Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: 8heJUROPNtjhdXAnOMGrrYbEPuSiIs5plhcUj672YcY=
Subject key identifier: 02:E5:7C:BF:3B:76:1C:9C:7E:05:A4:0D:D4:CC:5C:80:17:67:AB:1A
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0198496563E784CB0960101ECF97D9508C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0F7D
Signing time: Sun 27 Jul 2025 01:00:38 +0000
Manifest this update: Sun 27 Jul 2025 01:00:38 +0000
Manifest next update: Mon 28 Jul 2025 01:00:38 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: 8Z2b+7EFzFzaJl46zQLr/iOvpC1MvwHwovmDQ0ZwcvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:63:e7:84:cb:09:60:10:1e:cf:97:d9:50:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Jul 27 01:00:38 2025 GMT
Not After : Jul 28 01:00:38 2025 GMT
Subject: CN=02e57cbf3b761c9c7e05a40dd4cc5c801767ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:73:5a:5f:7d:37:d1:87:0d:43:f9:1c:ff:
96:3d:da:30:ff:b8:02:3f:00:53:20:4b:68:57:a4:
02:13:92:7f:d6:b7:a9:4b:fa:d3:81:4e:1f:87:6f:
58:01:79:f3:cb:b8:8c:c7:ea:58:f3:35:3c:e6:21:
8f:a5:4c:a8:f0:24:ca:02:62:54:85:af:85:4e:cb:
95:ad:e2:b4:22:47:2c:ad:15:34:4c:36:ba:d2:52:
ed:75:1f:4c:24:a8:c2:aa:b0:7a:f1:4d:c9:cc:21:
b7:c4:40:85:44:2c:e5:36:b0:4b:40:fd:07:4d:35:
05:4c:d5:8f:be:3a:3b:41:9f:7f:79:d4:9c:f7:b0:
0b:7b:f2:83:b6:cf:4f:eb:24:22:75:b5:c0:ac:14:
76:e5:c5:1c:0b:b2:5f:09:38:66:9b:c5:63:ce:02:
50:55:64:0b:47:bb:c7:f5:a4:3a:79:3b:ba:a5:44:
26:a5:7b:a5:b5:86:9f:f2:e7:bd:cb:43:e6:01:a4:
c0:84:2c:b0:53:63:a7:d7:47:54:b8:b3:4d:79:12:
a7:1e:62:95:a7:ea:9b:cf:c4:74:f6:75:9d:a4:5e:
11:ec:36:b5:d9:23:f5:6d:ba:ca:51:1e:c3:f0:48:
94:54:ee:5d:fb:1c:f4:f9:a7:7b:ae:a6:67:ea:40:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:7C:BF:3B:76:1C:9C:7E:05:A4:0D:D4:CC:5C:80:17:67:AB:1A
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:6f:06:22:b9:fa:16:87:be:34:d4:c8:79:06:a1:dc:bc:
36:e7:93:f6:a4:62:7c:a4:59:ee:9d:56:85:0c:a4:38:34:6c:
84:e1:f9:c7:7f:7a:b5:33:5e:22:88:c3:69:0e:2c:4a:2d:81:
ab:15:3f:97:d6:25:18:fc:ed:ef:2d:5b:4f:f1:91:05:69:17:
c1:c8:49:5e:7d:7a:b0:90:bf:62:a3:7c:63:9f:84:ed:7b:05:
6d:66:59:6f:05:95:2c:7f:a8:6a:8e:9a:d8:eb:31:5c:f5:e8:
bc:7a:be:9c:49:22:8c:39:c3:cf:51:5a:60:20:e7:5f:22:5d:
e9:cb:ca:7b:d5:b9:c2:4b:d0:be:09:9a:9c:af:fb:72:66:7d:
78:c9:92:20:23:e1:ae:08:c4:9b:43:d1:f2:41:83:fe:3d:2d:
fa:ab:da:0a:0f:3a:d1:ac:e5:31:b5:27:bd:bc:d3:99:c3:f1:
c5:47:95:d3:0d:5b:af:53:8b:1c:3b:43:3e:0f:73:52:b5:6f:
f2:46:f7:4a:57:7e:44:12:cd:48:eb:32:5e:4d:ad:a9:a9:00:
c3:d9:ee:12:93:f0:6b:27:f4:10:d5:37:98:2d:a1:06:dd:f6:
3f:80:ab:47:50:87:09:bc:3f:ce:81:4c:c4:6e:46:51:a7:b5:
7e:9c:c7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZWPnhMsJYBAez5fZUIxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmMzZjAyMzIzMDNmNWIwMzc3NDVlYzUzYTY2YzczODI1
NmJmNDMwHhcNMjUwNzI3MDEwMDM4WhcNMjUwNzI4MDEwMDM4WjAzMTEwLwYDVQQD
EygwMmU1N2NiZjNiNzYxYzljN2UwNWE0MGRkNGNjNWM4MDE3NjdhYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh5zWl99N9GHDUP5HP+WPdow/7gC
PwBTIEtoV6QCE5J/1repS/rTgU4fh29YAXnzy7iMx+pY8zU85iGPpUyo8CTKAmJU
ha+FTsuVreK0IkcsrRU0TDa60lLtdR9MJKjCqrB68U3JzCG3xECFRCzlNrBLQP0H
TTUFTNWPvjo7QZ9/edSc97ALe/KDts9P6yQidbXArBR25cUcC7JfCThmm8VjzgJQ
VWQLR7vH9aQ6eTu6pUQmpXultYaf8ue9y0PmAaTAhCywU2On10dUuLNNeRKnHmKV
p+qbz8R09nWdpF4R7Da12SP1bbrKUR7D8EiUVO5d+xz0+ad7rqZn6kCxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALlfL87dhycfgWkDdTMXIAXZ6saMB8GA1UdIwQY
MBaAFLS8PwIyMD9bA3dF7FOmbHOCVr9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgt
OGY5ZTIzYzYwNjA2LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgtOGY5ZTIzYzYwNjA2
LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHNvBiK5
+haHvjTUyHkGody8NueT9qRifKRZ7p1WhQykODRshOH5x396tTNeIojDaQ4sSi2B
qxU/l9YlGPzt7y1bT/GRBWkXwchJXn16sJC/YqN8Y5+E7XsFbWZZbwWVLH+oao6a
2OsxXPXovHq+nEkijDnDz1FaYCDnXyJd6cvKe9W5wkvQvgmanK/7cmZ9eMmSICPh
rgjEm0PR8kGD/j0t+qvaCg860azlMbUnvbzTmcPxxUeV0w1br1OLHDtDPg9zUrVv
8kb3Sld+RBLNSOsyXk2tqakAw9nuEpPwayf0ENU3mC2hBt32P4CrR1CHCbw/zoFM
xG5GUae1fpzHPA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:49 2025 by rpki-client