Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: HmRaxmWT+0UH+0/9NeryVfxJRxPml8oTo13BacasvbI=
Subject key identifier: 28:AC:4D:CF:0A:EC:FE:92:70:1F:1A:09:25:33:B5:B8:18:9F:45:70
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 01987CE5420A3D50118A12C61718396B0FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 01:00:56 +0000
Manifest this update: Wed 06 Aug 2025 01:00:56 +0000
Manifest next update: Thu 07 Aug 2025 01:00:56 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: MagNOaJu4bW5pPm0JG5kZi7aRkRWkhoQ05S8WpjUi9U=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:42:0a:3d:50:11:8a:12:c6:17:18:39:6b:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Aug 6 01:00:56 2025 GMT
Not After : Aug 7 01:00:56 2025 GMT
Subject: CN=28ac4dcf0aecfe92701f1a092533b5b8189f4570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:63:1b:2c:7f:4e:4d:a0:c8:1f:b3:a0:6b:
c3:c0:7c:e5:0e:19:2c:28:19:ce:93:58:a1:3b:a5:
55:a0:0d:df:d5:f7:94:3c:34:72:f3:a0:95:be:32:
c5:db:6e:ea:21:1c:38:c5:4e:7f:b2:90:de:e4:2a:
37:8c:87:48:24:9a:04:a1:60:7c:ca:58:d4:61:ba:
ef:19:e7:92:c2:0b:80:60:71:75:2e:bb:5e:90:38:
fa:d1:b9:c1:cd:5e:93:c8:8d:9c:95:49:23:20:33:
7c:8e:6d:a3:5f:0f:74:ac:0c:39:6d:ef:80:73:bd:
37:52:e6:6c:62:47:b0:97:eb:76:bf:b1:5a:b8:06:
a3:ee:dc:9f:86:87:ec:75:fd:66:e5:4a:f1:ba:b3:
b2:9d:ae:ac:2e:35:47:1e:ba:78:19:e6:86:40:aa:
13:0d:04:d2:d2:5e:c0:28:89:64:41:1b:be:7f:b6:
ff:f2:bb:e9:4e:80:86:36:3f:92:23:ae:61:47:61:
f8:78:5a:15:43:42:bf:c8:79:74:dd:73:08:e3:ca:
99:4b:22:8d:fc:19:31:5c:06:a8:ae:06:92:41:52:
e3:ed:05:b6:db:32:60:ca:a5:70:c0:e4:07:dd:26:
45:d0:42:ab:67:53:76:53:bf:7d:56:41:27:0c:ca:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:4D:CF:0A:EC:FE:92:70:1F:1A:09:25:33:B5:B8:18:9F:45:70
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b8:f2:44:1a:1b:17:1b:83:af:6a:87:ac:70:c5:1e:77:33:
9c:de:e9:0c:02:ca:c9:d0:83:24:9c:fe:cd:5b:3e:8e:58:b7:
ce:2d:f1:d3:0d:c9:44:ec:e1:15:ff:9f:07:df:fa:e8:d9:eb:
63:39:50:76:ab:96:c8:b9:1d:d8:59:14:d9:86:3f:c3:e5:89:
04:45:92:f0:8a:20:24:05:5a:19:f9:52:d6:3b:35:9e:bc:0a:
d1:d9:1a:86:35:9f:b2:ea:69:c1:03:0c:35:ac:0b:6f:98:4b:
8b:7b:23:4c:ad:c9:46:30:6f:df:b6:b8:c6:eb:7e:2c:cb:21:
fb:65:2f:0f:4b:d2:dd:b3:36:f6:45:7c:33:98:d5:93:f3:a1:
a1:6e:63:72:59:a6:06:a7:89:8a:9e:81:53:97:31:45:80:1c:
cb:b6:44:57:72:db:34:4c:68:66:16:51:8d:e6:b5:91:3a:65:
88:49:06:c8:14:e0:5e:bf:6d:c3:19:4d:81:bb:79:22:2f:67:
74:64:96:37:5f:37:25:fa:29:30:35:35:15:e0:15:3b:d3:d6:
70:80:e8:59:45:59:32:27:6a:e0:47:64:07:3e:76:c4:ff:b5:
c4:36:81:b9:4a:14:ad:82:56:a3:c7:c1:18:b8:ee:93:98:e4:
b8:a2:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:09 2025 by rpki-client