Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: dXwcAQZNvOEwrlU7K+PBgzDVjkQ1RQlsnVmavmwHDtM=
Subject key identifier: 7C:D3:29:1B:8C:D4:FE:43:A9:66:95:B8:47:25:66:49:F4:88:8D:86
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0198D65F03FE440FE2220B23ED5C4A999178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0FC6
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: 8rs73tuaXtlO7bLHKLiM8DPHWruxheKRI0ID+c67mLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:03:fe:44:0f:e2:22:0b:23:ed:5c:4a:99:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=7cd3291b8cd4fe43a96695b847256649f4888d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:09:ac:6e:9d:0e:36:12:1c:e5:24:90:bd:
c6:38:3d:0d:42:37:20:ec:02:28:9d:cf:9b:6e:bd:
97:76:cb:fc:c6:db:26:c3:5a:cd:ab:7c:76:c7:6c:
ce:f7:12:2c:1b:04:ff:83:27:28:29:d7:69:c6:6d:
ec:e6:3a:43:0f:4b:dc:44:10:6e:54:93:80:61:e1:
3e:86:2b:10:c2:59:6f:fc:56:7f:e7:85:76:cb:8a:
85:44:ff:c1:5e:c3:e8:a1:1a:72:cc:b5:b2:59:73:
58:e3:27:f0:b7:64:07:d4:84:ed:b4:b5:b1:64:db:
3d:74:e2:fe:e0:8b:07:cf:1c:40:2f:52:53:cd:58:
f2:f8:7a:d8:b1:cd:ec:c6:43:5b:6d:f5:0c:71:47:
d0:27:7f:90:a8:bc:0f:1e:5f:f1:47:59:2b:31:3a:
e2:c6:cc:d6:10:1c:2c:89:0f:53:05:09:fe:55:68:
e9:1e:dc:b1:87:84:d8:0c:7c:a0:f7:91:57:c4:81:
54:4e:35:37:09:d2:c8:13:d4:17:7e:2b:af:d7:41:
81:86:f9:32:a9:37:cd:68:9c:59:2b:22:d7:1c:96:
c7:0a:cf:4b:7b:5a:64:2c:e8:fc:f7:c9:1e:2c:f9:
20:88:78:af:50:f4:d1:26:61:8e:ec:f9:f2:34:e0:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D3:29:1B:8C:D4:FE:43:A9:66:95:B8:47:25:66:49:F4:88:8D:86
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:5c:14:81:41:16:f3:8b:1b:d3:ad:41:63:5a:cd:75:94:
7e:56:3d:6e:fd:27:6d:fb:a9:24:c4:18:36:7e:2d:e1:b1:cf:
86:48:77:e5:2b:9d:56:68:f4:8f:ab:48:a8:56:f5:74:cf:ca:
36:c4:e5:de:b3:99:95:ef:01:9d:96:45:ae:56:7c:11:ca:01:
11:3e:41:ac:b7:f4:0e:31:0b:09:1f:63:c0:35:22:ca:1c:0b:
7f:f9:92:eb:9a:47:cd:98:3a:ac:d4:e3:49:6b:34:75:81:33:
a7:16:5a:0c:7b:35:45:b9:5d:43:f4:14:54:66:2f:65:1a:66:
cb:c7:52:93:48:fb:da:02:38:53:ec:24:83:2e:6c:84:33:7a:
26:d6:be:4e:28:9d:9b:51:a8:6e:69:d0:b4:76:ed:eb:ee:c3:
d9:7b:5c:2b:dd:70:27:07:71:aa:9c:b9:75:3d:66:2e:37:d2:
ea:da:ab:3d:bc:36:25:d5:c0:41:35:35:f2:ef:ca:ad:13:24:
87:5f:5b:3c:b2:0a:7e:14:12:59:3b:f5:28:76:53:08:ad:59:
96:a1:53:93:88:38:10:36:51:0d:df:96:47:00:53:c5:58:41:
25:07:64:37:0d:fc:53:79:9a:52:36:35:7b:ab:3a:b4:9d:90:
d5:5e:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:34 2025 by rpki-client