Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: VKHUs+kqyZWBTDMHwq9l6bn0/DrtY08PMLDz3m/HCDI=
Subject key identifier: 98:50:F4:91:41:B2:7C:0A:C7:98:AF:A8:FF:C9:53:65:24:79:86:45
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 0197B6A0449A6248322C07EEED7B120C0C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 08F7
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: z5U1+UDZ0fyiyEFulfNV12NYiKC//KdZNfjQeTiFx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:44:9a:62:48:32:2c:07:ee:ed:7b:12:0c:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=9850f49141b27c0ac798afa8ffc9536524798645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:69:ca:fd:98:4f:65:ed:32:2b:29:1d:7e:
d9:ee:27:b5:08:0f:33:98:50:11:1a:19:f8:f3:2b:
7e:79:dc:11:3f:24:5e:e3:3b:cd:e8:3e:f3:2f:7d:
92:84:d1:28:1b:71:fe:bb:ec:25:fc:e1:4a:2a:ab:
2f:18:d9:50:d7:3e:40:e7:73:b7:3e:a1:a4:e1:2f:
3b:f5:1a:45:3d:91:8c:4f:66:bb:45:9d:6d:f2:f1:
ba:83:c0:de:66:ed:ce:51:cd:b1:46:94:fa:e2:fe:
72:5a:54:34:34:1c:3e:59:80:32:7c:27:6c:c3:cc:
b8:80:02:be:b0:7c:45:ef:aa:7b:40:53:a3:73:fc:
bd:d9:11:f6:57:2f:be:02:0e:34:c8:9c:22:cb:81:
b1:f4:a7:b3:ec:32:92:1e:aa:1f:11:46:5d:69:0b:
c6:34:21:03:53:55:a3:06:2c:33:d1:dd:ef:16:1a:
fe:17:f5:b6:47:15:26:60:a3:92:35:8c:fa:39:50:
ab:bf:cb:7f:5a:7e:00:1e:a6:1e:1c:ed:fb:88:7a:
2f:c3:c5:85:1a:ac:9e:ab:d7:4c:52:14:8a:31:5f:
5c:08:98:45:f6:67:de:db:34:0e:9a:8c:75:f9:46:
59:02:8f:95:66:f1:fe:e0:43:6b:33:b4:64:d8:3e:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:F4:91:41:B2:7C:0A:C7:98:AF:A8:FF:C9:53:65:24:79:86:45
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:7a:2d:68:30:dc:ba:4e:6c:2a:02:74:25:88:4f:d5:1f:
9c:56:41:7e:b8:6c:3f:53:2e:67:dc:76:51:9a:18:03:49:65:
f8:ec:0a:0d:7a:8c:97:9e:0c:b4:88:59:5c:76:04:fe:66:d9:
fb:db:3e:ec:88:d6:be:fe:01:3a:98:66:c4:c9:25:dd:af:cc:
40:73:80:ab:20:08:a0:2e:74:a1:d2:20:9d:76:60:c1:93:69:
7e:cc:34:8d:8b:95:67:c3:0b:85:1c:71:7c:4f:d6:4b:46:24:
56:ce:55:ce:46:8e:d1:b4:f2:2f:b0:e4:70:6a:38:75:83:f6:
60:6e:89:bb:cb:1d:e3:b1:27:68:55:b3:d0:87:b1:ab:ec:d7:
a9:89:b0:88:4a:90:fb:8f:4d:5a:ec:0b:cc:7d:f9:93:68:53:
22:0e:fe:1a:d6:2e:57:43:ae:af:b0:19:4e:29:78:6c:3e:56:
81:0d:33:03:e1:d7:29:a1:80:2d:6f:81:20:48:eb:80:d1:8c:
38:6d:d4:7e:9b:6c:52:44:c8:81:36:10:c2:7a:b6:f8:fe:5c:
f2:45:a9:4b:67:44:92:69:8a:74:d9:a3:0a:79:da:6f:9d:07:
63:55:0c:17:93:37:1e:93:a8:66:a7:3a:c0:c5:c2:1a:f3:d2:
ad:dd:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:49 2025 by rpki-client