Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: lTRwF5H/81po7rv/XQVFS2jswwEEKnYglXV5ZbPVkAk=
Subject key identifier: 21:5B:23:54:E2:CA:14:18:9E:10:E9:0B:27:79:99:C3:27:1B:75:D7
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0198D660363EDD92372CF3E39619270D88DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: zkZvdc+ZU13D9mNXCxRTT1/afvkhW3oU6PIWQrhaU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:36:3e:dd:92:37:2c:f3:e3:96:19:27:0d:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=215b2354e2ca14189e10e90b277999c3271b75d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:6b:47:f3:b3:9b:4a:9c:16:fd:c5:6a:46:
64:82:da:a7:37:57:a9:9f:93:40:c6:f1:a4:94:e3:
39:a2:eb:e9:3a:07:61:90:e5:4e:e7:de:27:75:22:
34:63:17:b6:ae:62:34:ce:a0:4d:60:bc:21:f6:a0:
2a:80:6a:f1:5a:ba:1a:a7:88:14:e8:86:0d:bf:b9:
57:dc:64:65:72:11:85:ca:48:4a:8c:ff:b3:99:0f:
60:68:27:2e:98:e4:96:e6:1e:9f:30:92:fe:09:7d:
f3:89:87:86:0a:43:74:8f:52:b3:9a:f7:05:a6:92:
34:6f:f3:c5:83:46:10:b3:33:de:d9:c7:db:79:73:
46:86:39:8b:3e:cc:a3:d7:23:dd:25:2e:d9:2c:ce:
53:d7:60:23:cb:cb:f0:34:e4:85:40:1c:18:15:e6:
8a:a5:91:ef:86:44:e6:17:bf:78:87:c9:aa:86:db:
c5:e0:e3:c0:75:7b:7f:1c:74:81:fa:3b:d3:bb:2f:
c1:51:b4:25:51:9a:bc:58:65:de:fe:91:e0:d3:17:
c5:c4:d7:ad:18:ba:02:fa:40:62:f2:a2:f2:70:cd:
92:00:37:f8:cd:b0:a5:cb:34:72:79:29:e6:52:43:
2f:f2:11:5f:7d:51:fe:ef:24:2b:58:4d:60:5f:f8:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:23:54:E2:CA:14:18:9E:10:E9:0B:27:79:99:C3:27:1B:75:D7
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:59:00:28:04:e2:91:96:3c:cb:8c:f9:26:08:f9:4f:05:
31:70:0f:c2:c0:58:a8:35:12:c9:93:4e:c0:5c:04:0d:38:d3:
a7:da:28:41:9f:a8:bb:4b:72:03:ce:6e:55:f4:33:30:80:36:
8c:b5:10:93:6e:c7:4d:3f:6e:65:4d:e3:4b:32:b3:69:2d:c7:
64:1f:eb:09:08:92:de:62:c9:11:c9:71:08:ef:70:e2:16:d0:
7a:27:a3:e6:09:2c:ef:f8:6c:76:24:e4:db:0d:4e:0d:0b:57:
0b:dc:d2:33:99:07:28:41:70:1f:8f:19:63:70:1d:d8:b2:6b:
0f:b4:c4:5d:86:65:9c:83:4d:6e:14:e4:a8:15:da:1e:c1:de:
34:85:f3:f6:bc:61:1a:ca:78:e0:93:9b:cc:46:87:15:3b:e3:
e9:bd:d7:86:3a:a6:5f:58:6b:ee:34:36:d0:9b:6f:61:18:50:
d2:35:ae:4c:e8:91:0e:9c:5b:a1:fd:61:a4:67:41:70:10:27:
e5:c4:d8:04:db:58:9a:09:69:81:42:14:13:b7:ff:7f:99:98:
70:93:5c:23:46:f5:94:57:b2:2e:2f:79:36:b5:85:fc:40:94:
f4:fd:1b:d1:e2:cf:2b:7f:6b:c3:a5:1e:cc:77:88:06:fd:83:
84:02:71:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYDY+3ZI3LPPjlhknDYjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjUwODIzMTAwMTI2WhcNMjUwODI0MTAwMTI2WjAzMTEwLwYDVQQD
EygyMTViMjM1NGUyY2ExNDE4OWUxMGU5MGIyNzc5OTljMzI3MWI3NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVrR/Ozm0qcFv3FakZkgtqnN1ep
n5NAxvGklOM5ouvpOgdhkOVO594ndSI0Yxe2rmI0zqBNYLwh9qAqgGrxWroap4gU
6IYNv7lX3GRlchGFykhKjP+zmQ9gaCcumOSW5h6fMJL+CX3ziYeGCkN0j1KzmvcF
ppI0b/PFg0YQszPe2cfbeXNGhjmLPsyj1yPdJS7ZLM5T12Ajy8vwNOSFQBwYFeaK
pZHvhkTmF794h8mqhtvF4OPAdXt/HHSB+jvTuy/BUbQlUZq8WGXe/pHg0xfFxNet
GLoC+kBi8qLycM2SADf4zbClyzRyeSnmUkMv8hFffVH+7yQrWE1gX/ipxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFbI1TiyhQYnhDpCyd5mcMnG3XXMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+VZACgE
4pGWPMuM+SYI+U8FMXAPwsBYqDUSyZNOwFwEDTjTp9ooQZ+ou0tyA85uVfQzMIA2
jLUQk27HTT9uZU3jSzKzaS3HZB/rCQiS3mLJEclxCO9w4hbQeiej5gks7/hsdiTk
2w1ODQtXC9zSM5kHKEFwH48ZY3Ad2LJrD7TEXYZlnINNbhTkqBXaHsHeNIXz9rxh
Gsp44JObzEaHFTvj6b3XhjqmX1hr7jQ20JtvYRhQ0jWuTOiRDpxbof1hpGdBcBAn
5cTYBNtYmglpgUIUE7f/f5mYcJNcI0b1lFeyLi95NrWF/ECU9P0b0eLPK39rw6Ue
zHeIBv2DhAJxQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:12 2025 by rpki-client