Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: afECYjgqBSk9Yy7xRouvT1UCah8QxdwgHJik8dqlGzA=
Subject key identifier: E3:80:6B:14:18:D1:45:F3:50:01:50:15:9A:96:70:8F:E8:09:70:A2
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0197759BE2A79997948EA8D56DB5A2C01289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 22:00:39 +0000
Manifest this update: Sun 15 Jun 2025 22:00:39 +0000
Manifest next update: Mon 16 Jun 2025 22:00:39 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: iqyjPUKMaMJWxw1ib1peopKPyeI8KtPd9+fgW6eqxao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9b:e2:a7:99:97:94:8e:a8:d5:6d:b5:a2:c0:12:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jun 15 22:00:39 2025 GMT
Not After : Jun 16 22:00:39 2025 GMT
Subject: CN=e3806b1418d145f3500150159a96708fe80970a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:14:ee:78:5d:cb:8b:a2:b8:1c:f8:3a:90:
de:1c:f8:7c:81:74:c5:36:3c:ea:4d:dc:91:04:a1:
0e:10:f1:20:9e:3c:36:e5:a2:35:e2:11:cf:be:7e:
01:bf:ec:8b:46:de:10:06:69:83:b9:1c:e8:2a:3e:
8f:65:f8:d7:03:3a:53:f3:5c:5e:1c:07:4f:6e:92:
d1:59:ce:fe:d2:c4:9c:80:31:ef:f5:35:ba:86:01:
24:06:9e:46:bb:61:66:1f:59:35:39:10:2c:73:a2:
62:7b:41:5d:8c:d0:42:82:fc:73:1b:d2:f9:79:cd:
ef:d0:7a:05:0c:80:4e:27:b7:c0:a1:b5:95:87:be:
13:b5:ef:fb:5b:6c:27:92:17:5d:a5:79:67:e4:a7:
9b:12:2e:4a:f2:03:15:ac:0b:ea:41:6c:1a:c0:13:
4b:c1:06:83:95:c0:e5:42:bf:2f:e2:ef:c4:62:da:
e5:95:d9:85:1d:05:8a:38:47:75:be:7c:65:05:8d:
90:6b:f5:2c:65:04:aa:30:d8:68:99:1d:2c:7e:d4:
0c:f0:b3:7c:44:76:16:da:9b:b8:32:1d:be:4b:03:
fc:ef:39:8c:4d:ad:a5:b0:d5:54:53:a5:8e:ee:6c:
95:65:b6:aa:e0:71:9b:a0:06:94:49:42:a0:2c:1b:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:80:6B:14:18:D1:45:F3:50:01:50:15:9A:96:70:8F:E8:09:70:A2
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:94:2c:ed:92:7c:06:30:dd:bf:25:de:97:e1:b5:2b:72:6b:
b3:0e:ac:03:3a:73:73:be:27:29:68:ca:d4:a8:a2:0f:71:48:
4e:00:ff:a0:62:07:3e:56:62:82:b5:7a:9a:30:a4:f2:95:38:
43:c7:80:e1:a8:c6:55:55:1c:72:be:81:60:b3:99:c3:c6:dc:
35:ce:cb:11:38:1d:91:76:e5:28:e7:23:a9:dd:ef:4d:3f:98:
37:2a:9a:1c:fa:c8:d4:ed:e9:28:b5:86:f0:37:17:68:b6:35:
3d:57:5c:fe:91:2f:53:7e:04:19:f1:ce:f1:8e:b8:a9:44:30:
76:72:cd:4d:25:df:d2:c4:4b:e4:af:16:b8:65:92:23:0e:fe:
87:38:57:91:d9:c1:ca:c1:64:07:6a:b8:e4:33:72:6e:06:b4:
82:6b:5a:c5:36:03:47:f1:06:51:87:51:98:4f:29:f6:c6:42:
df:c5:ed:c2:02:4d:6e:d3:9f:75:89:83:ac:29:ed:aa:7c:8d:
05:27:e6:fc:54:81:09:a4:8b:32:24:73:ab:a3:31:2a:4a:76:
0d:7b:4a:a8:84:67:67:9c:43:cb:cb:1e:36:da:e8:9b:7a:4c:
42:98:de:36:28:6a:db:db:bd:b1:98:a8:8e:88:d6:c0:3a:4b:
7a:e4:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:22 2025 by rpki-client