Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: QB61+wagvCFyPO+TGmnltWSWbjDQcTFLQLQk8rUZuqQ=
Subject key identifier: AE:09:2F:C2:59:97:61:62:46:E8:63:48:17:E8:E3:22:BB:BB:34:D2
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0199FBEB6BE54A7B07EB25830D573F904F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: zMNaXibQdVg9XhGs45dfdpvalBxa79dr1PZbx/piaNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6b:e5:4a:7b:07:eb:25:83:0d:57:3f:90:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=ae092fc25997616246e8634817e8e322bbbb34d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:2c:8b:e3:47:69:38:89:57:f2:a2:1e:73:
de:d7:3f:f3:34:07:f5:04:2e:15:10:6f:df:27:c1:
47:05:a5:dd:c4:fe:58:7a:8a:d9:ea:71:69:d0:a6:
b2:58:dc:fe:ab:50:9c:99:29:5f:fc:39:80:67:3d:
41:1d:11:33:ba:cf:3b:06:1d:54:09:ad:5b:71:51:
88:b0:5a:fa:ee:50:dc:91:4d:86:a1:79:34:f3:25:
df:35:f5:31:53:c4:09:63:b0:e9:67:2b:1a:ac:e9:
d9:cf:e0:88:23:6c:44:e0:0e:b2:21:0f:aa:8d:ba:
13:24:08:3c:3b:c2:50:09:9a:dd:2e:f7:86:20:00:
ce:80:91:89:9b:3a:a8:f6:44:73:36:b3:f2:2a:62:
7f:d3:09:b7:c1:6f:91:53:58:a0:74:bc:db:f4:89:
ae:71:df:fe:6e:2b:ab:b9:31:b6:f1:b6:c0:49:56:
bc:9c:14:62:b4:51:33:ce:4b:2d:71:cc:39:25:73:
0d:63:63:00:42:30:4f:ff:66:2c:86:f9:d1:35:8f:
c6:07:6a:f6:f0:e2:2d:c5:87:b5:21:6b:49:c9:44:
e9:6b:52:e4:9f:54:9a:37:8e:e7:e4:49:d1:dd:43:
ab:b4:a8:9c:a7:ea:1a:f3:d2:62:3b:2c:96:a3:21:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:2F:C2:59:97:61:62:46:E8:63:48:17:E8:E3:22:BB:BB:34:D2
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:32:33:24:0f:b5:5c:7a:f7:f6:f9:61:53:69:45:c7:4a:
c7:dc:04:fb:19:ff:7d:00:20:43:78:cd:14:99:43:b7:41:85:
c5:2b:e1:7a:58:2b:9b:cd:fe:53:be:be:7b:3c:ed:ce:3e:0e:
94:62:e5:3d:43:48:96:3c:15:fc:41:37:73:cb:98:ed:16:93:
eb:67:4e:b9:b4:b5:35:35:bc:ab:47:79:ca:29:97:50:14:58:
39:d4:47:42:d6:a9:f1:81:d7:3c:53:57:f5:2f:ca:d5:56:7a:
42:2c:88:42:c6:f6:f1:5b:17:ac:3f:2f:4a:94:3e:66:4e:3f:
b1:6b:20:63:be:53:5f:d6:1d:21:bf:8c:43:8b:f2:c9:90:ef:
69:9d:36:12:cb:98:72:5a:a4:90:8e:71:42:0b:a4:fa:e7:60:
77:27:80:b3:35:8f:24:be:dd:0f:8f:9b:24:d8:ac:d3:7b:26:
fa:3b:e4:28:a9:6e:d5:1f:35:8f:4a:9f:65:25:f6:2d:14:81:
39:1a:05:18:d7:7c:b7:55:6f:77:11:eb:41:1e:83:e5:1e:8f:
0c:09:21:43:97:55:47:a0:cc:59:6c:f9:2e:7c:b8:11:5b:4e:
7c:57:4d:3d:aa:58:1d:a9:4c:84:15:d5:19:c5:f8:5e:0a:e9:
94:3a:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:04 2025 by rpki-client