Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: 9tzYV3JyFoX2fS1l7cX6BYO09JcGHQGTrsTrLlrVfUY=
Subject key identifier: BD:99:70:92:A4:53:FB:AE:FF:44:B8:FC:54:22:C5:06:AC:69:29:E3
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 019921B0B2CEA800334BD5CF49DB0E698DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 102E
Signing time: Sun 07 Sep 2025 01:00:52 +0000
Manifest this update: Sun 07 Sep 2025 01:00:52 +0000
Manifest next update: Mon 08 Sep 2025 01:00:52 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: dftX+Lr4TNr6Qj8E8NkXR3cf7fK1n2+jxCYdR/ha9ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b2:ce:a8:00:33:4b:d5:cf:49:db:0e:69:8d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Sep 7 01:00:52 2025 GMT
Not After : Sep 8 01:00:52 2025 GMT
Subject: CN=bd997092a453fbaeff44b8fc5422c506ac6929e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:76:5c:c2:0a:64:58:36:14:2e:07:4b:1c:
83:d3:6f:3d:03:91:1c:e3:47:4f:5c:19:be:93:a3:
2f:e9:35:db:a0:ef:a8:f6:ee:3a:16:4d:ed:d2:6a:
64:34:e2:a5:8e:ea:30:77:75:b6:db:54:31:71:51:
fb:45:dc:18:6e:c2:19:58:e7:68:8b:51:80:c3:69:
c5:5c:b4:07:42:0f:31:f5:b8:db:a3:25:83:ba:94:
a8:ac:5c:92:bc:81:75:e3:4a:2b:61:82:69:8f:0e:
fc:8d:60:90:bc:0a:bd:ba:40:38:de:6a:2b:ef:c9:
27:f2:46:68:72:59:f8:ce:44:34:a4:07:42:45:05:
ec:38:8b:bc:80:5f:98:f0:d1:23:a8:d9:50:93:54:
b9:62:1d:97:4f:78:e4:eb:18:8d:db:e3:d5:02:57:
8d:75:44:34:1e:92:e2:7d:66:96:aa:0c:9e:58:c5:
42:32:18:92:8d:d0:98:8b:53:29:4f:10:bf:a6:2b:
8c:ee:99:89:0b:ca:18:29:65:f0:b8:36:cd:8c:0b:
12:7f:71:5b:bb:28:b1:39:24:ab:b3:3b:1e:b9:76:
6e:33:0f:f2:8e:87:13:4e:20:b1:2d:a1:cb:ff:89:
e5:e5:8e:64:fe:b0:0a:d2:3b:53:8c:63:db:03:2d:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:70:92:A4:53:FB:AE:FF:44:B8:FC:54:22:C5:06:AC:69:29:E3
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:df:d4:c1:6a:7d:f0:63:fa:d1:0b:ac:cf:22:40:f0:a4:
82:70:a6:dc:00:56:a4:33:61:60:63:f8:b5:29:af:14:81:45:
62:3d:c4:fd:a3:71:32:1a:36:38:d9:3d:a8:a9:53:ef:f1:79:
de:9f:4c:62:86:d0:3b:6f:c7:67:28:9b:c5:9e:77:7a:81:cc:
47:54:dd:e0:56:ba:f5:b1:02:38:62:a8:9f:21:2b:c6:21:90:
27:6d:4c:ad:52:4e:e8:e8:ef:db:b7:8a:b4:e4:9f:02:99:be:
00:a8:89:fa:6e:8f:39:4b:ca:09:d6:99:d6:0a:68:db:62:99:
29:b8:a6:6c:0c:57:b0:f8:af:05:e3:93:a9:09:3f:d4:26:92:
38:71:70:16:95:17:85:4e:d6:0d:55:2b:9f:f3:03:57:5b:81:
77:91:2c:8e:9b:32:46:92:6c:f2:1f:cf:1b:bb:05:f3:15:04:
14:9a:fb:23:b5:55:e6:03:21:f6:42:ef:01:de:b8:51:06:fa:
73:3d:94:bf:79:0d:8f:a9:c8:f3:a2:31:6d:c1:c1:9f:59:0c:
06:34:35:f2:24:62:23:35:8f:ed:b4:3e:06:48:63:c8:a3:1d:
76:ba:fd:98:40:5a:92:80:12:2d:4a:76:53:da:cf:99:f6:ef:
3e:94:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:26 2025 by rpki-client