Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: BxJx9UjHUrJk6ufvD6NakoHliU3WBv8qe6d0bMZ72D8=
Subject key identifier: D6:DB:AD:37:C6:02:98:22:3E:44:5F:13:7E:7F:82:3F:DA:AA:AF:69
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019A7112CD5CEE32F68E87F143171F97BA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: TqdivEx9j51/rl3yNx2ObhPCVAxYcPMbRi2UKaLqjVQ=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cd:5c:ee:32:f6:8e:87:f1:43:17:1f:97:ba:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=d6dbad37c60298223e445f137e7f823fdaaaaf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:51:0a:fd:34:dc:25:9b:bb:09:af:9b:76:
25:97:a3:38:ef:f8:c4:87:e4:64:87:a0:ff:c0:2f:
60:12:11:dc:6e:90:02:e5:14:f6:9c:c8:85:a1:de:
34:25:63:35:53:85:8f:c2:d0:05:18:6f:c7:ef:36:
5d:49:69:40:2a:5e:ed:43:ac:57:da:9f:f2:11:33:
bf:43:b8:02:b3:32:8e:30:8b:77:9d:c7:5c:b9:54:
60:c6:e0:f0:af:be:4b:62:f4:5f:fa:53:56:65:c5:
8f:b2:dc:0e:f8:43:5a:7c:96:d7:1f:0f:6a:5d:75:
b1:42:89:3f:65:36:9b:62:c3:4d:91:eb:98:08:7e:
e7:87:d5:81:da:e0:61:42:ed:fe:13:03:86:28:79:
73:ea:5b:71:92:bf:00:dc:93:c6:a0:1f:8e:53:9f:
3c:73:da:8a:99:5e:db:48:3d:09:7d:68:fb:55:b3:
85:79:44:8f:ec:ee:dd:0d:b1:21:e9:7c:5f:91:08:
07:55:db:e8:a5:0c:f4:72:02:f5:ff:77:ea:84:78:
c2:58:ae:2b:42:7b:71:73:89:16:4b:1e:dd:2a:6e:
23:84:79:db:5b:10:63:29:4b:6e:aa:b5:96:38:99:
2f:27:89:e3:0c:28:a4:06:10:da:dd:81:7e:b7:47:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:AD:37:C6:02:98:22:3E:44:5F:13:7E:7F:82:3F:DA:AA:AF:69
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:09:35:4a:55:0d:26:aa:67:5a:90:e0:57:89:85:bd:14:
9e:bb:67:c4:27:80:cc:74:95:dd:cd:1b:d5:f9:b0:06:67:e3:
ec:d8:1e:37:62:e4:fb:ae:3e:cb:73:b4:fb:2e:8c:f6:aa:2e:
e3:64:7c:4a:7e:a1:7d:6c:26:84:8f:de:ec:08:3c:e5:05:29:
ca:13:2f:77:50:32:4a:4f:44:b1:5b:fa:7f:e9:7b:5a:e8:ff:
67:e3:c6:16:bc:1a:6d:5d:fa:94:aa:fe:d2:ab:61:cc:df:37:
cb:9e:e2:ea:1e:45:37:33:4a:0a:72:74:d2:55:bf:37:3f:8a:
a1:66:cd:90:a3:74:91:0b:69:39:3b:0f:8f:e9:2a:53:e5:1f:
ad:62:97:38:80:03:1a:8c:f7:09:f2:09:7a:e5:41:2e:21:ab:
c0:66:6d:80:d4:04:0d:fb:71:a2:31:50:24:74:b6:a1:32:b5:
ac:9b:e0:c6:34:b2:ed:54:6e:1c:f1:e8:62:02:b2:ea:e8:27:
91:6c:8c:1c:94:36:4f:e9:cb:ba:c9:de:32:d4:5f:da:44:99:
93:b9:1e:82:6c:05:23:ea:4e:02:92:c2:8b:71:21:4d:3a:d2:
ec:fe:30:50:82:98:86:b8:64:d2:0a:cc:27:46:e0:aa:dc:eb:
46:11:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:40 2025 by rpki-client