Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: yE0Zh9ZwhdBT5ykeGoado5RrKsIEL32ORtoqgE/nW5s=
Subject key identifier: C1:59:60:B3:15:1C:D2:E2:0C:1E:C4:17:4F:BC:8C:9B:EC:81:A5:A5
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0197B6A17F22692393495197C266E8297EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: Bw0CdQxWk7idbEcOSSUrZyjBQZ1dblXh7t/lDxDWBew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7f:22:69:23:93:49:51:97:c2:66:e8:29:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=c15960b3151cd2e20c1ec4174fbc8c9bec81a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:7b:68:eb:bf:f5:90:31:74:c0:02:ba:ac:
2c:18:b6:15:81:ce:27:4c:ee:78:84:72:d7:c4:df:
73:b9:36:98:bd:e2:31:be:95:40:ec:61:38:bb:f9:
aa:e8:e4:35:ea:f1:e8:99:1c:b6:04:fb:b2:e5:e8:
b2:65:63:a2:5e:28:a0:77:e3:23:ad:e9:9f:58:36:
1f:69:59:72:25:72:54:42:7f:57:77:44:9d:07:1d:
32:57:20:13:b8:2c:cc:d1:43:f1:3b:9e:8d:9c:06:
05:a5:73:10:96:38:31:13:51:09:49:84:26:19:25:
ec:20:81:15:1a:06:4b:28:27:7f:30:0c:5a:0f:79:
90:ae:f7:ad:74:b9:b6:9f:7f:e7:b8:ef:3e:0d:27:
e0:9b:be:02:58:27:28:57:b6:f5:e3:9b:e9:17:be:
36:aa:8b:1b:45:05:1c:c0:d1:45:bb:59:36:11:8a:
2a:17:b6:d7:3e:ab:32:a0:41:0d:98:90:ab:29:04:
7a:98:b0:39:e4:67:b5:40:58:b5:2a:e8:02:b7:47:
47:87:3e:38:5f:18:fc:e6:cb:f3:99:15:9f:58:ec:
ba:51:7d:67:59:de:9c:d1:15:28:3e:ec:aa:83:cf:
65:5d:4a:7d:65:44:1d:7a:45:31:ab:04:a4:65:4e:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:60:B3:15:1C:D2:E2:0C:1E:C4:17:4F:BC:8C:9B:EC:81:A5:A5
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:ba:a0:3b:8e:ab:de:91:b4:5e:cb:db:ae:d6:69:f8:46:
c3:87:1e:d9:94:f2:bb:39:f2:f9:58:2b:f4:88:78:f1:03:c4:
ce:2d:27:14:fa:e8:f6:02:86:46:c1:59:e1:4b:e5:b7:ce:ae:
c1:ea:4d:09:17:7f:7f:43:fa:f8:20:6e:84:f9:e2:67:3a:59:
58:3c:25:17:97:dd:13:49:79:df:dd:20:e3:29:f8:95:24:d1:
dc:7d:b7:48:88:3e:50:d6:18:d8:7b:71:66:3b:29:32:64:53:
76:80:6c:6c:fa:7c:86:a7:91:77:71:96:96:81:44:f8:cb:c7:
07:d1:65:b2:ca:05:04:5b:1e:7e:ef:2a:cc:bc:0f:5c:e8:38:
74:a0:4c:3d:bb:e4:b6:a5:40:e1:bd:13:5e:de:03:4e:86:94:
6a:11:ce:21:a6:0f:26:ce:e2:b7:4f:5b:70:ce:c2:e7:7e:a8:
24:1a:b8:33:81:76:c9:65:cb:00:10:71:57:e6:7b:ce:ba:81:
64:1c:59:84:ad:d0:db:73:35:01:27:4b:a4:b3:70:cb:5c:0d:
2f:fc:a9:5b:90:09:fa:27:19:7b:01:21:d5:5c:4d:00:21:8a:
7c:f9:f8:c6:95:0c:3d:cb:04:56:99:29:1f:32:28:13:d6:35:
4c:0b:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:12 2025 by rpki-client