Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: Ou/28dsBsURh1wze8HrwSjbHnKRzEieWjMXfvJB6eck=
Subject key identifier: A4:F1:00:0C:CD:2E:26:0D:EC:C2:8A:71:A6:88:57:DE:3F:E3:B7:E9
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01988D6AB8A50855AFBF06255794C6571D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1633
Signing time: Sat 09 Aug 2025 06:00:38 +0000
Manifest this update: Sat 09 Aug 2025 06:00:38 +0000
Manifest next update: Sun 10 Aug 2025 06:00:38 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: XTaJoT4uT/jNMTdmBoDv3FZjJmbeOQD86rQ0QN0dOSg=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:b8:a5:08:55:af:bf:06:25:57:94:c6:57:1d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Aug 9 06:00:38 2025 GMT
Not After : Aug 10 06:00:38 2025 GMT
Subject: CN=a4f1000ccd2e260decc28a71a68857de3fe3b7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:a8:72:40:a1:06:60:c5:2c:7b:a1:6a:df:
6c:39:9b:41:77:38:5f:c9:ad:8c:81:bb:ba:d8:59:
79:f3:f9:9b:cc:d8:1f:c6:e5:04:b8:c5:63:23:1c:
96:00:1b:57:34:8a:aa:53:03:2d:27:a0:ad:be:ae:
d9:bb:1b:92:c1:68:5d:24:58:4a:d4:0b:48:df:23:
c8:0c:38:72:1d:e6:b4:18:86:bf:b6:b0:91:24:d9:
07:8a:da:62:ed:51:67:8a:0a:9e:62:3b:33:1f:13:
b7:44:3c:34:d5:5d:b1:f5:db:a3:3e:ef:eb:58:8d:
7e:3d:1d:f5:9f:9e:ed:b9:3f:dd:59:4e:1e:5c:e8:
67:8e:0d:08:18:12:8a:fd:53:ef:aa:cf:1c:90:79:
07:c8:53:75:e3:9e:e3:bb:ef:77:bd:7f:75:98:a4:
2d:20:52:cd:62:0a:f1:eb:e3:a6:28:59:24:8d:46:
f3:90:f0:45:10:7f:76:f3:32:87:19:f9:45:73:39:
95:19:d8:d2:b8:ae:4c:66:78:64:27:4c:63:f3:23:
ad:73:c2:fe:af:8e:17:7e:87:f6:55:8b:4a:bc:41:
33:01:98:01:7a:7d:a9:a9:61:2b:e9:24:ef:79:e8:
69:31:02:44:bf:c0:79:ca:a2:90:0a:5a:f5:3c:9b:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:00:0C:CD:2E:26:0D:EC:C2:8A:71:A6:88:57:DE:3F:E3:B7:E9
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:76:a5:95:91:fc:10:07:f7:a7:41:cc:24:a0:5a:e0:41:5c:
b8:4e:01:fa:41:d1:8f:f2:91:c2:bf:7d:86:cd:03:b9:8b:21:
33:b1:bd:06:44:65:38:28:46:2e:cf:d7:fe:5f:ef:aa:4b:f4:
cb:57:53:72:10:50:be:32:87:01:14:65:71:23:1b:7e:62:01:
ba:11:18:4f:1d:c4:2b:d6:56:dd:b3:a8:9c:4d:2c:9f:19:25:
cd:2c:72:80:ca:01:e6:c4:a4:ab:68:8e:40:50:b3:a6:f6:85:
89:6a:57:40:70:b7:49:ee:c5:39:d4:3d:b5:52:a8:22:be:4d:
16:5d:08:a9:0f:80:ba:c8:76:48:2a:9a:75:87:48:df:bc:02:
fe:c9:5f:5c:9b:56:0d:72:5f:55:c8:bd:ac:d3:6b:d8:9d:0f:
dc:c7:f6:b4:24:e7:f0:88:0a:9e:a4:68:eb:fb:96:fd:6c:59:
a5:58:83:23:d8:e9:9c:1b:72:57:23:ff:36:a1:23:71:e3:4b:
89:2e:6d:ac:d7:fc:5b:ad:bd:2e:89:d0:4a:29:10:6c:2b:fe:
bb:bf:6c:71:22:91:14:4b:61:8a:a4:c6:3b:98:fe:c2:68:59:
a8:e8:a1:01:d2:ee:6f:ad:2d:28:de:d0:31:29:a7:8c:42:52:
d4:fc:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:45 2025 by rpki-client