Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: 91EMiQRhjMwsUHkxex0/u4FDnMnefxJLjMphQagPHtc=
Subject key identifier: 56:2E:44:9D:D0:70:07:65:BC:2D:44:92:B9:22:F5:79:DC:F0:9C:32
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0198D6612B80D10C5DEBC063E2CF5C9695D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: _TL6mTZXcLYAPXlu1htfIyUl8rc.roa (hash: auu5lQMtJmBXhYLmFNZ2Cdy4mHQJ8c7v+J19cT4Wc3U=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: VDILtEpWdYRzPaozE50daUTpPS+X2Ecww4rQ7hOWHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2b:80:d1:0c:5d:eb:c0:63:e2:cf:5c:96:95:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=562e449dd0700765bc2d4492b922f579dcf09c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:bd:92:53:a9:bd:b2:b8:f7:4b:f3:fa:77:
b7:7f:3a:5f:3c:30:42:bb:bc:fc:34:cd:98:55:76:
db:01:a4:44:36:b1:6d:10:fd:17:a3:9b:9d:8b:a0:
54:28:01:92:bd:23:3e:e2:06:76:43:7b:a9:88:ec:
55:33:99:bf:07:7f:82:09:12:48:69:f6:5f:ea:37:
c1:81:56:03:da:3c:99:a3:5f:9d:9a:0f:54:da:6a:
11:91:d4:da:7e:67:d1:a7:a7:99:98:a5:70:aa:e3:
1f:82:23:e8:55:f0:07:c5:e3:48:77:ea:73:35:40:
c0:25:49:65:b5:ec:f4:2f:6c:00:72:df:c4:4f:a0:
f8:46:4f:54:7c:d5:97:69:11:fd:5a:23:4b:96:7e:
7f:24:01:1f:25:91:1b:cb:d5:99:6f:50:a1:38:ed:
27:5a:7f:56:50:f6:ae:4f:4d:b2:bb:7c:36:8d:3a:
73:4d:e7:8f:ab:dc:d5:c6:d3:a3:d1:cd:a5:b2:d2:
94:d7:6b:3a:ea:58:3b:e7:63:e7:35:49:0a:de:1f:
99:58:37:8b:bb:ec:b8:95:64:e9:39:cb:35:a4:36:
bc:a4:29:be:fd:3c:16:1f:09:d2:a7:f5:fb:24:cd:
a5:54:24:1b:8d:a7:10:cd:e3:2a:f2:a5:48:6b:be:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:44:9D:D0:70:07:65:BC:2D:44:92:B9:22:F5:79:DC:F0:9C:32
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:c3:03:4f:36:37:62:93:65:c3:8c:7f:6d:2f:36:7f:e7:
66:d8:f8:06:95:83:4e:e0:d6:98:e0:e3:9e:11:4f:e1:66:2f:
34:12:6b:c8:a3:b8:79:6b:f3:0b:bf:f5:33:f7:17:ba:5e:35:
98:41:29:85:47:78:0a:fb:1b:2c:35:3c:f4:51:48:f8:76:84:
ce:ba:fb:08:9d:b6:e4:f1:05:23:7a:49:f2:b1:e4:85:5c:c8:
40:bc:ae:17:a3:ee:50:1e:f9:3e:18:5a:09:80:ec:37:e6:31:
8a:2e:26:2c:b2:76:a1:63:d6:a4:4d:8b:43:36:af:91:8e:48:
e8:10:16:42:fa:0e:57:a7:a1:c9:7f:b9:32:96:44:ec:ee:8c:
7e:76:ca:5e:2a:73:5b:d5:fb:96:68:77:2f:0f:c5:5b:b3:6c:
1e:90:b5:f6:78:de:57:4b:54:a2:c8:79:94:01:f1:17:4a:0d:
0a:b9:77:99:20:aa:4b:39:fd:ba:92:ef:af:6a:59:4c:8f:b9:
62:92:4e:5c:0b:1e:05:fb:fc:d6:32:d2:bc:95:b5:e2:29:a9:
03:7a:a2:21:0d:69:0d:15:f7:4a:cb:dc:dc:af:c0:4f:86:ff:
3d:4a:76:b8:df:07:d9:21:9d:e6:2d:7c:ca:73:61:cd:39:ad:
69:4d:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:47 2025 by rpki-client