Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: WuKq0V4O1V4HaiUTQy2yjDqLtxdkg0xhnoY0cGV1OoM=
Subject key identifier: EE:01:9E:4A:C4:C0:B4:24:3F:0A:E2:8A:33:9F:04:A5:F9:EC:C1:CB
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 01984E8B7A05475B642FE8FBA180EBCE6829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 01:00:20 +0000
Manifest this update: Mon 28 Jul 2025 01:00:20 +0000
Manifest next update: Tue 29 Jul 2025 01:00:20 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: 1TFzRFA/OKAThhvXi4hweA/gV4CFezplga9QiBvhy1U=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:7a:05:47:5b:64:2f:e8:fb:a1:80:eb:ce:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jul 28 01:00:20 2025 GMT
Not After : Jul 29 01:00:20 2025 GMT
Subject: CN=ee019e4ac4c0b4243f0ae28a339f04a5f9ecc1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:a6:0a:89:54:68:37:5b:b3:03:fc:7c:2a:
65:79:b3:85:d3:b7:26:75:eb:c2:cc:48:77:ae:26:
0c:75:6e:45:b2:a6:f8:25:dd:cf:fe:32:17:5d:d9:
12:de:46:6c:2c:4a:e4:07:90:9a:3c:f3:32:98:06:
a9:e5:5a:d6:95:7e:08:73:ac:15:1f:50:12:1d:42:
7b:74:d4:c5:c1:5d:5b:7b:0e:cc:7f:79:1e:97:58:
8a:cb:0d:c4:12:d0:aa:30:a8:8e:2c:51:6e:32:41:
60:fc:79:8a:4c:9a:43:bb:e5:29:b0:53:67:5e:1d:
9c:6b:d9:1f:c1:c0:37:69:50:4a:0e:81:5e:26:2c:
98:07:77:1e:ee:67:3f:64:55:58:bb:64:2c:6c:d2:
d8:54:47:4f:f2:9f:72:99:fb:01:a8:7a:d4:40:ff:
ef:7b:32:f7:2f:e5:bf:3c:31:5a:ba:fc:5b:22:96:
fe:11:de:ee:76:ea:cb:c9:0a:22:ca:3a:6c:5f:9c:
d6:c7:48:f6:28:32:f8:f7:87:d7:bb:97:68:43:78:
62:59:92:a7:08:3c:da:de:94:13:93:60:67:d4:fd:
5a:d8:0e:2b:76:e1:ad:f7:90:2d:f2:a8:46:b0:66:
e4:61:de:e5:69:77:d0:3d:bb:ef:d6:72:23:57:79:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:9E:4A:C4:C0:B4:24:3F:0A:E2:8A:33:9F:04:A5:F9:EC:C1:CB
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a6:01:5d:b2:2e:21:73:d6:02:e0:8a:34:32:50:24:e7:5c:
4b:58:9a:25:84:14:7d:78:57:16:fa:eb:18:86:f9:18:69:e8:
fd:f7:26:94:dd:9d:ff:da:31:99:37:db:4a:44:39:0b:07:99:
2c:36:dd:71:4f:34:06:48:35:f6:21:e3:22:cc:e7:86:b4:d5:
c2:67:6c:51:d8:e1:5a:c4:82:f9:0a:01:40:0f:df:6a:99:54:
94:54:d7:3b:d1:f4:70:d7:39:b9:e3:c5:bb:47:ac:26:78:93:
5a:bd:65:c2:99:1f:dd:b1:0b:d4:9e:3f:89:1e:99:ca:fc:48:
c3:3f:0b:b4:46:0c:12:ea:3d:97:4b:ed:d9:17:a6:cf:20:67:
90:61:0c:16:14:bb:86:25:8d:11:fb:88:05:9d:d3:b5:e5:2b:
a1:bd:a0:73:7d:17:28:f6:78:5a:c2:87:ac:4b:60:f8:a4:63:
a5:d6:7f:2b:ab:fd:03:e5:1c:2d:e2:cc:37:d4:0d:d2:41:91:
2b:24:fd:cf:24:ae:5e:43:4a:5d:b4:11:07:cc:cc:d1:a7:0b:
57:a9:70:11:0b:15:b0:3c:1c:0d:c0:c3:4c:c9:0b:da:fe:93:
ad:30:55:36:3b:16:b8:38:44:c1:fe:35:f4:68:f4:b1:c3:be:
53:f6:65:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOi3oFR1tkL+j7oYDrzmgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl
OTc0YzkwHhcNMjUwNzI4MDEwMDIwWhcNMjUwNzI5MDEwMDIwWjAzMTEwLwYDVQQD
EyhlZTAxOWU0YWM0YzBiNDI0M2YwYWUyOGEzMzlmMDRhNWY5ZWNjMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOymColUaDdbswP8fCplebOF07cm
devCzEh3riYMdW5Fsqb4Jd3P/jIXXdkS3kZsLErkB5CaPPMymAap5VrWlX4Ic6wV
H1ASHUJ7dNTFwV1bew7Mf3kel1iKyw3EEtCqMKiOLFFuMkFg/HmKTJpDu+UpsFNn
Xh2ca9kfwcA3aVBKDoFeJiyYB3ce7mc/ZFVYu2QsbNLYVEdP8p9ymfsBqHrUQP/v
ezL3L+W/PDFauvxbIpb+Ed7udurLyQoiyjpsX5zWx0j2KDL494fXu5doQ3hiWZKn
CDza3pQTk2Bn1P1a2A4rduGt95At8qhGsGbkYd7laXfQPbvv1nIjV3m7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4BnkrEwLQkPwriijOfBKX57MHLMB8GA1UdIwQY
MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt
OWUyNDNjMmQ4ODIxLzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx
LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1KYBXbIu
IXPWAuCKNDJQJOdcS1iaJYQUfXhXFvrrGIb5GGno/fcmlN2d/9oxmTfbSkQ5CweZ
LDbdcU80Bkg19iHjIsznhrTVwmdsUdjhWsSC+QoBQA/faplUlFTXO9H0cNc5uePF
u0esJniTWr1lwpkf3bEL1J4/iR6ZyvxIwz8LtEYMEuo9l0vt2RemzyBnkGEMFhS7
hiWNEfuIBZ3TteUrob2gc30XKPZ4WsKHrEtg+KRjpdZ/K6v9A+UcLeLMN9QN0kGR
KyT9zySuXkNKXbQRB8zM0acLV6lwEQsVsDwcDcDDTMkL2v6TrTBVNjsWuDhEwf41
9Gj0scO+U/Zlzw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 09:28:31 2025 by rpki-client