Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: 7W2DHZOGkTlTXvDakF62/+HT1ZjGQoKHLTdhREXUG54=
Subject key identifier: F3:6A:DD:1F:D4:42:FE:D7:B0:6D:0F:31:B6:45:33:98:B9:12:85:0F
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019768BBC09D5EEA0A82D4A63394FDDA3D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:24 +0000
Manifest this update: Fri 13 Jun 2025 10:00:24 +0000
Manifest next update: Sat 14 Jun 2025 10:00:24 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: qskTB2YPkKeB0EjXt5kVl/AFoPEttyh1SlUIZ9G6Lwc=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c0:9d:5e:ea:0a:82:d4:a6:33:94:fd:da:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jun 13 10:00:24 2025 GMT
Not After : Jun 14 10:00:24 2025 GMT
Subject: CN=f36add1fd442fed7b06d0f31b6453398b912850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:d6:c4:f8:da:cc:4b:f0:1f:8c:30:cb:96:
52:91:0b:b3:5a:13:da:9b:62:90:53:04:bb:1a:6e:
53:78:10:78:36:16:25:ff:70:18:d8:b4:34:9c:cc:
4a:34:da:33:df:36:ac:ca:a4:fb:92:93:54:e2:ab:
4e:90:4a:9a:31:9b:a2:bb:43:c8:63:60:00:61:0d:
8d:bb:6f:85:d3:85:7a:62:2c:1c:2c:2b:a0:a7:a9:
42:d0:69:7a:63:6b:dc:32:27:d2:4b:b9:74:7c:59:
a1:39:37:b7:65:39:f0:a3:ff:1f:05:de:13:a6:a4:
94:71:aa:b4:18:cc:9d:4f:f4:61:b9:fe:e1:4a:0a:
0b:6d:c3:b5:cd:0c:41:1a:ea:c0:17:f3:8d:d0:5b:
30:97:39:73:16:f2:49:08:ea:4a:d9:af:f6:9a:bd:
e4:cb:22:2f:7a:ec:87:e2:2b:72:7c:65:76:21:ab:
e7:5f:62:50:0e:87:13:1a:d0:53:82:9c:2f:35:ff:
eb:1e:4c:dc:e0:ea:dd:de:4f:6e:83:1c:96:4f:65:
6e:43:6e:dd:15:6b:1c:5f:fd:e2:fb:af:06:20:e8:
f1:1c:45:39:c4:c2:bd:aa:46:43:47:b7:0a:5e:ff:
bf:f8:af:02:f9:55:23:1f:bf:2c:a9:46:55:94:1c:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:DD:1F:D4:42:FE:D7:B0:6D:0F:31:B6:45:33:98:B9:12:85:0F
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e1:01:4d:35:8c:f6:6e:1a:e8:88:8a:07:00:45:13:77:80:
3c:4c:cd:5a:8f:a8:71:92:e9:b9:58:d1:e0:b2:bb:68:a3:c3:
4f:2b:20:75:68:ff:4c:83:95:75:45:e2:82:d0:a4:a1:e0:89:
9a:07:ef:d8:22:df:84:39:17:99:1c:a6:30:2b:61:10:5d:2e:
03:83:89:de:b9:0d:ff:ce:a6:66:cd:f4:fd:bd:48:6c:af:4f:
7f:93:0d:bf:cb:3d:13:8d:09:10:d6:f7:ee:48:94:2b:f5:96:
61:a2:f5:cc:47:3d:bd:dd:f3:e6:0a:96:76:c8:5a:45:9b:7c:
c4:0e:0d:9f:b7:84:ec:46:c5:e3:be:bc:a7:f7:b3:4b:da:f7:
33:73:f5:4d:33:df:02:4b:01:50:48:bd:26:4e:2e:5f:de:89:
66:09:ea:e7:33:7c:a9:3a:9d:0a:74:b6:7a:52:62:9b:3a:6e:
f2:16:5b:7d:27:18:c5:ad:ca:e1:95:e5:e2:48:80:e6:a6:e7:
c7:fd:3d:18:c6:0e:e8:c3:91:27:93:01:12:48:c6:9e:5f:6b:
75:39:4f:01:a0:4c:e2:93:23:8f:bd:db:59:b4:04:16:66:1d:
a1:dd:be:56:f8:e1:ae:5e:89:a6:e5:ef:98:81:0f:82:29:90:
36:94:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:24 2025 by rpki-client