Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: iPOr0/Q36XkxTLEH4GXVwvwV51h9u+NujuzzdyyB0Ds=
Subject key identifier: AF:A8:DC:3B:6C:59:06:24:26:0C:B8:24:F7:94:36:01:03:A2:E7:E3
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 0198D5BC3565450B630034802B017AADBEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: CpTZP1GqZTs9WhEFWHQ+ibu/aRBblVPKTsdWE+C+MGc=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:65:45:0b:63:00:34:80:2b:01:7a:ad:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=afa8dc3b6c590624260cb824f794360103a2e7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:5e:e4:e3:af:08:21:e1:17:7d:00:47:d0:
11:4e:69:8e:61:3b:b2:6c:2a:55:3a:8f:13:93:14:
c6:a2:8f:a4:84:63:8b:c1:fc:b0:c6:4a:26:ab:a6:
9f:ca:0d:40:89:f4:3a:5b:bc:74:4a:68:fb:6a:9b:
ef:d3:c1:1e:52:6f:e5:94:67:dc:b3:ed:fe:8f:04:
2d:18:29:6a:89:e6:cf:0b:b6:0a:19:65:f6:f5:37:
25:ca:7c:3a:7e:23:0e:8f:2d:ca:34:d0:67:d3:20:
75:89:51:46:58:ee:62:0a:29:87:6b:bd:1f:7a:e8:
e7:03:46:b4:d3:b8:91:c7:b5:07:40:cf:2f:19:b8:
cc:5f:2c:ef:71:f8:5e:25:0a:f9:9a:f1:71:6a:0f:
e9:3d:fe:76:51:ed:c2:27:aa:17:09:ab:fd:66:0c:
9f:8a:f4:17:81:05:6e:9d:76:30:4a:65:b6:c1:00:
73:d8:de:5c:1e:dc:06:e6:fa:5c:34:5f:87:58:dd:
d7:24:47:6a:42:8c:02:47:f7:d6:27:5e:a7:c1:5b:
ec:dc:95:07:0b:11:85:ec:0a:26:89:f1:63:1c:07:
c0:2b:dc:47:5c:98:e6:cd:e8:62:f3:33:c0:de:64:
78:b4:d6:67:40:93:05:9b:9e:9f:80:2a:39:64:4a:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:DC:3B:6C:59:06:24:26:0C:B8:24:F7:94:36:01:03:A2:E7:E3
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:ef:af:8c:04:01:02:90:e0:f9:20:fd:90:b4:32:57:d0:
02:ad:f2:ac:49:0a:79:ee:99:c8:be:fb:d4:70:a9:d9:c1:d1:
32:29:83:24:a0:7f:16:62:fb:82:84:3d:e0:7a:48:78:03:c3:
3f:99:84:f2:c2:cc:31:da:5e:ef:28:70:57:4c:23:76:a9:99:
d9:13:07:10:7c:85:fc:1f:a9:08:db:89:8f:01:d9:a3:db:24:
e1:27:e3:63:de:94:4d:a6:30:54:a9:b5:0e:e4:46:60:43:fa:
53:22:a8:2e:1d:17:96:0d:61:8d:3f:78:17:02:d8:55:7a:2b:
5e:5b:03:bc:6f:85:81:2b:ee:0d:48:c4:70:48:c2:f1:31:8d:
9e:4a:a7:0b:d7:a6:0c:70:6e:c6:ce:16:d1:19:80:91:0c:de:
d2:1c:b7:96:ec:cf:1a:81:16:6f:38:de:84:b1:6e:5b:8b:88:
92:94:30:fd:f5:dd:ff:0f:b1:47:14:42:8c:e7:d5:8d:a0:22:
2e:23:23:5e:b4:5c:a2:3c:de:70:0e:a3:13:a8:ce:f3:e7:17:
49:7d:44:e2:2c:96:aa:93:6c:11:19:3a:c9:bf:d2:29:32:db:
ec:95:14:cb:cd:ff:86:e7:db:12:b4:ef:3f:38:f0:c5:d0:fd:
69:ca:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:18 2025 by rpki-client