Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: Q+3myUskD0LIkVL/1SsKn9ZAtI1WYAHG6gSbL6smaQQ=
Subject key identifier: 85:DA:13:0C:2E:94:31:5C:F4:D7:BF:3F:26:DD:C4:2A:EA:9E:8F:4B
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019750B3E38DE03692B5AAB1CD106A800281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 158F
Signing time: Sun 08 Jun 2025 18:00:55 +0000
Manifest this update: Sun 08 Jun 2025 18:00:55 +0000
Manifest next update: Mon 09 Jun 2025 18:00:55 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: SrDzirQ9roJhKa+SCJj0d37JO5/Q6mbxEegcoDdaFvE=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:e3:8d:e0:36:92:b5:aa:b1:cd:10:6a:80:02:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jun 8 18:00:55 2025 GMT
Not After : Jun 9 18:00:55 2025 GMT
Subject: CN=85da130c2e94315cf4d7bf3f26ddc42aea9e8f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:fc:ad:2c:a8:13:17:2d:12:c4:05:ef:b6:
82:25:47:60:96:33:bf:be:84:29:d6:95:70:9a:08:
b3:24:a1:37:e5:26:80:90:a3:db:04:8f:d4:67:fa:
cc:73:db:b2:64:5c:81:fe:58:45:74:05:e0:aa:86:
04:ba:1b:9e:78:af:51:d6:04:e1:20:2a:12:12:e8:
59:e9:40:1d:5a:ea:34:7c:62:fc:b2:92:bb:a5:59:
7a:0c:50:62:03:3f:fe:ba:35:4c:f2:1d:91:ee:44:
fe:58:ce:70:ce:cf:a6:e6:93:df:b6:1a:20:8e:29:
28:ce:63:77:18:25:2a:35:06:62:22:e1:d3:07:29:
40:42:de:38:7c:50:d9:eb:2b:ee:02:aa:12:44:11:
74:bb:4e:46:e4:68:c9:49:09:e9:a2:77:cf:8a:bd:
14:eb:d3:bc:d7:0a:a4:a4:b0:bd:74:21:e4:bb:87:
1b:b6:32:6a:7a:d1:45:0f:27:2c:7a:d2:32:83:2a:
02:3b:31:f0:85:e3:d3:c1:95:97:0e:65:83:b6:e2:
26:77:36:e3:4f:f2:50:60:2f:f1:63:38:5a:c2:20:
e7:ff:b6:5c:30:33:2e:88:54:08:2d:28:fa:73:3f:
b0:ba:7b:6a:bd:6e:fd:c3:d0:d4:f6:f5:1e:67:fe:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:13:0C:2E:94:31:5C:F4:D7:BF:3F:26:DD:C4:2A:EA:9E:8F:4B
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:3e:99:65:66:28:4c:22:32:0d:db:cd:97:59:40:18:9b:
8a:f2:9a:a5:0f:3d:1e:46:2a:86:79:0c:cb:e5:81:85:83:f2:
10:af:4f:f8:ef:5c:65:52:68:6d:e1:32:b7:f0:39:2e:84:e2:
11:cc:ab:e9:b3:6c:ff:27:1f:7a:00:4b:72:aa:ec:a1:3c:b0:
3f:8a:26:14:a0:bb:9e:46:bd:eb:25:c5:9b:61:06:4e:d4:cf:
dc:52:9a:92:a1:3f:d1:31:4a:46:df:1f:c0:b3:ee:f2:be:b9:
45:8d:c0:7d:eb:2a:8e:9d:6f:d7:0f:86:15:76:28:21:9e:44:
f5:78:9c:a2:d8:45:1d:ea:f9:3d:97:9a:84:76:0a:80:79:de:
6c:29:3d:05:0b:79:e2:e0:a7:b9:aa:33:9c:ca:5d:48:50:8f:
39:31:99:b1:72:ae:46:b5:34:5e:50:3f:b8:c3:06:83:42:7f:
77:81:51:76:ff:06:68:9d:78:88:67:6a:88:95:8f:b0:64:da:
5c:f5:3e:fa:34:e3:27:1e:0b:f8:2a:fa:14:47:39:bd:2c:c0:
3e:16:40:19:b1:6b:8b:09:df:d3:ba:31:8d:be:bd:f4:9d:79:
eb:76:f9:4f:aa:d8:49:6c:e8:16:97:dc:46:a9:4e:4f:53:e1:
a2:c7:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:57 2025 by rpki-client