Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: IYGeNGMi7iKeDFe2biO8UhY2Pi2qpU3Q7zQrD9eZzVM=
Subject key identifier: 2A:F1:2B:1E:05:92:72:9F:23:89:5F:24:4C:E1:42:FA:28:07:74:0D
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 0199247A828A3101690CC74D5D9714CE3AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1227
Signing time: Sun 07 Sep 2025 14:00:32 +0000
Manifest this update: Sun 07 Sep 2025 14:00:32 +0000
Manifest next update: Mon 08 Sep 2025 14:00:32 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: YcbhehPSRJ7j5oiIP0HJtePb6pgcpTpUv9j8p/XKU4I=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7a:82:8a:31:01:69:0c:c7:4d:5d:97:14:ce:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Sep 7 14:00:32 2025 GMT
Not After : Sep 8 14:00:32 2025 GMT
Subject: CN=2af12b1e0592729f23895f244ce142fa2807740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:9b:03:33:55:15:2f:03:4e:4b:8e:6c:61:
17:a0:89:bc:a3:8d:63:30:48:84:10:a9:70:86:ae:
96:36:d6:e8:93:cb:89:b9:1a:8b:53:a0:71:4e:ca:
27:de:42:ac:0d:cb:b9:70:56:33:87:63:39:a3:a7:
6d:26:c3:60:21:de:8b:e0:59:07:eb:18:06:aa:36:
be:15:13:57:6e:2c:aa:7c:0f:d5:21:75:aa:5e:fe:
e0:69:31:e8:6e:73:5e:58:4f:45:da:12:71:68:5d:
9c:61:aa:bc:db:21:c7:96:a8:aa:b8:53:f6:83:08:
4f:8b:bc:06:ff:f8:ed:62:c7:7b:10:04:4c:2c:36:
51:61:03:0a:10:03:94:82:1a:c1:c3:03:33:9d:21:
ff:df:d4:f5:b0:4c:e0:f8:e7:7f:5c:ca:d5:9e:79:
91:a0:2d:7d:c1:be:70:42:3c:83:c7:97:03:8b:4b:
b1:e5:72:b0:b6:d4:31:11:20:0c:3a:a1:03:b6:11:
c2:ac:63:9c:f9:56:6a:14:c3:71:a1:a3:cb:53:43:
f9:5b:23:69:6b:28:d1:9b:dc:2e:a8:ed:7f:33:a4:
bf:db:55:02:97:7c:53:9b:0e:61:87:82:de:f7:ea:
d2:8c:66:d4:ab:d0:9e:b8:3e:45:14:b1:8d:ea:f3:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:2B:1E:05:92:72:9F:23:89:5F:24:4C:E1:42:FA:28:07:74:0D
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b4:68:79:72:70:aa:0f:b9:a3:6f:d7:98:16:0b:fa:9a:b1:
dd:fa:0b:51:65:ac:c6:13:b6:91:ba:17:ce:fd:09:66:12:81:
43:90:f4:e8:ab:14:e6:70:73:0e:45:43:08:9c:94:ea:c9:95:
ce:98:c5:d6:7f:1d:66:a6:fb:35:e2:0f:64:68:2d:3c:d0:37:
ac:92:f5:1e:7a:30:db:85:dc:ac:c3:3c:17:5a:55:8c:44:2c:
8e:08:67:11:ac:70:a4:71:92:de:6a:38:aa:22:16:01:8a:8f:
ae:db:9a:60:c8:8f:83:8d:55:c6:ac:fc:a6:9e:fa:91:ae:34:
b3:40:37:27:57:4e:ad:5a:7f:68:8e:7f:78:06:3f:6c:d1:43:
b4:ff:64:61:d7:b7:60:61:d6:93:72:56:48:ba:e7:72:d2:28:
76:65:b6:50:3c:97:75:8d:8a:60:89:76:f5:07:d9:32:04:ef:
ba:3a:c8:4d:c5:52:09:7e:14:9c:56:85:09:0b:5d:1e:83:d4:
e7:f2:9d:ac:56:71:d4:fb:c6:91:b7:82:d5:1f:a5:93:c7:fb:
73:45:e5:cb:e2:1c:b3:bc:ed:6e:a7:86:38:c0:ce:56:ad:8a:
94:61:a9:34:0a:a9:1c:c2:31:3c:67:79:b2:c3:ec:58:00:9f:
8f:75:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:03 2025 by rpki-client