Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: iOmy5j/kcez50kzt7NdNaHaNYqWP92IMJekSnpJoqmY=
Subject key identifier: BF:F5:BF:8C:95:76:5D:EF:78:9A:44:E3:1E:E6:37:E3:FA:92:40:30
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0197B6A1B24F4C8043EAFEE99CC859848C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: Sv+QlAAzEyFenq6Tv3stKFjpODgvLbgHGo1q6fkuLgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b2:4f:4c:80:43:ea:fe:e9:9c:c8:59:84:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=bff5bf8c95765def789a44e31ee637e3fa924030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:f1:d0:85:37:9c:6e:6f:1c:03:74:e2:b5:
ab:25:5f:7c:a0:47:d2:e3:ce:54:37:45:1d:50:30:
34:cd:0b:bf:42:8b:19:ae:60:b8:3d:3d:85:7c:1c:
e2:ef:d9:d4:66:a1:ed:a5:90:ca:a3:c2:c1:7c:4e:
13:49:5c:80:58:ad:73:62:07:8d:58:42:24:af:9e:
57:4e:a7:8d:50:a9:de:f7:8f:75:37:ae:80:7e:ff:
f8:59:15:04:bc:bb:47:a9:56:1a:05:03:c4:84:3d:
78:c7:18:11:8d:c7:94:b1:04:34:1a:1f:d9:a3:f8:
2a:5f:4a:c3:f5:8b:eb:f7:80:78:83:61:38:2d:73:
6e:38:11:a1:76:5f:10:88:99:b1:22:b0:f8:13:19:
71:36:25:1c:4c:f9:5f:8a:ce:da:6d:b7:9b:87:4f:
9e:6a:81:d7:8b:3e:d3:23:05:9e:5e:bb:fc:d9:97:
a0:b4:a5:0c:94:90:74:f2:5c:76:2b:8b:4c:9e:0a:
71:c1:35:6e:f7:f1:e0:b3:dd:54:94:70:89:41:de:
c4:8c:55:7a:8b:b3:bc:37:08:df:57:5c:34:5a:a2:
9f:66:69:77:71:bc:f4:83:65:ff:69:5b:0e:86:fd:
2c:1a:f7:01:76:4c:b9:21:7c:75:a0:ba:72:cc:62:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:BF:8C:95:76:5D:EF:78:9A:44:E3:1E:E6:37:E3:FA:92:40:30
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:c0:53:92:fc:cc:fa:76:2a:e3:cd:9d:3b:8a:cd:85:d6:
4a:cf:4b:ca:e4:9d:08:04:59:78:09:63:1a:5e:54:2e:85:d7:
10:f4:5e:28:ca:61:96:25:52:5e:d3:15:c6:a0:e4:c7:eb:1d:
68:95:ec:0c:14:6a:9e:6e:91:9d:13:e0:ec:8d:44:2c:35:a5:
7e:a7:c0:21:2b:35:79:8f:1c:1c:67:e8:ac:3d:22:fd:0d:ab:
01:ee:b9:e5:91:ef:56:b5:5f:bd:7e:ce:3f:5e:3f:ca:bc:9b:
5d:78:87:1e:3c:0f:e8:20:a6:de:36:59:20:98:3e:bc:7a:a1:
33:51:e9:f8:17:38:65:20:2d:dd:49:70:5d:98:d7:ac:0c:45:
9a:da:ae:8b:57:c6:25:9b:73:4a:a5:1d:c8:b9:02:cb:9c:a1:
b3:1f:22:fc:c9:2b:bc:96:6f:18:da:db:6d:0f:34:4d:97:b6:
aa:37:1f:bc:42:0d:58:9c:d3:8c:2c:b1:2d:4f:6d:6d:9c:2b:
21:e5:00:09:f6:e6:20:38:33:df:80:50:26:41:17:e9:89:e4:
ae:f7:a8:98:9a:e3:ee:04:7f:47:16:f5:bb:1f:3a:67:aa:79:
cc:c5:a0:0d:01:8d:1f:03:f1:c6:98:e7:25:75:0c:f2:26:b9:
8c:31:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:53 2025 by rpki-client