Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: G6XlampuQ8EghnJO8DCuaW3MBHw7wSqycJtqdrb/H+E=
Subject key identifier: C0:E4:B3:59:C6:8F:46:70:E6:28:DD:E4:A7:7C:A1:15:1B:00:62:AA
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0199FBEBF0105480F753A6B9E07D31171512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: _TL6mTZXcLYAPXlu1htfIyUl8rc.roa (hash: auu5lQMtJmBXhYLmFNZ2Cdy4mHQJ8c7v+J19cT4Wc3U=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: OzLnQzKMowG8gMDCJF+KsqHEWNG07FqJWu9egKFU7KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f0:10:54:80:f7:53:a6:b9:e0:7d:31:17:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=c0e4b359c68f4670e628dde4a77ca1151b0062aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:0d:f5:69:11:23:af:07:dc:d5:53:a1:f2:
0c:87:87:9a:4e:37:eb:b4:a6:83:28:d0:8d:37:05:
ef:85:ba:68:86:af:97:49:da:72:d1:6b:c4:ea:0c:
26:8b:ff:66:ef:33:2c:4f:7d:c6:d1:a3:1c:d5:40:
a7:7b:34:e1:08:2c:dc:56:e7:80:3c:eb:d4:03:e2:
ed:42:2b:f9:21:cc:0f:48:89:d8:1a:04:0a:d8:f7:
7f:8e:9a:55:b4:7e:c3:53:38:70:34:05:5f:a5:d4:
96:9c:f6:55:45:2c:03:1c:24:96:e6:b9:7e:ae:f4:
3c:00:9e:52:c3:63:6f:0e:17:95:9d:d4:a8:c6:42:
1f:7c:fb:22:5b:1d:b0:2b:96:3f:8d:e7:c6:d1:ba:
41:61:a5:11:03:3d:22:3d:17:bc:42:8e:90:8c:a8:
32:e2:7c:17:6d:05:e4:77:8a:37:cd:35:a0:b5:28:
3d:8e:5c:10:88:1b:fb:de:fa:47:1a:9a:bd:8a:e0:
77:4b:82:13:7e:74:cd:ac:41:94:15:ae:78:76:76:
e0:eb:0c:a8:b5:f2:d6:47:bd:e5:e1:ad:58:f0:51:
db:63:eb:78:84:ee:e1:27:30:e8:0b:de:03:9e:ed:
41:d8:13:9f:4b:ce:a8:0b:0f:dd:47:17:68:b9:f2:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:B3:59:C6:8F:46:70:E6:28:DD:E4:A7:7C:A1:15:1B:00:62:AA
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:d5:4d:4a:87:ac:21:ac:bd:2a:48:d0:1a:17:65:06:20:
24:df:0a:47:ae:85:ee:b2:30:88:cd:36:52:4f:20:42:05:32:
cb:44:d5:5d:4a:43:fa:a3:9b:5c:0a:bf:cf:ac:bb:3e:10:c1:
ef:30:7c:fd:5f:e4:6f:8a:22:80:92:1d:57:ca:92:82:f1:f1:
cd:12:46:1d:c9:41:a8:6b:6a:f0:ed:ff:92:56:29:95:c3:cc:
70:fe:ad:8d:15:f3:97:24:a6:b3:11:8f:c9:c5:5f:c1:9a:78:
d0:a7:bb:f6:ff:e2:ea:f0:14:76:d8:7a:a5:f0:ef:fd:79:2c:
2f:50:98:68:c5:b1:c9:20:84:2c:b4:fb:b8:13:22:31:a0:32:
82:5a:88:6a:63:95:0e:a1:18:7d:da:9d:41:a8:14:a8:df:65:
e9:11:cd:c0:de:87:40:f0:62:11:3c:4d:f4:53:9f:28:06:9b:
82:a0:46:de:1f:5d:6e:ee:c3:a9:01:5c:1c:5c:25:5d:ae:0b:
37:e2:20:c8:e1:71:69:f9:81:3e:d0:19:38:1a:5d:34:97:64:
d8:e9:4f:0d:ef:28:7f:ad:09:ac:ff:a0:8c:9e:17:32:9e:42:
17:f7:c4:24:a8:fe:82:0b:fa:03:62:77:7d:36:38:00:c1:f1:
cc:14:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:54 2025 by rpki-client