Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: Uy+G1lFClrQRdQ3KS6OAQORd9mfzMYyxzQY9ThhJ9bk=
Subject key identifier: 32:42:4F:E7:2D:28:CA:68:EF:59:98:F4:3A:56:59:EE:F6:E0:20:F8
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 0197B5FBB831D9D63C8C0A4FEFC0B0C3488B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 10:01:01 +0000
Manifest this update: Sat 28 Jun 2025 10:01:01 +0000
Manifest next update: Sun 29 Jun 2025 10:01:01 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: UBADaXA+GTpGXWMI66fxhCK1vTuxdAZNIVVZ6yDvDKM=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b8:31:d9:d6:3c:8c:0a:4f:ef:c0:b0:c3:48:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jun 28 10:01:01 2025 GMT
Not After : Jun 29 10:01:01 2025 GMT
Subject: CN=32424fe72d28ca68ef5998f43a5659eef6e020f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:4b:bf:2a:5b:49:3a:1b:08:e3:8f:2d:85:
79:1d:81:c0:ee:9c:65:d9:cf:ed:07:eb:8c:24:03:
12:74:f4:40:18:56:cb:2b:2e:ca:e8:1d:d7:b7:65:
33:9c:9d:90:d7:ea:7e:3d:a7:59:e8:77:81:b0:a4:
5c:91:30:8c:3d:e2:ac:af:53:7e:cb:2c:b6:ab:69:
fe:ca:32:8c:b6:60:bc:43:64:e2:d9:ef:8e:dd:89:
c2:fb:a2:a5:4e:f8:e0:1f:de:0e:c8:bc:2e:a5:de:
bc:36:8c:c1:ab:b7:ea:53:18:8e:46:b0:76:64:bb:
39:08:76:dd:bb:e3:6b:22:15:35:7f:51:ea:08:6e:
3e:14:53:75:6c:d6:72:81:d4:37:fc:e8:21:42:55:
4e:aa:0d:e8:ce:4d:56:4c:32:46:4e:ce:ae:09:bf:
09:09:3b:7b:2b:e3:13:32:3a:8f:35:76:fd:6f:7e:
f5:b7:42:c4:82:40:dd:34:c4:3c:f3:ee:33:a3:d1:
3a:15:98:14:66:9e:ee:22:9a:40:a3:4d:29:e0:7d:
30:d7:3f:ab:55:df:b2:90:ee:28:28:bc:69:8a:c2:
b5:13:d7:37:5e:93:41:ad:fc:68:19:16:21:4f:de:
41:2a:62:86:2a:09:12:7c:5a:30:91:72:be:83:86:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:4F:E7:2D:28:CA:68:EF:59:98:F4:3A:56:59:EE:F6:E0:20:F8
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:85:38:4a:51:8e:c0:07:fd:2b:13:5c:62:f4:2e:d3:22:48:
c8:7f:e5:90:f8:13:3c:f6:7b:dd:55:10:1d:3a:54:81:cd:97:
86:c2:d5:0f:91:8b:a0:41:2f:7c:22:c5:16:e3:6b:8e:f7:a1:
d4:19:0c:88:7c:42:6a:b0:93:c1:32:ff:71:c1:1f:06:af:8f:
10:af:4e:b5:a5:5d:b7:ff:f2:1b:57:15:4b:11:ad:cd:59:eb:
39:c5:d6:3f:e7:27:c8:b3:0c:c5:b7:34:2b:de:33:0d:87:96:
2a:cb:42:d8:8e:09:39:47:c5:10:b5:fc:5d:8c:ea:e0:91:9e:
5a:b4:f6:38:f1:61:a8:13:b0:47:c4:8d:ea:61:cf:50:4a:2a:
d0:0b:57:42:b5:37:4a:7e:4c:1a:e7:e9:0f:49:ea:df:f3:0a:
be:62:73:6c:80:c7:02:70:61:c7:9c:98:71:c1:40:26:eb:f5:
24:28:9a:99:44:01:5d:db:e5:c2:3d:e6:47:a3:b3:42:c3:46:
f5:76:9b:87:f6:19:c8:89:a5:42:f8:f3:78:41:c6:40:02:8c:
84:44:d6:2f:a9:ae:cd:3c:64:7b:e8:9b:7a:4e:58:e2:e0:a8:
44:ff:5e:96:ea:12:d9:e1:80:e2:3b:6b:d6:52:81:03:1f:35:
1e:4d:35:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+7gx2dY8jApP78Cww0iLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl
OTc0YzkwHhcNMjUwNjI4MTAwMTAxWhcNMjUwNjI5MTAwMTAxWjAzMTEwLwYDVQQD
EygzMjQyNGZlNzJkMjhjYTY4ZWY1OTk4ZjQzYTU2NTllZWY2ZTAyMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq69LvypbSTobCOOPLYV5HYHA7pxl
2c/tB+uMJAMSdPRAGFbLKy7K6B3Xt2UznJ2Q1+p+PadZ6HeBsKRckTCMPeKsr1N+
yyy2q2n+yjKMtmC8Q2Ti2e+O3YnC+6KlTvjgH94OyLwupd68NozBq7fqUxiORrB2
ZLs5CHbdu+NrIhU1f1HqCG4+FFN1bNZygdQ3/OghQlVOqg3ozk1WTDJGTs6uCb8J
CTt7K+MTMjqPNXb9b371t0LEgkDdNMQ88+4zo9E6FZgUZp7uIppAo00p4H0w1z+r
Vd+ykO4oKLxpisK1E9c3XpNBrfxoGRYhT95BKmKGKgkSfFowkXK+g4YzhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJCT+ctKMpo71mY9DpWWe724CD4MB8GA1UdIwQY
MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt
OWUyNDNjMmQ4ODIxLzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx
LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboU4SlGO
wAf9KxNcYvQu0yJIyH/lkPgTPPZ73VUQHTpUgc2XhsLVD5GLoEEvfCLFFuNrjveh
1BkMiHxCarCTwTL/ccEfBq+PEK9OtaVdt//yG1cVSxGtzVnrOcXWP+cnyLMMxbc0
K94zDYeWKstC2I4JOUfFELX8XYzq4JGeWrT2OPFhqBOwR8SN6mHPUEoq0AtXQrU3
Sn5MGufpD0nq3/MKvmJzbIDHAnBhx5yYccFAJuv1JCiamUQBXdvlwj3mR6OzQsNG
9Xabh/YZyImlQvjzeEHGQAKMhETWL6muzTxke+ibek5Y4uCoRP9eluoS2eGA4jtr
1lKBAx81Hk012A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:37 2025 by rpki-client