Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json)
Hash identifier: It+LqXztBjD9wOBOxTKfprM9llJoZxOVNZRALrX0azE=
Subject key identifier: 29:ED:42:D6:EB:9A:50:8D:D3:B4:41:A2:FA:76:FD:8D:C3:8B:E7:B1
Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Certificate serial: 01992330E12D8FFCB2329209472231D45B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: u3l0TTVHmihCTTrBFElDrNVaclpVOxMZDpC9LXqOQWY=)
2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e1:2d:8f:fc:b2:32:92:09:47:22:31:d4:5b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=29ed42d6eb9a508dd3b441a2fa76fd8dc38be7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:4b:78:43:55:47:e1:d7:d0:32:c8:c9:55:
94:84:9e:26:da:c3:eb:f1:c4:f3:f0:dc:aa:2d:c0:
f3:6a:0d:dc:ee:d6:51:96:e3:db:76:ec:40:9c:f8:
ff:51:1c:22:24:fb:24:6c:d2:a5:cf:74:64:22:8f:
fc:61:87:2d:cb:58:12:46:40:90:51:49:20:bb:0e:
9c:b1:b3:d3:65:f5:58:b7:68:20:fd:6e:33:5d:e7:
56:59:af:d6:de:fc:29:8b:91:c3:7c:69:9a:7c:4e:
c0:c0:36:62:63:a7:70:b0:ee:d8:ff:17:74:9a:9f:
b7:d2:21:02:b3:46:4c:82:f1:83:1c:b2:1d:ce:c9:
ef:1b:4b:d3:39:c2:0d:f7:ff:86:b2:f7:61:17:7c:
e2:f7:d2:14:a0:c3:d4:b7:bd:04:f6:f4:df:65:40:
c5:66:d2:f6:3a:78:c5:00:ba:3e:b8:6f:80:ad:7f:
cb:d4:e0:72:ca:3b:05:0b:a9:79:e8:e1:89:b4:5f:
e4:86:09:05:fb:d5:4c:0d:28:2d:73:34:d1:55:f8:
a7:de:d0:d9:19:e4:9b:7e:82:37:91:17:a8:2c:a7:
72:dd:96:8b:ee:62:2f:22:8a:ea:32:0b:d6:ed:67:
f2:97:0c:bb:60:ce:a4:19:21:1d:8a:69:98:be:eb:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:42:D6:EB:9A:50:8D:D3:B4:41:A2:FA:76:FD:8D:C3:8B:E7:B1
X509v3 Authority Key Identifier:
keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c9:e1:24:32:f3:b7:3b:af:a2:96:ec:8c:55:fb:11:82:28:
bf:1b:47:7e:cc:c9:3d:94:b8:f7:aa:8a:aa:89:12:6d:f4:3f:
08:df:2e:7a:73:4c:c3:d6:b3:95:56:6a:ad:79:17:66:57:c4:
b5:d1:bb:9e:bc:99:8b:7f:e0:5d:c1:4c:72:57:12:50:b3:d5:
23:d0:42:84:67:fd:10:6f:fb:37:28:ff:d5:30:39:99:08:4e:
58:5c:32:3c:e2:a1:34:e2:dd:70:a9:fb:52:d7:05:58:3f:33:
2b:c2:95:9c:f0:25:49:07:74:0c:be:07:46:89:9b:4c:78:aa:
88:9b:76:71:44:27:1b:fa:a6:d2:5d:5a:0f:eb:33:44:b3:6b:
9c:9d:bf:f9:cf:51:3a:11:fd:55:6c:bc:ad:2e:96:01:ce:e9:
5b:9d:58:d6:87:4d:b1:2d:cc:30:4c:72:af:0b:dd:0d:18:19:
d9:90:12:81:d4:bd:11:56:68:61:c5:81:2a:1f:11:28:4a:6a:
c9:a5:65:89:ba:f6:67:20:45:f6:1b:e8:b3:aa:8e:b0:84:2e:
4c:1a:7f:c6:45:f3:d2:74:0c:10:8a:43:1c:b5:91:6f:c0:be:
02:6d:40:6b:aa:52:66:d3:45:e8:08:5f:1d:54:da:67:f8:81:
4d:6e:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client