
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: vZjS7owdYmx2Sj46cLC28BJWs/gsIpVTdRg8KyacK4Y=
Subject key identifier: 5A:5C:4A:0A:7A:38:91:A2:F0:0A:1C:25:45:27:E9:18:08:D8:1E:47
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 0197B8FD68A10E189576223B5976CC4D5C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:44 +0000
Manifest this update: Sun 29 Jun 2025 00:01:44 +0000
Manifest next update: Mon 30 Jun 2025 00:01:44 +0000
Files and hashes: 1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=)
2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: wJGRcvFKjb2CNUztmzXNG4WoJDgcTiVMZqasWz3ZG+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:68:a1:0e:18:95:76:22:3b:59:76:cc:4d:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Jun 29 00:01:44 2025 GMT
Not After : Jun 30 00:01:44 2025 GMT
Subject: CN=5a5c4a0a7a3891a2f00a1c254527e91808d81e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:32:d6:ea:79:f8:74:0d:4e:d0:86:4c:e7:
6e:9d:14:f1:d9:29:30:99:0a:61:fe:ad:96:c0:cd:
02:db:9b:75:27:93:34:f6:30:8c:d7:24:3f:fd:8b:
bb:a7:87:c8:00:35:c3:7c:c1:d3:1c:ca:94:ad:59:
16:a1:87:59:ec:62:44:fe:81:00:2e:8f:11:de:46:
64:a3:5d:09:72:4a:11:59:2b:9f:2a:57:d6:ef:5a:
77:a2:1a:1c:ae:07:d6:cf:e1:ad:29:5c:30:ad:54:
c4:15:55:78:cd:19:c6:17:1d:0b:41:42:7b:02:82:
e4:24:aa:c5:f4:e9:99:08:9e:20:c4:5d:23:24:66:
b4:69:58:d9:06:ec:fa:c5:c8:fe:fd:18:20:d8:61:
f6:19:37:22:d8:51:f6:90:8e:ff:eb:89:59:27:84:
bb:71:5d:de:c4:ef:67:32:53:3e:e0:1f:ab:15:9a:
d5:99:fb:dc:96:0d:a9:42:f6:8d:c6:7d:d7:30:1e:
7a:94:f9:cf:54:8c:5a:b8:a9:24:4b:0b:82:57:c8:
66:24:58:b1:d0:17:c3:ff:4c:87:95:e1:f2:9e:9a:
e9:df:cf:99:a3:7c:ce:8c:d6:6e:c8:7b:45:ec:b0:
e6:e9:d8:d4:db:e6:f1:40:af:ee:5d:70:1d:85:c0:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:4A:0A:7A:38:91:A2:F0:0A:1C:25:45:27:E9:18:08:D8:1E:47
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:93:90:cd:28:81:bb:59:be:fc:5e:43:a0:73:98:51:d5:7c:
bb:78:4e:8a:d8:85:47:cb:62:f1:21:e6:6c:ce:31:d8:a3:28:
f3:92:d7:41:b5:d8:32:83:eb:21:ae:ae:d4:5c:73:75:41:21:
87:6d:f0:d1:1f:02:c3:6b:3a:c7:51:09:2f:f7:b4:3d:08:77:
8f:ce:3f:16:25:d3:f4:87:f3:fa:83:0e:de:9f:94:70:11:ba:
a4:8b:27:8c:be:75:17:b6:ae:1a:c2:e2:9c:0f:92:c2:a2:7a:
83:25:71:34:8a:f6:60:56:5a:d0:cb:ae:f8:e3:27:04:53:20:
5e:44:1f:3d:3a:1c:17:97:8d:29:5d:d3:b0:3d:dd:90:9f:b4:
39:fb:f7:8c:7a:5a:d1:31:db:a6:aa:88:73:0f:0a:f5:04:bf:
ed:7e:86:6b:90:50:95:99:7e:15:70:2f:e4:bf:2b:c8:b9:84:
fc:09:d3:7b:86:f0:0a:77:6b:ef:28:59:97:b9:73:0d:f7:bd:
08:cd:64:99:af:d0:d4:50:bd:5c:5e:07:99:bf:dd:25:62:ee:
66:a0:0f:4d:a0:54:83:2c:ea:22:36:1a:e8:7c:2b:47:3b:5c:
a6:6f:1e:15:2b:b9:1e:4d:24:d6:1b:10:8c:f8:29:ff:08:53:
d2:01:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:40 2025 by rpki-client