Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: pRzGPKDXBlLWLietEOugzT6MGDF0kAIM8opndA39ysw=
Subject key identifier: FB:B1:89:BA:9A:82:7A:92:6D:FC:44:40:83:DE:EB:9C:76:71:E0:DB
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0196BC37663336E4C7E0B13DC1057260B4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 22:01:09 +0000
Manifest this update: Sat 10 May 2025 22:01:09 +0000
Manifest next update: Sun 11 May 2025 22:01:09 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: KlYRhCAGpa1TP0huV1I77oOA53kLw0o5G8KKRk5VozQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:66:33:36:e4:c7:e0:b1:3d:c1:05:72:60:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: May 10 22:01:09 2025 GMT
Not After : May 11 22:01:09 2025 GMT
Subject: CN=fbb189ba9a827a926dfc444083deeb9c7671e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:46:e6:66:03:5c:86:96:cf:e0:33:8d:63:
5d:11:82:4c:a4:80:e1:60:cf:18:0f:b5:1c:cd:aa:
ca:e7:96:c0:51:ae:0a:37:07:f1:51:fd:3f:ea:3b:
08:3c:97:90:b2:88:d5:d8:db:97:d3:4c:d8:34:a1:
57:72:7b:73:58:8e:0c:3c:64:a5:3c:38:64:9c:dc:
82:97:8a:df:df:f4:70:46:f4:a6:39:e0:1d:60:dc:
9f:3e:c7:fb:0f:8a:f3:d0:5c:de:e5:c0:d9:8a:01:
5f:17:d7:91:30:17:6f:38:4d:c5:7e:fd:26:52:24:
2c:6e:a9:04:d1:5e:09:9f:f3:03:60:01:ab:e1:f9:
c2:86:5e:23:76:f1:08:1d:ec:9a:0c:dd:2c:05:d9:
5a:21:65:d9:5c:bc:60:6b:60:d9:94:69:40:c5:5a:
2d:30:be:f6:cd:2e:ba:c1:da:63:60:15:c5:e6:52:
67:dc:df:89:8d:a0:99:cc:a5:71:e0:0a:b9:cd:58:
fb:56:26:8c:45:dd:75:b0:23:5a:7d:d1:8f:d9:15:
9d:24:05:64:14:63:30:ed:8e:a7:c9:f1:7e:68:74:
34:84:39:f2:72:d8:a2:6c:e5:be:c0:d7:a0:e1:e7:
82:82:87:5d:7c:f7:2a:f0:f0:ad:96:02:75:41:c1:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:89:BA:9A:82:7A:92:6D:FC:44:40:83:DE:EB:9C:76:71:E0:DB
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:f8:db:b2:66:7a:3d:8a:87:fb:c7:98:68:be:3e:ce:5e:
50:fc:c2:8e:c0:15:ed:6d:a4:fe:33:6a:11:25:59:04:59:86:
ff:cd:1b:47:48:f8:99:6c:4e:af:c5:6f:76:69:89:a5:67:b5:
e0:e9:da:ec:52:9a:73:24:60:74:19:9c:ec:31:2f:9d:68:f3:
be:67:9d:a9:88:a8:cb:ff:a8:fb:4a:ed:7a:98:d4:aa:45:9a:
29:79:ca:1b:1d:75:45:05:fa:ea:2c:5a:9b:95:f0:97:e3:91:
4b:9d:27:dc:46:ed:54:7f:dd:90:c9:24:9b:e9:0c:65:f4:0e:
ca:c9:20:9b:77:6d:02:19:ef:cb:23:09:83:96:df:0e:77:0b:
dc:62:6a:92:3a:c5:ce:1b:04:fd:34:7b:b6:28:66:9f:f4:7e:
85:aa:07:fb:b5:af:18:24:80:ea:47:cc:23:d6:57:26:4e:71:
d9:63:aa:0a:ff:96:50:fb:12:28:cd:7f:f4:28:84:04:95:9c:
12:f6:b5:a7:a1:f7:4b:23:9e:b7:5d:01:04:82:bc:c9:3a:fe:
44:f1:fa:85:20:dd:ff:78:36:6d:d1:9a:d7:21:68:fe:0a:3c:
3d:0d:17:2c:c8:9f:41:d5:00:05:1f:bf:89:97:a9:f8:6e:84:
3c:a2:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:23:28 2025 by rpki-client