Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: 4Zn74IlmbRtI/WpPuu1nObMwAwBM/FhSObs9l2awHzE=
Subject key identifier: BE:25:86:ED:DB:7B:5D:40:1A:7A:B7:D7:7A:55:DF:14:7B:BB:F8:0D
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 01975FB8A343295E402E2998977E2C284996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0BF2
Signing time: Wed 11 Jun 2025 16:00:25 +0000
Manifest this update: Wed 11 Jun 2025 16:00:25 +0000
Manifest next update: Thu 12 Jun 2025 16:00:25 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: h4X8S/EVku8wExdlbzdcY1FcehFrYdAEbCC50UnzjCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:a3:43:29:5e:40:2e:29:98:97:7e:2c:28:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Jun 11 16:00:25 2025 GMT
Not After : Jun 12 16:00:25 2025 GMT
Subject: CN=be2586eddb7b5d401a7ab7d77a55df147bbbf80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:5c:30:22:98:2c:9e:2d:ec:26:01:b5:74:
57:14:7d:30:0c:6b:03:38:0e:bc:e4:42:21:97:64:
02:05:0d:e7:f2:09:5c:65:46:c8:45:8b:30:5d:a5:
02:c2:2c:eb:05:4a:4c:6a:6c:89:cf:9d:e2:4f:6f:
e2:ab:1b:7c:df:be:3a:f1:91:b9:66:e0:9a:c4:be:
be:1d:c6:b6:c3:e2:29:a0:79:98:49:03:83:ba:22:
1c:22:00:1d:ab:cd:7b:60:88:21:9a:ed:d0:5d:91:
64:9b:88:18:88:ba:d3:3f:ef:b6:cb:fa:95:49:0e:
50:9e:d4:44:e5:62:5d:79:fe:84:59:f0:04:c1:7a:
10:e0:5f:4d:32:e7:cc:d0:5c:df:13:37:b3:b2:8a:
69:b9:6c:f2:87:8b:2c:30:67:0f:d1:40:ef:5a:91:
d6:71:91:e4:d6:82:6e:2c:3f:00:3b:04:7e:17:1e:
2d:d5:6c:8a:ce:11:2a:b9:12:6e:e0:d4:7b:f9:d9:
ec:59:92:d8:c3:78:3b:46:f2:7a:60:e0:d1:9d:32:
c1:cc:ae:1b:1e:82:ce:33:50:72:ea:18:9c:7e:1c:
76:cd:f6:69:a1:e4:eb:a5:d0:d6:b6:8b:23:20:12:
a5:48:ce:22:0f:71:65:1a:23:51:73:d5:69:70:f6:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:86:ED:DB:7B:5D:40:1A:7A:B7:D7:7A:55:DF:14:7B:BB:F8:0D
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2b:50:c8:11:38:96:47:6a:98:f2:7f:e7:54:82:88:e0:ad:
5d:31:26:90:e9:9b:29:46:2a:64:c7:76:81:86:15:7b:44:90:
8a:11:68:15:bf:d8:f2:e1:3d:99:5a:57:19:cc:d8:c6:9b:47:
7f:3c:a2:23:65:fe:7f:ff:e5:1c:ff:67:c0:08:ab:e2:d8:8d:
73:69:60:ed:f5:4d:20:f8:ae:a5:af:ef:d9:69:7e:61:ae:53:
0b:88:62:41:a7:54:c3:2d:88:20:1f:cd:7a:17:33:ee:9d:b2:
51:e7:8b:88:70:2d:a5:c1:df:b5:06:75:fe:65:dd:17:cc:82:
67:03:9e:ec:ad:53:27:7a:7d:93:85:80:4d:20:17:65:a2:c4:
f0:a3:1d:9a:e9:88:65:7a:7d:d2:c9:28:24:a5:fb:ba:d6:92:
d8:22:1d:84:67:7b:62:ea:93:e8:d8:17:a0:47:67:3e:25:ad:
be:d1:a5:10:2d:fa:84:c0:22:73:c0:f7:81:31:c1:fe:f4:01:
3e:2e:4a:12:e5:d5:ab:8d:b6:56:8f:6a:fc:19:95:0b:94:c3:
74:49:35:30:a2:8e:b8:fc:fe:9e:42:67:c9:7f:95:2f:7e:03:
2e:4c:e0:7d:65:43:ce:6e:41:d9:6b:ef:1d:fb:72:8f:ea:a4:
54:a5:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:17:28 2025 by rpki-client