Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: rIS+gWjauEAh2FGIcRtMmywNk4JwBVc3Jk3HJ80ECNo=
Subject key identifier: E4:DB:29:47:38:E0:B4:B2:26:50:C0:A7:D6:07:4D:A3:03:82:78:C9
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0197B745157E68FA93707250E34FF9AEE59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: PS4DYDW7ZuiUeVXIu8yIpW3qxuxLhnu7V74lzrkcKKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:15:7e:68:fa:93:70:72:50:e3:4f:f9:ae:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=e4db294738e0b4b22650c0a7d6074da3038278c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:bc:52:e1:a5:e7:6e:67:66:7c:12:3b:fb:
68:91:db:dd:f9:b5:20:f3:a7:b0:da:e6:67:40:e0:
7b:22:9d:fd:8a:06:dd:48:0d:48:e7:e5:81:77:f1:
e3:38:8e:e8:d5:7c:3c:be:01:ef:b1:06:99:69:7c:
9b:1d:09:48:09:9e:76:fa:ed:65:e4:2a:47:61:fe:
60:47:4c:1c:82:af:db:cc:48:37:98:58:c1:ba:6e:
36:e1:51:5f:ce:f2:ee:98:19:1a:87:52:a5:60:09:
a2:2c:47:c8:af:15:d6:5d:df:4b:e7:88:9b:ca:97:
95:f4:90:46:0b:9c:52:3d:13:5d:62:09:06:6a:46:
fd:d3:00:04:fb:98:1a:56:1d:a7:a8:55:70:df:1d:
fa:ca:34:fa:b3:fb:24:1e:2d:c2:5b:cf:36:10:b3:
7b:f0:bd:2b:71:4b:18:ce:ee:b3:f0:75:6b:90:63:
ca:fb:71:3d:5e:1d:89:84:8e:21:9b:8f:6f:b7:16:
52:1e:aa:a0:2b:fc:4b:44:23:07:b6:9e:33:bc:66:
34:60:85:ff:5d:f6:a0:1f:f1:4f:9d:09:1e:c2:9a:
79:8a:a5:43:7a:c9:74:20:77:8b:91:29:47:22:05:
4f:ce:bd:07:a1:2e:cd:8d:27:22:72:cc:bb:f5:cf:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:29:47:38:E0:B4:B2:26:50:C0:A7:D6:07:4D:A3:03:82:78:C9
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:71:4d:36:b1:2b:60:13:c8:06:54:e9:a1:be:52:e5:03:54:
e5:b9:ed:d7:6d:e4:52:bc:d5:37:34:f8:00:34:77:14:05:36:
69:98:49:76:8e:5b:6b:ef:5f:d0:6e:c9:05:17:9f:6f:15:55:
39:5a:52:6d:5b:96:ae:6b:a6:04:0e:21:43:d3:b0:54:5b:c3:
cb:b7:e2:88:12:33:93:cc:af:0a:1e:0c:04:4d:52:12:70:7a:
19:af:c9:76:b3:1c:f2:35:04:e6:6e:46:16:5e:55:26:ed:c5:
c2:1d:da:da:b3:e9:a8:b9:60:aa:f4:fa:99:54:f7:e1:54:ba:
bb:79:b8:29:ed:3f:67:44:70:c5:e2:47:78:ba:7b:8b:4d:43:
a1:ae:26:ae:18:91:38:7e:7d:21:5b:2c:16:41:97:a0:b0:d9:
61:ea:f4:9c:22:77:cb:a5:51:14:87:1d:4b:a0:2c:23:56:a8:
19:6c:53:24:34:44:7e:6e:9c:e3:68:8f:53:d4:c1:47:0b:da:
d7:9f:84:ce:8b:52:48:55:64:35:1c:0e:33:e4:42:6a:5c:57:
6f:ea:93:e5:69:0a:a8:22:1b:a6:fc:4b:5c:55:0c:d4:6a:e2:
33:7f:90:eb:ae:0a:a2:bf:d3:0d:b9:67:f8:ed:c4:a7:c8:8b:
6a:57:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:55 2025 by rpki-client