Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: KiNNSQfh6DwgPENGQSy7QvxXefEz7WtKk4LTTKVP+m8=
Subject key identifier: BC:80:24:A7:EE:19:7A:40:92:E5:00:9B:E9:C2:CA:F6:5D:76:42:39
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 019918098815DFBBE4D7C22077474245D338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 0120
Signing time: Fri 05 Sep 2025 04:01:41 +0000
Manifest this update: Fri 05 Sep 2025 04:01:41 +0000
Manifest next update: Sat 06 Sep 2025 04:01:41 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: MFCpeKaxRmtTo9wPN7yS26vnoiO49KCYM/DRlDnm6NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:88:15:df:bb:e4:d7:c2:20:77:47:42:45:d3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Sep 5 04:01:41 2025 GMT
Not After : Sep 6 04:01:41 2025 GMT
Subject: CN=bc8024a7ee197a4092e5009be9c2caf65d764239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:00:a9:cf:97:29:fb:4d:1f:8f:2e:5f:64:
2a:4b:49:84:75:47:36:34:8f:12:47:99:ce:66:e6:
bd:34:4c:9a:c2:71:a9:ea:d8:7d:82:e1:e8:8f:e7:
d2:6d:32:52:0d:7a:10:3d:1b:5c:16:2a:85:89:58:
6e:db:75:dd:e7:ef:a6:1d:90:a1:aa:63:69:f9:c0:
e2:a4:34:4d:24:6e:53:01:ae:2d:1d:76:51:f6:c0:
b4:11:e4:02:43:31:40:34:ff:43:5a:1e:85:f9:42:
d6:97:41:c2:15:4f:cf:a5:ee:57:bf:a3:d6:2a:d6:
f8:c3:f5:be:15:13:40:59:87:7a:73:de:19:2b:81:
bf:ad:c8:39:6a:18:be:6c:c8:28:cb:19:9d:6c:a6:
dc:bd:c9:0e:67:7f:e8:47:45:e2:7f:a7:93:c2:c2:
ec:83:f3:9b:5b:ea:23:04:68:b5:a7:a9:bd:e9:55:
4a:59:60:9d:59:29:73:4a:9e:ac:9f:8c:8e:d9:ce:
34:8f:86:4c:d5:3a:2b:5f:d8:5a:54:ae:4d:4a:f4:
b6:1d:55:f4:21:e8:26:e8:36:57:b9:27:a1:27:40:
99:8a:63:bc:90:01:b4:cb:22:da:87:18:0e:a9:af:
be:7e:9e:26:1b:92:db:be:3f:d6:a0:38:d1:1f:33:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:24:A7:EE:19:7A:40:92:E5:00:9B:E9:C2:CA:F6:5D:76:42:39
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:bd:b2:b1:b3:6f:ac:63:33:32:06:a6:7f:ac:ad:63:7b:
24:c3:60:b2:33:4f:e7:cd:67:cd:ff:40:d5:9b:71:c3:12:5d:
fb:bf:f0:77:48:4f:77:5b:5a:b5:e1:79:67:47:ad:f0:54:48:
76:68:de:93:56:0a:54:31:c8:58:97:fc:e0:96:d6:a1:b2:71:
c1:c8:1b:77:ad:95:eb:cc:b2:d8:93:c4:63:6e:37:5b:62:42:
1d:bf:ce:9a:00:01:46:fb:6b:bc:35:7c:d1:34:21:58:a7:61:
e3:cc:11:84:d1:43:5c:51:18:e0:06:92:a4:95:23:7a:77:40:
b4:37:f7:bc:fe:61:ab:b6:2d:31:fe:5a:14:8e:40:d9:c9:e6:
7e:c2:17:89:38:81:6d:e0:88:65:05:bb:74:58:7c:33:af:d2:
f5:f2:78:81:96:33:ba:f5:60:f2:3f:17:8b:be:5b:89:c3:15:
f0:79:8b:31:49:e8:14:da:82:79:19:74:32:ec:fb:c3:45:79:
35:3c:a4:8d:a2:ff:73:5b:81:3b:f1:85:d4:c3:64:2e:7f:9d:
84:3f:9e:60:b9:0a:a7:33:8b:da:e1:e7:e0:b9:f3:91:4f:08:
90:aa:d8:33:78:5a:13:60:82:0e:b2:cf:f7:6b:f0:63:e7:0a:
f3:aa:37:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCYgV37vk18Igd0dCRdM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTZjMjA3NDI4MjIyZjYzZmM5Y2JhODM5ZDBkYmQ5YTY5
NTBiMzEwHhcNMjUwOTA1MDQwMTQxWhcNMjUwOTA2MDQwMTQxWjAzMTEwLwYDVQQD
EyhiYzgwMjRhN2VlMTk3YTQwOTJlNTAwOWJlOWMyY2FmNjVkNzY0MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/UAqc+XKftNH48uX2QqS0mEdUc2
NI8SR5nOZua9NEyawnGp6th9guHoj+fSbTJSDXoQPRtcFiqFiVhu23Xd5++mHZCh
qmNp+cDipDRNJG5TAa4tHXZR9sC0EeQCQzFANP9DWh6F+ULWl0HCFU/Ppe5Xv6PW
Ktb4w/W+FRNAWYd6c94ZK4G/rcg5ahi+bMgoyxmdbKbcvckOZ3/oR0Xif6eTwsLs
g/ObW+ojBGi1p6m96VVKWWCdWSlzSp6sn4yO2c40j4ZM1TorX9haVK5NSvS2HVX0
Iegm6DZXuSehJ0CZimO8kAG0yyLahxgOqa++fp4mG5Lbvj/WoDjRHzOGaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyAJKfuGXpAkuUAm+nCyvZddkI5MB8GA1UdIwQY
MBaAFLSmwgdCgiL2P8nLqDnQ29mmlQsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUt
ODRhYmNmYmNkZjVlLzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82NTE0MjEtMzMwMC00ODg2LWJiZTUtODRhYmNmYmNkZjVl
LzEvdEtiQ0IwS0NJdllfeWN1b09kRGIyYWFWQ3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVq9srGz
b6xjMzIGpn+srWN7JMNgsjNP581nzf9A1ZtxwxJd+7/wd0hPd1tateF5Z0et8FRI
dmjek1YKVDHIWJf84JbWobJxwcgbd62V68yy2JPEY243W2JCHb/OmgABRvtrvDV8
0TQhWKdh48wRhNFDXFEY4AaSpJUjendAtDf3vP5hq7YtMf5aFI5A2cnmfsIXiTiB
beCIZQW7dFh8M6/S9fJ4gZYzuvVg8j8Xi75bicMV8HmLMUnoFNqCeRl0Muz7w0V5
NTykjaL/c1uBO/GF1MNkLn+dhD+eYLkKpzOL2uHn4LnzkU8IkKrYM3haE2CCDrLP
92vwY+cK86o3nw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:24 2025 by rpki-client