Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: woXJJsxZJVUbwX1gQ7yro53y9QrN6Ep2/xRsRUqv3mc=
Subject key identifier: 1C:63:AA:86:FB:F8:EC:D1:51:5C:82:C2:FA:5D:81:B1:0D:3F:69:A4
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019849D2E4E617294F4A4E89E312554038A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1610
Signing time: Sun 27 Jul 2025 03:00:14 +0000
Manifest this update: Sun 27 Jul 2025 03:00:14 +0000
Manifest next update: Mon 28 Jul 2025 03:00:14 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 3Io2v7n3/va1qXV8SCMtV32L651CtSzStompgIi1NJE=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e4:e6:17:29:4f:4a:4e:89:e3:12:55:40:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jul 27 03:00:14 2025 GMT
Not After : Jul 28 03:00:14 2025 GMT
Subject: CN=1c63aa86fbf8ecd1515c82c2fa5d81b10d3f69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:5c:20:16:27:da:80:45:50:34:28:39:89:
f2:9a:21:c2:df:20:db:70:5e:02:da:c7:27:14:f7:
e1:c9:0b:2b:42:3d:66:8f:16:92:56:ad:47:81:24:
fa:52:c3:10:21:12:60:d2:7a:1e:e4:d8:d1:bf:ac:
de:0b:19:e0:c2:bd:0c:a3:2c:66:37:3d:98:12:74:
c1:5d:97:e0:8f:8f:22:99:e6:58:f4:ad:f4:d8:ed:
7c:d0:c0:38:f1:ec:99:d8:5a:05:16:1b:95:22:21:
61:64:65:29:e7:15:64:ab:38:2a:2e:2d:9a:22:b5:
37:28:e5:f2:e9:7b:b0:b0:71:c7:ac:a8:d1:4c:35:
f4:14:86:d6:1f:42:e5:2a:1f:e6:16:86:dc:57:69:
00:8f:98:32:2d:9d:7a:f9:ed:8e:e1:2a:3f:89:8a:
31:e3:2a:46:ea:53:a1:a1:d6:f2:ff:69:6f:bf:c3:
d7:55:14:1d:a7:cd:c5:d1:b6:b4:5d:00:db:36:19:
96:20:15:f7:e8:12:01:04:28:12:59:dc:3e:70:62:
33:26:c0:b7:e4:dd:fb:a0:0a:cc:71:15:1c:c2:72:
0c:db:d8:a3:e4:8d:74:1e:1e:cc:ef:ba:70:32:5b:
15:0b:0d:43:c7:91:5f:e7:fd:a5:84:58:de:c4:16:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:AA:86:FB:F8:EC:D1:51:5C:82:C2:FA:5D:81:B1:0D:3F:69:A4
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:76:c1:9e:bc:74:42:7e:74:e8:e9:e3:44:4b:88:41:30:
27:41:9f:32:ca:e8:d5:d0:7a:6d:4f:d2:89:fd:bc:a5:79:aa:
30:1a:ec:4c:47:f6:45:8f:c2:08:aa:31:08:01:de:5d:e9:3c:
5b:73:75:ae:e4:c8:ff:4e:14:1f:f8:f3:d3:ce:24:5c:8b:29:
f7:76:4d:fa:5f:02:bf:6c:ce:2f:77:f3:2a:3e:be:06:2f:fa:
8d:97:27:58:a0:2e:be:87:76:ec:c7:4e:2d:07:9a:13:97:39:
8f:0f:d0:dd:42:06:1a:17:17:0e:8d:a4:5a:ae:f6:ed:b9:e1:
f0:68:e8:5b:d2:42:de:1a:15:65:52:19:ea:86:56:95:49:1c:
4f:f8:b4:88:d6:b6:8c:13:37:58:6a:c3:5d:6f:da:93:83:ef:
4b:9f:64:ba:0b:0f:59:94:1a:16:8a:db:7e:b8:12:f2:2c:1e:
ef:22:61:da:a4:fb:b1:2d:0d:85:c4:cd:fa:cf:7c:45:86:52:
3b:f5:d6:fc:34:02:0d:55:1a:95:49:c8:fb:d0:4f:b7:5b:22:
e6:35:8a:1e:52:67:84:88:3e:99:84:c5:b8:e7:da:95:ea:19:
8b:ab:e7:34:00:33:cb:f7:28:b8:b0:a4:69:63:45:64:5c:27:
02:56:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:54 2025 by rpki-client