Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: 7NG5cURs4dOPgc0Ltrsth0yOLH+dOjl1NuOj0MdmAAk=
Subject key identifier: D1:1C:5B:B3:AB:F7:7D:16:00:71:1E:A1:1C:29:05:CC:B4:F2:9A:91
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0199FBEBA4C4E76B9A48140CC51B7E42AA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 105E
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: zasrhemJeGaFWmjFpWKYH+xJrel8X0cXWF1JNYZ4LA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a4:c4:e7:6b:9a:48:14:0c:c5:1b:7e:42:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=d11c5bb3abf77d1600711ea11c2905ccb4f29a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:27:5f:86:a7:5e:d3:7b:8a:36:50:3f:13:
65:90:a6:87:9a:84:41:ff:53:a5:f0:45:ea:5e:73:
69:be:95:e0:d9:c7:67:eb:93:7e:43:02:53:37:45:
ba:ad:af:36:67:44:88:12:74:0d:7f:45:3c:6c:e7:
4e:bc:af:06:34:bb:96:ee:0a:9a:1d:70:8f:20:a8:
f2:3c:9e:59:91:8f:24:dc:5f:0e:70:f2:e5:77:67:
4a:ad:57:82:3c:43:50:90:aa:dc:ac:ca:af:0a:35:
d5:25:17:94:f0:58:47:db:b1:d5:7f:c9:c6:40:0f:
73:2f:a1:9b:93:a7:63:08:8f:b1:63:84:03:24:76:
9e:a6:00:0b:f6:d6:34:40:93:17:32:62:56:a1:e8:
7a:5c:b3:8c:9d:8b:75:63:d3:2b:6f:60:b9:30:87:
df:d8:49:1b:a7:ca:4a:93:e5:f6:4f:9d:dc:42:b9:
0e:9c:98:53:e2:d8:7f:ec:66:40:39:eb:07:c8:d4:
c1:34:da:34:38:31:e7:4a:05:06:4a:ff:38:2e:61:
7e:af:d4:cc:a7:fb:f0:c9:f1:4b:e7:27:1e:6c:62:
19:01:51:55:46:49:95:70:1a:d6:8a:ea:4c:75:9e:
db:8d:7d:f3:9b:19:d4:90:d8:37:00:97:ed:f0:06:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:5B:B3:AB:F7:7D:16:00:71:1E:A1:1C:29:05:CC:B4:F2:9A:91
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0f:34:ec:2c:12:de:43:f2:80:65:b3:3d:38:f2:a8:85:a1:
4e:d6:34:14:2a:0b:61:f9:27:6b:f7:72:91:c2:80:c4:50:69:
ce:95:2a:33:e2:9b:63:5a:b2:ef:02:29:0c:f3:eb:20:b6:c0:
8f:0b:55:09:03:b8:f6:2c:51:6d:7a:6b:5c:b3:c7:79:39:e1:
51:cc:c8:b9:8d:a2:31:17:ba:8a:33:09:c0:21:3d:66:4a:c0:
33:1d:78:b9:83:08:38:cc:f2:fb:b8:6b:15:3d:52:42:31:e3:
a2:3a:5f:1a:e9:ef:23:16:1a:36:d8:c3:9d:be:40:ce:67:3a:
74:b8:c2:31:ac:79:c7:fb:a8:84:1e:3a:8e:20:e9:d5:b2:f3:
43:36:af:dd:ac:b9:d5:91:0d:a3:e1:a9:20:b6:d4:db:7d:77:
89:6d:c4:c9:3a:3b:95:0b:25:cb:9f:36:23:c6:e6:62:ba:c4:
23:37:0b:85:49:02:b1:b5:09:d3:77:35:5b:8d:d2:f8:0f:03:
82:1e:de:f5:74:6d:54:89:2e:9d:82:31:9d:84:cd:99:9c:f2:
5f:85:24:98:0b:25:77:ad:9e:14:92:09:33:40:7c:ce:d2:6f:
6c:90:81:48:e3:ef:2f:0f:71:75:be:fd:f1:40:2a:73:97:78:
6c:5b:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:45 2025 by rpki-client