Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: piaeBnuPxxfcFxDFlGWj2KqvR6fWSCYFpuIXlbiL9HA=
Subject key identifier: 30:80:F7:9E:38:F6:73:17:DF:15:43:95:4E:39:5E:A4:DE:C3:41:DE
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0196A653CD584F8EA7C29AA2A5791004F234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 16:00:31 +0000
Manifest this update: Tue 06 May 2025 16:00:31 +0000
Manifest next update: Wed 07 May 2025 16:00:31 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: RsWsDRagUtHdZDcbBx8rrS7tRAsQ7ojeakowdQ1uDZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:cd:58:4f:8e:a7:c2:9a:a2:a5:79:10:04:f2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: May 6 16:00:31 2025 GMT
Not After : May 7 16:00:31 2025 GMT
Subject: CN=3080f79e38f67317df1543954e395ea4dec341de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:58:65:44:fa:8b:cd:e8:e3:70:cb:bf:3c:
9a:01:e0:ee:c9:ed:0d:cd:2f:b1:86:6f:d1:f2:2d:
0f:ec:8f:5c:78:1e:67:05:2c:05:e3:14:78:80:30:
fc:a7:b2:eb:ef:4f:04:4c:cf:2b:59:e1:2c:fe:4f:
21:ac:f6:9e:7c:09:9d:36:4e:36:a8:4b:b6:99:28:
bc:3e:ea:dc:d6:ea:d1:6b:93:40:5f:bc:ac:1a:46:
72:41:ed:e6:47:1e:5e:53:f6:e0:df:6e:c0:15:b1:
b4:26:b6:f1:cb:05:b2:e9:37:11:71:92:b5:cb:92:
28:c5:26:24:71:53:da:01:4b:52:a3:53:cb:bd:cf:
a7:d1:86:43:69:ba:ee:11:d9:17:cf:89:58:95:9a:
54:34:3c:e5:91:b5:51:a1:3e:f0:32:23:7d:d4:ff:
12:f3:3c:57:13:a1:da:cf:4c:22:d2:24:f4:8f:53:
78:aa:59:df:6c:81:e5:b3:9e:9c:d6:b7:54:31:38:
87:a3:66:70:f0:84:92:ed:a9:b4:9d:cc:37:00:66:
d5:38:9d:36:a5:d5:6e:ae:5c:40:38:c3:a8:70:ff:
93:b4:b5:4d:c1:14:88:be:61:23:9c:44:39:23:26:
54:da:5b:02:ca:af:3d:4c:94:64:ba:8d:cf:5b:d3:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:F7:9E:38:F6:73:17:DF:15:43:95:4E:39:5E:A4:DE:C3:41:DE
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3d:97:d7:f4:cf:6a:29:cd:e0:26:63:b7:d6:a7:34:d6:e8:
af:3d:00:c9:0a:d2:c2:d4:f3:11:61:cd:87:25:79:c7:2f:98:
5c:34:77:cb:4a:5e:d0:67:32:b9:cf:17:48:c3:54:7d:be:07:
7a:33:d7:c5:6f:3d:40:dc:2e:1a:49:15:44:a4:a9:48:db:12:
1b:66:73:55:2f:3c:9b:59:7b:61:7d:5c:ef:dd:25:f4:21:4b:
8b:6d:be:e6:b0:43:f2:c6:38:ba:f5:ac:2e:fd:12:ee:eb:50:
f2:73:46:78:f3:e2:9f:26:20:4b:c9:f6:45:1c:d1:4f:4c:86:
5d:6c:78:0c:94:aa:90:c3:f4:2a:1c:ec:3b:4f:4c:09:6b:00:
93:06:e9:39:64:58:84:7a:5d:b3:57:61:19:d5:7a:67:61:0e:
9e:7e:83:9a:74:aa:12:2a:84:be:ab:06:55:86:1e:76:82:16:
1a:5c:39:4e:45:88:68:5e:fa:dc:f7:68:5c:53:58:20:d9:65:
13:45:22:d6:fe:17:11:cf:11:97:f3:2a:0c:eb:c7:99:41:5a:
54:f4:d6:6a:48:55:52:ab:74:6f:f7:1f:96:4f:14:30:d4:9e:
af:5b:0c:5b:04:e9:0f:03:28:86:94:06:c5:71:88:89:24:ed:
e9:59:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:25:08 2025 by rpki-client