Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: SkaRBCh7G+OzJ3EgAz2qWIqFK8GfKjmcyBd8V8EDSLc=
Subject key identifier: 6C:90:30:44:03:B1:81:B7:4C:BF:A8:18:CA:4A:89:5B:11:26:EB:28
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 019A71B8E636E8F3ED2FDBA168F4E096203B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0D89
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: XbmGKxUeRqRFoBWlEOPH2B8MxsSxMtw5klBqCN6j2s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e6:36:e8:f3:ed:2f:db:a1:68:f4:e0:96:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=6c90304403b181b74cbfa818ca4a895b1126eb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:99:7e:a5:42:cd:ab:98:69:af:7f:6b:3e:
c9:53:d7:a0:75:ee:40:eb:13:5c:e9:7d:bf:88:f9:
38:c9:6c:43:c3:c7:80:ee:dd:79:ee:00:20:51:2b:
04:44:ed:10:56:c8:df:4d:77:03:be:60:5b:d6:c3:
46:6e:0a:a3:49:f9:68:ab:dd:1f:19:5a:a9:6c:4f:
4e:28:c6:d3:ba:8e:3f:84:97:11:fd:20:0e:2f:91:
27:e1:f9:1f:04:3f:b2:b2:8e:32:34:bb:59:90:50:
18:d3:9c:f0:7b:dd:d0:39:5c:e6:52:7f:fa:90:f8:
7e:1b:5b:28:b9:ee:4a:f7:57:96:cf:f2:71:b8:4d:
63:f7:d8:f0:9c:e7:49:cd:d7:20:2f:a0:ee:5b:8c:
dd:91:e6:6a:2a:e7:66:0d:bf:8f:2d:9c:94:12:2d:
51:2f:b7:42:29:18:82:2f:ff:22:29:26:f7:7d:be:
d5:29:68:f0:78:9e:d3:ad:4d:05:80:de:f1:d9:7d:
42:35:e4:e8:f3:05:c3:40:a9:f5:cc:c8:69:ba:e8:
0e:36:fb:7c:38:db:ac:ef:56:2a:dc:66:24:8b:80:
72:57:e6:5c:73:56:12:3e:02:c5:83:0d:ac:07:a5:
5e:19:49:b0:12:97:fc:03:2a:93:9c:7c:32:89:5c:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:30:44:03:B1:81:B7:4C:BF:A8:18:CA:4A:89:5B:11:26:EB:28
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:35:85:19:d0:7f:c8:37:e4:a6:40:61:b5:f4:af:84:c2:7c:
7c:4d:b9:f3:89:7f:34:c5:5b:6d:74:6d:8a:e8:a4:32:9d:4b:
08:c5:24:6d:26:72:fa:7c:eb:0a:f1:6a:ca:97:4c:d5:f0:0f:
b2:67:de:df:f9:19:90:3e:4b:a4:53:b5:ee:c9:bb:09:07:74:
c8:9c:fd:41:43:5e:48:d5:e8:a2:57:d7:09:6d:7c:e1:10:bd:
34:a6:f8:0d:82:60:03:41:50:1f:2a:ec:4b:c5:19:57:50:f9:
99:49:7e:47:8f:98:f4:ec:68:b7:71:1b:16:46:83:c7:b0:83:
bb:31:16:2f:de:cf:03:01:41:ac:d5:89:f0:40:87:a7:98:89:
9d:06:84:33:35:cb:34:2f:fe:3f:5d:e0:1f:aa:0c:48:13:f7:
95:33:c7:26:76:ae:6f:94:75:be:89:6a:64:be:e4:f1:cb:c4:
a5:dd:06:70:4f:95:78:06:8e:04:b4:3b:00:dc:8b:a0:3f:2a:
69:e0:ca:b0:dc:dc:5c:3f:a7:54:8b:3a:9b:f7:d2:82:63:1e:
f7:b1:23:b3:93:87:6d:4f:dd:ea:9f:e2:54:98:99:7f:b0:54:
24:56:bb:12:58:29:63:1d:30:55:bd:dd:b1:5f:4e:70:8e:b0:
3f:f3:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:44 2025 by rpki-client