Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: gLzuYR8DKKLdx66NogTAZHAUTQOjQ/UYtmYDH5NCrwo=
Subject key identifier: AC:CC:23:DE:2C:DD:4A:86:C0:C6:0F:48:F5:DA:A9:92:9B:B8:AF:6D
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 0199239F48D14389F666525573F8DAA915FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0CDC
Signing time: Sun 07 Sep 2025 10:01:05 +0000
Manifest this update: Sun 07 Sep 2025 10:01:05 +0000
Manifest next update: Mon 08 Sep 2025 10:01:05 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: cUPouBp5jPJVZchEjXlcyfkQzhkqb8H4/tqv3P7dGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:48:d1:43:89:f6:66:52:55:73:f8:da:a9:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Sep 7 10:01:05 2025 GMT
Not After : Sep 8 10:01:05 2025 GMT
Subject: CN=accc23de2cdd4a86c0c60f48f5daa9929bb8af6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:7d:45:e7:8f:93:a2:b2:b0:b3:96:4f:44:
58:cb:13:26:b6:93:30:a9:54:45:e2:a3:e9:cd:88:
5e:ea:ac:27:0a:17:8f:9b:49:1c:c0:16:79:00:81:
cd:46:66:f6:bc:60:d5:ba:81:6a:b1:b0:0d:19:07:
12:e0:1c:ef:e0:22:4d:99:49:0d:08:43:04:d3:c5:
31:c2:02:e3:90:5b:ca:bd:2e:4b:5d:f4:55:4c:05:
cb:c1:bd:65:c2:91:f5:3e:67:d9:e2:3a:5a:20:38:
1a:ff:0b:bc:a3:9f:22:89:8e:4f:cc:ee:47:33:34:
33:45:c9:ad:2c:ca:60:db:cb:9f:d3:95:58:23:06:
88:3a:88:f2:d8:88:d0:af:00:b4:f1:71:04:75:cd:
c9:95:5c:ee:a3:a4:89:5d:45:8d:fb:f0:fd:5a:1f:
e0:19:04:b2:27:ef:ff:f6:4b:91:d8:4f:f0:23:8d:
2e:be:7c:cf:4a:e6:da:ac:60:5d:f8:37:e6:92:08:
c1:47:b0:e9:86:00:96:87:3a:03:75:c1:39:c1:a7:
ae:80:26:47:5c:23:ae:64:1f:e4:05:da:17:9f:fe:
d2:4d:02:ee:38:29:a8:68:94:bc:f0:1d:98:a0:0f:
90:65:d8:1c:bd:46:9b:d2:3d:f8:99:f8:8b:dc:da:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:23:DE:2C:DD:4A:86:C0:C6:0F:48:F5:DA:A9:92:9B:B8:AF:6D
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:6b:d4:f3:79:87:89:1d:fb:ef:a4:bd:6f:cf:82:95:43:
e6:3e:88:fd:3a:b7:14:24:72:4c:e1:fa:f4:50:0d:fb:7c:65:
02:f8:95:ed:22:8f:a3:87:03:dd:cb:3b:b7:44:d0:3b:dc:cb:
4b:fd:c1:51:fe:29:8c:26:39:cc:9a:a8:f5:50:81:14:85:49:
9f:e2:ed:f3:8f:de:a9:0f:66:1c:b7:ed:ba:c4:27:2a:1c:0e:
38:80:cf:ff:77:a5:e8:66:d9:18:c8:7f:17:8d:79:76:ef:79:
3f:4c:33:00:6e:3d:d6:54:ad:62:b2:c7:02:35:9b:60:c8:bf:
fb:6b:9e:77:b0:e1:29:d6:f7:9f:78:24:d4:d9:b9:00:b1:a8:
52:cb:69:44:f6:37:ac:d4:43:a4:ae:b2:bd:17:60:e4:d1:ba:
76:92:cc:fc:bb:f0:02:9f:3f:85:92:01:83:94:56:ec:72:70:
5d:6e:9f:93:b2:df:c1:78:83:5e:de:76:b9:51:e9:b8:c4:9f:
54:39:4a:c8:b1:4c:41:f4:f8:0e:4e:04:6f:69:50:13:e8:7e:
d3:86:b0:81:fd:b3:4f:33:c1:75:c0:04:50:2a:95:af:c5:c2:
88:7d:81:78:fb:7f:3a:17:83:e8:eb:1d:d2:a7:d8:49:9b:54:
64:6d:a5:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn0jRQ4n2ZlJVc/jaqRX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NzA3MTk3ZTgzNjc2MGM1OTJlMWVmMTFmMWI0Y2JlNWJm
ZDRkMmUwHhcNMjUwOTA3MTAwMTA1WhcNMjUwOTA4MTAwMTA1WjAzMTEwLwYDVQQD
EyhhY2NjMjNkZTJjZGQ0YTg2YzBjNjBmNDhmNWRhYTk5MjliYjhhZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIB9ReePk6KysLOWT0RYyxMmtpMw
qVRF4qPpzYhe6qwnChePm0kcwBZ5AIHNRmb2vGDVuoFqsbANGQcS4Bzv4CJNmUkN
CEME08UxwgLjkFvKvS5LXfRVTAXLwb1lwpH1PmfZ4jpaIDga/wu8o58iiY5PzO5H
MzQzRcmtLMpg28uf05VYIwaIOojy2IjQrwC08XEEdc3JlVzuo6SJXUWN+/D9Wh/g
GQSyJ+//9kuR2E/wI40uvnzPSubarGBd+DfmkgjBR7DphgCWhzoDdcE5waeugCZH
XCOuZB/kBdoXn/7STQLuOCmoaJS88B2YoA+QZdgcvUab0j34mfiL3NrYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzMI94s3UqGwMYPSPXaqZKbuK9tMB8GA1UdIwQY
MBaAFLZwcZfoNnYMWS4e8R8bTL5b/U0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MGFjNzgtYmJlMS00MTI0LWI4Nzgt
NjY2N2ZhNTFjNDYwLzEvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MGFjNzgtYmJlMS00MTI0LWI4NzgtNjY2N2ZhNTFjNDYw
LzEvdG5CeGwtZzJkZ3haTGg3eEh4dE12bHY5VFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmFr1PN5
h4kd+++kvW/PgpVD5j6I/Tq3FCRyTOH69FAN+3xlAviV7SKPo4cD3cs7t0TQO9zL
S/3BUf4pjCY5zJqo9VCBFIVJn+Lt84/eqQ9mHLftusQnKhwOOIDP/3el6GbZGMh/
F415du95P0wzAG491lStYrLHAjWbYMi/+2ued7DhKdb3n3gk1Nm5ALGoUstpRPY3
rNRDpK6yvRdg5NG6dpLM/LvwAp8/hZIBg5RW7HJwXW6fk7LfwXiDXt52uVHpuMSf
VDlKyLFMQfT4Dk4Eb2lQE+h+04awgf2zTzPBdcAEUCqVr8XCiH2BePt/OheD6Osd
0qfYSZtUZG2l5Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:05 2025 by rpki-client