf0uEGts93bvyzHBkcvyXm0PsEOFPKZ4/BFakC6jYG
GAvXkvtXtCu0He3LKSjCAoB54x06O0vts2EsC6HDFt21eSalmZyo0u/IqxeMxePo
AJixgf/Amx9Coq3BwikENvUTkJvEFpxfnV5tffdyCXU6XUX2z9lHA9mC4MIdUa+k
L9sx8ide+SdrzyBDIArG/LolGQCdybUmwhFYzOe76BcnU6mH+jw/IC3KDWoSuII8
CCs5Lh0zzOMEpWgFKGcb8fNw7+CRvDLd8QXSGetEATDZqLPHmjcVq7NKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKmvxWFwUUZotBxJDytKtorY90gMB8GA1UdIwQY
MBaAFE58WbW/u95JT9E9d45vIt2nSWLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTct
YzA3ZjZjNWEwYWE3LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTctYzA3ZjZjNWEwYWE3
LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH38xNoo
vidD0pcC80j8/s0lKcRHJxFfrXxUwkFmF7ngfbKiygZBhMfqNhCPrEvG24z4ENHn
6/mVjtR7FROBGzqtu4jAhWt03vBhg9V3eu0ON0RMqHNUEhTR+NIBNGuoVydJnjVI
i0MIzW0OOK6pZFVUK5bj9whY3LMA+2oDgeQEOFH8C7Sqi4ONdVNzoWGJk3fzex/y
Ih6WcwcTQJl3lFWBzpAOdc5jd7BoPQ0XXy2LYYEZb0t/+Aj7dOW0csqR52DYt30d
IkWbw9HImn3LzF9axffMvlwo4ojl2HH1zQky6E36cGPTSaytAJTGHqksMjfNmV4n
qSP/L151Iq6YiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:18 2025 by rpki-client