Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: BgnIleYJJyH3gv3+HzJgGbbKPX9IUb3v8WSOK5yyruI=
Subject key identifier: 45:88:10:16:12:EF:55:1A:D9:FB:B1:02:C0:6A:4F:57:9B:63:C2:59
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 0196C5A81CE1507F9B620513CA081452092A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1547
Signing time: Mon 12 May 2025 18:00:51 +0000
Manifest this update: Mon 12 May 2025 18:00:51 +0000
Manifest next update: Tue 13 May 2025 18:00:51 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: rBkjOy52e1NpJfAbBLMZqELeA3pSh3l++XkRoQ4V42A=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:1c:e1:50:7f:9b:62:05:13:ca:08:14:52:09:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: May 12 18:00:51 2025 GMT
Not After : May 13 18:00:51 2025 GMT
Subject: CN=4588101612ef551ad9fbb102c06a4f579b63c259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:05:bf:f6:3e:18:a8:b8:c3:e8:1c:05:47:
53:ce:6f:54:79:f9:32:56:ff:7b:f6:27:6e:db:0d:
d5:02:df:11:ce:9d:0d:89:b5:32:e2:6b:5c:be:a6:
9e:31:1a:ec:39:ab:dd:bb:60:33:73:0c:72:b9:fc:
54:67:2c:73:10:f2:b8:b1:4f:97:a9:9e:ef:70:58:
15:37:08:12:46:a8:c1:6f:08:c8:9e:71:8c:cd:15:
af:59:99:a5:58:1b:9e:52:7c:11:85:07:f1:39:3d:
ac:34:06:2a:d0:87:75:a8:91:6c:7d:f1:e3:36:a5:
46:9c:6c:bd:27:5b:bc:ef:5d:9b:3c:cb:51:f4:80:
ac:71:1d:a0:4d:53:5c:09:b4:31:6e:52:da:80:6d:
85:21:e8:30:23:af:47:fa:a4:aa:50:53:98:94:5c:
ac:d8:34:45:2d:ba:db:2d:27:78:25:c2:2e:59:c5:
82:7f:64:fc:40:ff:4d:e5:d8:12:bc:f9:7b:b1:3e:
81:f2:89:35:f0:89:05:7c:01:38:1e:b6:8c:3d:51:
8a:ae:dc:cd:a0:b7:87:9f:a5:32:13:07:2a:f5:78:
6d:33:f2:8c:b7:61:4f:d5:c5:d3:16:c1:42:f7:b1:
6e:71:e9:ce:71:26:80:4c:a0:cb:19:58:bc:14:86:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:10:16:12:EF:55:1A:D9:FB:B1:02:C0:6A:4F:57:9B:63:C2:59
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:64:3d:fd:7a:fa:b4:68:d3:87:78:a0:49:a0:95:c4:61:56:
53:f1:43:27:38:b6:37:96:25:2a:7b:0d:e5:3b:a4:5e:c8:47:
52:c9:be:ed:e0:96:a8:95:7d:a2:ad:ed:b9:76:fa:de:5e:8a:
c2:3a:6e:00:8a:5e:00:15:06:ac:94:25:66:a9:c0:19:7f:81:
19:67:71:61:b1:63:18:94:19:de:e6:4a:a1:ad:66:27:e4:2e:
4b:ca:0c:69:1b:52:e6:e7:43:bc:27:a7:48:bf:d3:c2:5d:ee:
b0:b2:71:1c:27:19:ff:43:6d:2a:6e:7b:84:d1:3f:a3:d1:16:
33:f9:88:24:2d:a6:e4:5b:03:44:a9:b6:19:11:52:14:c0:64:
83:03:a8:49:5c:98:8f:e1:09:6c:a8:a7:94:9f:b9:1e:20:fd:
32:ba:a2:44:38:20:0c:60:ce:a6:b2:36:04:7a:fb:59:45:e2:
2d:98:4f:d1:33:9f:9f:58:d1:9c:75:8e:03:30:fe:5d:9b:e5:
8f:da:77:d7:7a:c4:9d:e0:e0:b6:c4:74:47:03:43:b0:a2:98:
4d:7c:39:d7:82:0b:da:97:c2:bd:70:ee:45:9b:66:4a:3a:22:
15:d9:de:59:c7:ac:b8:e9:f7:15:12:89:38:69:bb:c7:a6:fc:
d7:28:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:41:14 2025 by rpki-client