Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: aKo/XHimY2ZSLw+XBeXKzbGsijS6H7sNe7/01ZjrGfw=
Subject key identifier: 4D:F5:3E:96:28:97:91:9F:88:07:24:53:D3:16:E9:4F:F5:12:5C:36
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 0198D4DFFD18ABBDE176135CD88C0D998D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: hnKwN3uOaR72l7FL3cDUa37gjcUvzYEqTat41BK5FeU=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fd:18:ab:bd:e1:76:13:5c:d8:8c:0d:99:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=4df53e962897919f88072453d316e94ff5125c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:6a:7c:2f:eb:35:dc:4c:42:ae:fe:27:37:
85:1f:c0:ea:9f:e3:71:6b:03:7a:61:9d:f5:6d:92:
31:dd:95:eb:d1:19:27:de:db:a5:86:23:86:9d:ee:
25:41:1a:97:fc:33:69:1f:eb:32:b9:53:ec:10:3d:
04:6f:42:36:44:97:3a:bd:1d:cb:8d:b6:89:31:64:
62:6d:f2:2f:7c:87:89:35:16:f5:0c:f3:94:a9:0d:
cc:88:04:0e:b6:67:6f:0b:8f:d8:30:a0:4d:ef:d3:
94:51:5e:d5:2d:ee:24:67:ba:b7:e8:86:67:8f:c0:
10:4a:f9:95:b2:bc:18:cb:de:fc:ef:b9:7b:e0:39:
86:5a:f4:87:5f:2f:99:f8:2b:40:e2:9c:5f:e1:f0:
4d:2c:a4:cc:e9:c0:f9:9e:59:ea:9d:72:d8:04:13:
df:36:a0:a8:60:0c:53:a6:7a:19:32:10:91:d9:04:
74:72:41:84:ff:41:c1:37:d5:1c:53:70:a3:d5:1a:
d0:e0:40:fd:db:93:e9:3c:44:65:22:6b:b4:e9:c0:
21:8e:8b:11:40:da:78:3c:a2:c6:60:c3:3a:5a:9f:
c3:10:51:d0:6e:8e:7f:a4:14:9c:be:d7:49:3d:80:
71:96:2a:bc:ad:e4:73:81:76:37:e4:a1:92:74:27:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:3E:96:28:97:91:9F:88:07:24:53:D3:16:E9:4F:F5:12:5C:36
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:d2:50:a2:2d:6e:d2:a7:52:33:56:ad:be:d3:5a:bd:33:
0a:24:c7:35:2f:2c:8a:1c:4f:13:13:00:c9:b3:49:dc:74:47:
fe:01:47:a6:b2:74:15:85:5c:22:ca:05:4e:78:c0:56:31:f6:
b0:07:7d:82:42:d0:38:75:ce:94:a2:6c:f2:71:ec:d9:0b:85:
83:d6:87:60:d3:1a:9a:5d:67:fd:50:de:b0:ce:b4:0e:07:95:
8a:29:8d:b6:cb:34:e7:76:0d:1f:88:32:65:8e:f7:6f:1e:bb:
4e:44:a5:5a:1f:df:1b:9c:a4:3f:e5:90:80:68:75:68:34:87:
14:d8:ac:94:18:56:6b:99:06:b0:5e:cd:0b:4d:67:d2:8c:0b:
f8:7e:90:c2:a1:f4:86:b9:32:fc:f3:bb:08:0d:49:7a:f3:0c:
9d:9d:6f:fc:f4:cd:44:8d:91:ab:f1:b5:55:9f:bd:27:da:2e:
a5:f0:fe:2c:51:6b:a4:9a:a7:dd:f4:ef:40:d0:16:7b:fa:e8:
ae:03:37:50:9c:a2:6f:c7:b1:dd:bc:b0:20:56:fb:85:98:e6:
3a:2a:fa:49:a1:96:da:43:2d:f7:4b:cd:21:57:05:eb:eb:24:
42:27:42:c7:a4:1d:7d:b2:f8:cb:91:6d:40:09:c9:17:f3:94:
7d:29:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:30 2025 by rpki-client