Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: op2WGXopTpNnIkuNRgROeaWnY8nyPnadkEWZ4bxp/V0=
Subject key identifier: BC:13:70:27:6C:B7:2E:C5:50:B9:85:31:9F:CB:E5:DF:4C:A7:DF:6F
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 01987D89C1912473A1C1C2F543A7D88CA892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0F98
Signing time: Wed 06 Aug 2025 04:00:36 +0000
Manifest this update: Wed 06 Aug 2025 04:00:36 +0000
Manifest next update: Thu 07 Aug 2025 04:00:36 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: SEEUXlPfGShBzyKpRLHBF2cL7ydG8/KdYF0Jllu+n4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:c1:91:24:73:a1:c1:c2:f5:43:a7:d8:8c:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Aug 6 04:00:36 2025 GMT
Not After : Aug 7 04:00:36 2025 GMT
Subject: CN=bc1370276cb72ec550b985319fcbe5df4ca7df6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:01:66:2c:9c:56:41:b9:3a:e7:6b:79:d7:
f5:d7:22:35:c3:88:76:84:df:a8:71:75:b6:89:02:
10:1a:b3:3d:86:19:6f:28:a8:6e:cd:5e:66:f6:16:
4d:fc:1b:47:5e:e4:35:bd:d0:17:33:d1:ac:96:d1:
a6:c9:b7:33:97:70:11:bf:4b:32:e5:a8:1f:2f:75:
6d:02:75:da:90:db:7f:7d:ae:34:bc:cc:34:be:02:
fc:aa:e9:82:cd:c7:71:f7:6f:29:a1:ef:0c:61:6d:
75:44:a3:83:c4:23:50:b3:ec:0d:81:14:f9:0f:27:
c7:ec:ba:fb:c5:08:54:fb:9a:76:06:78:0a:0d:e2:
cb:c0:3d:03:f7:6e:61:05:d7:74:a9:1b:c4:a0:ac:
59:25:05:1b:a1:06:58:00:08:55:2d:02:93:45:d6:
3a:5e:a3:13:50:5b:99:5e:55:b6:af:ec:0d:99:5e:
98:78:38:d0:1d:2a:29:7f:10:96:15:3e:10:63:81:
92:4d:a4:67:fb:30:89:05:fc:b9:40:64:00:54:74:
c8:96:f8:cb:5b:fb:72:43:99:0a:bb:9a:2b:81:06:
ed:15:72:26:bc:f6:3c:6f:38:07:ad:8c:43:c6:98:
dc:8c:bb:da:09:9d:3f:c9:50:19:48:ed:29:b9:e5:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:70:27:6C:B7:2E:C5:50:B9:85:31:9F:CB:E5:DF:4C:A7:DF:6F
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b3:6d:0e:d9:33:ce:04:aa:8a:e4:25:8d:35:36:ad:74:da:
02:fd:f6:c4:00:0a:f6:97:9b:68:cc:bd:7c:1a:f0:73:d8:a1:
24:80:61:16:60:3a:e6:18:cc:05:0b:53:bf:c7:e8:80:98:d1:
d1:60:0d:41:b2:4b:9b:23:00:e9:bd:17:1e:8c:3e:8b:60:ca:
b3:bc:0c:12:21:0f:51:0f:d3:3a:92:0d:3f:48:e8:18:21:d4:
b6:51:c5:9d:c3:01:9b:42:b7:fc:92:5c:3a:7e:10:0d:f1:d3:
e0:55:cd:aa:8c:e9:94:dd:f8:ba:07:76:ff:5e:f3:01:4b:ae:
f0:e5:83:20:2e:a7:d0:46:ea:ed:10:a7:50:7c:f8:3b:d8:02:
e0:ae:8c:72:94:b1:e3:f7:9e:92:84:21:8f:18:12:b1:2c:2f:
9f:12:d9:4e:b8:f0:1e:b9:cc:a6:6b:92:48:23:d2:87:94:a3:
da:89:58:4a:e8:93:d8:a4:4a:79:49:4c:46:69:f8:64:b1:3e:
ad:e8:6c:8b:80:0f:ae:3a:37:84:57:cd:58:2b:e6:53:d7:6e:
6e:82:88:a0:0e:c9:d1:7e:23:f8:99:d5:15:89:58:12:1c:b7:
9a:10:04:bb:e1:5e:d2:c1:48:e2:84:4c:a1:da:90:5c:06:9a:
17:81:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:07 2025 by rpki-client