Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: oRmNcRtN7sMFVC+LMGGNUiU+f9zv1e4k/2i179j6nOE=
Subject key identifier: 2F:EB:E9:83:C1:61:84:C1:63:A0:E7:31:9E:89:4F:BC:FD:93:BE:48
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 0197B70E7EACAA336E171BAB9A2667D8235D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: yUDUCDf2Q6CNWZHJruB1vXJJQVGdyJ5yVC7Ysez6pKo=)
2: UJkgkdZDflLDM8Sv7O6kD5lIHQs.roa (hash: pX1z+1kUoCvGFytibnsII/Eh3CoZC8NSq38jqzyhHR8=)
3: fCleNlHbxsVeZ3a7P97pQRFlLZI.roa (hash: K6pa8uD3+UnxthRe3sa6TzSI5KyrtrPrEufxbM2IShA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7e:ac:aa:33:6e:17:1b:ab:9a:26:67:d8:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=2febe983c16184c163a0e7319e894fbcfd93be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:75:47:37:44:3c:79:d1:32:47:e1:bc:d4:
58:d3:5d:b8:d6:04:34:3b:bd:45:22:79:f0:40:f8:
d5:ad:92:d4:f6:8a:01:da:e3:41:5c:60:76:c5:62:
1f:66:b3:f8:e9:d8:86:51:a4:85:4e:51:99:bb:25:
14:83:4f:db:4c:ac:c2:2a:37:eb:38:61:1e:df:a0:
50:c3:b7:4f:de:c3:e4:47:7e:d7:09:c0:49:28:bf:
38:14:c9:13:f1:02:c7:37:66:2d:2b:c3:55:af:0c:
b7:34:b5:11:52:6f:5d:50:78:ff:01:75:58:2a:a8:
b1:1a:13:6b:d9:bb:3e:ee:31:25:7e:e9:90:0d:1d:
40:2b:54:6c:06:ba:d7:b8:b7:45:26:67:8a:2a:4e:
48:d2:03:42:e9:f0:48:ca:7b:66:08:83:84:72:03:
73:6e:e7:7c:07:98:8b:c3:18:6e:0a:af:2d:7b:f9:
4a:ee:b1:26:df:2f:a8:13:1e:3f:cd:ee:ee:17:95:
58:b9:0d:64:30:2d:c1:05:b0:83:4b:3b:0a:dd:45:
62:ca:31:e3:15:f6:ec:83:ae:4b:f5:32:62:75:08:
ba:e7:87:fe:81:cc:65:68:68:30:5a:b7:77:2e:38:
ad:0f:60:cd:62:ee:e5:c1:b7:e5:4e:06:79:6f:ce:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:E9:83:C1:61:84:C1:63:A0:E7:31:9E:89:4F:BC:FD:93:BE:48
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:33:63:34:0d:20:00:27:90:e7:54:d7:75:97:bb:23:df:
d6:2c:34:12:5b:58:b3:5e:fc:f3:36:38:d0:e7:81:3b:b2:56:
9e:83:b4:b0:f6:6a:8a:3a:63:74:8a:c9:07:9a:c9:06:a1:19:
86:b1:eb:bb:70:9d:66:f0:d3:79:10:6f:1f:49:1f:14:e0:12:
c9:48:ac:84:8d:db:44:4d:38:4d:62:da:49:92:1f:1d:38:37:
6d:c5:12:0d:52:7b:c8:f0:6f:8a:f1:58:e7:dc:a2:85:4c:6c:
25:40:09:57:f1:23:ad:e2:4b:1f:b3:95:5c:d1:4a:16:04:3e:
6e:21:f9:54:c2:29:4a:5a:a7:3b:05:2a:b1:aa:09:da:45:75:
58:ef:b7:e7:f2:95:11:46:cb:ff:63:6b:3e:aa:18:98:4e:00:
e5:24:2c:b3:4c:30:09:69:f7:70:ab:1e:5d:dd:8e:19:7f:08:
b4:15:75:b9:53:a5:46:bf:63:03:fb:dc:5a:d9:13:f2:d2:ff:
9a:ff:60:40:4a:8c:c2:f5:41:7c:c8:73:28:1a:fe:93:70:21:
9b:32:11:11:b7:98:9d:da:25:8a:f2:01:29:70:8d:9a:17:9f:
cc:ae:f9:9e:b3:af:2f:bc:09:aa:ee:d0:64:d1:45:c5:e2:7e:
37:23:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:33 2025 by rpki-client