Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: emMBEICaYFeeWuTwnWiiqN+fagIZEyZ8VNoejMUFTTk=
Subject key identifier: D3:C6:D1:33:33:3E:5A:F4:64:CF:0D:D3:3D:84:5C:8D:A5:60:A7:BE
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01976F99781E4D418F3401B3FA01F68874F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 18:00:18 +0000
Manifest this update: Sat 14 Jun 2025 18:00:18 +0000
Manifest next update: Sun 15 Jun 2025 18:00:18 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: VEyRiZ+f5LGok0/xuYba51J7cxUdacJD8TQgSpeCyDI=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:78:1e:4d:41:8f:34:01:b3:fa:01:f6:88:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jun 14 18:00:18 2025 GMT
Not After : Jun 15 18:00:18 2025 GMT
Subject: CN=d3c6d133333e5af464cf0dd33d845c8da560a7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:1d:ab:85:1f:4f:58:a8:22:46:98:f6:3b:
d1:84:29:ad:38:00:dd:42:f8:f8:7f:89:e1:8d:61:
e3:7b:0f:35:96:19:10:67:fa:82:03:61:0c:b5:49:
ef:b9:e2:7e:ea:66:9a:86:ee:6f:3d:19:00:11:e7:
58:22:02:c5:2b:84:1b:d7:74:96:32:8d:98:a8:50:
60:e1:27:33:c3:66:85:49:73:5a:6a:f7:2c:0e:6a:
be:b8:ef:dd:13:40:e5:bf:e3:cf:3b:12:90:f6:70:
8d:93:a5:41:f5:17:e4:b6:84:28:a8:59:4c:fe:b8:
db:b7:d2:f7:07:53:f7:42:d8:a0:0c:ca:5f:67:bb:
04:51:f8:e1:6f:15:af:48:dd:f8:e3:99:21:e6:8b:
67:73:cf:06:35:2d:03:d0:14:f3:fc:a5:b0:5a:88:
71:a7:fb:b2:a9:e6:46:97:5f:69:27:c8:be:a0:9f:
0f:3b:ca:cc:3b:c3:2a:94:6e:cc:78:2f:79:3b:a6:
c0:53:3a:dc:df:c2:08:ca:43:36:2b:27:68:cb:ba:
e8:ca:1a:3a:62:2c:29:99:46:cf:70:59:c2:bd:f5:
a1:21:88:6c:0f:57:8b:43:00:dd:55:d2:e5:94:89:
0f:a4:79:8b:7d:5a:b9:31:fa:41:02:d4:09:14:b1:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:D1:33:33:3E:5A:F4:64:CF:0D:D3:3D:84:5C:8D:A5:60:A7:BE
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:31:b7:e9:cc:50:fc:af:59:b1:d1:70:7c:c2:e2:b2:61:
ab:14:38:d7:0c:dc:23:17:36:85:fe:2b:36:8f:7c:23:00:23:
fa:a2:a8:27:fe:7c:ec:e1:60:ff:26:8a:dc:d0:b0:58:29:19:
ac:46:12:27:a6:53:ce:7d:07:ad:77:4b:bc:c5:59:9a:fc:fc:
af:87:5f:22:85:00:80:3b:df:7e:96:4a:0a:35:7a:b5:a6:26:
b6:bf:57:71:55:57:6a:64:fb:a8:47:58:38:c7:b7:e1:5d:72:
19:ed:58:07:b2:75:bd:e4:1f:65:af:4a:d0:a9:56:9e:46:d7:
cd:f9:56:cf:f1:d0:01:fa:4d:69:c4:43:e4:19:d9:c4:78:2e:
d3:97:23:61:61:7a:18:d0:4a:df:14:49:8f:65:bb:42:c0:71:
cc:e5:0a:4a:97:96:34:bf:e8:02:12:49:f3:94:ac:a2:80:d4:
59:15:6a:f7:1d:c4:27:bd:5a:ba:f2:47:77:c4:e0:00:a2:52:
dd:a4:62:38:b3:24:c5:e1:a6:3b:b9:fe:48:98:fa:4c:7e:12:
6b:c9:05:5b:16:06:63:71:5d:a4:d5:9b:af:e9:3b:07:ea:df:
b8:6e:e8:2d:4e:58:7b:50:2c:2e:48:b5:bd:3d:93:61:6b:5f:
f9:84:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:07:19 2025 by rpki-client