Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: xk5B0lliJfrIC6AdrOevigggYf7tseQgUTnI8Dad6+g=
Subject key identifier: B7:D0:B0:BA:BC:BC:87:E1:67:29:E3:47:88:CE:AE:32:20:A5:35:88
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01976961A505859DF49A6FCBB2E9F8CFC267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: HW+FFvVkIjjj3MZcChaAqH9GPr1GLSV1zUeXmGqnIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a5:05:85:9d:f4:9a:6f:cb:b2:e9:f8:cf:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=b7d0b0babcbc87e16729e34788ceae3220a53588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:2f:28:f9:81:67:41:d1:b2:2d:3d:f4:29:
21:1e:4b:80:33:00:2b:71:66:9d:50:3f:0e:2f:69:
2f:91:c3:70:1a:03:22:d9:c3:42:90:96:2e:11:cf:
fe:e9:7a:6d:a2:3a:50:8c:c4:e4:b1:57:3d:74:6e:
1b:71:4b:71:0b:d4:9c:0d:df:3f:8e:88:d7:cc:9d:
59:41:89:69:10:06:6e:77:c2:8b:fb:15:f8:66:f8:
57:59:37:57:eb:10:9e:21:07:71:c6:91:73:08:e3:
41:e9:84:58:06:27:8c:68:aa:02:6f:87:d5:8a:4f:
fc:1c:66:77:1f:bb:0f:c9:60:d1:61:b8:a9:82:95:
cd:65:dd:98:54:4c:74:05:3c:db:10:c1:27:68:a5:
96:0c:7f:ce:7c:6b:76:3e:22:f7:36:bc:64:65:0f:
86:47:38:b9:9b:b3:39:e6:d2:d7:6e:99:67:44:e4:
f5:28:d8:a1:8e:30:3b:30:a4:6b:51:b6:42:c1:c0:
8e:d3:30:65:17:81:3e:4d:ef:38:0e:5c:26:6b:2c:
f6:4e:28:ba:8b:99:d8:ea:ee:fb:21:fe:80:d6:d0:
3f:ad:14:25:39:fa:62:1a:59:23:fe:76:e2:e4:08:
1f:6c:bf:b1:12:84:86:a2:9d:e6:1c:30:49:1a:7c:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:B0:BA:BC:BC:87:E1:67:29:E3:47:88:CE:AE:32:20:A5:35:88
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b0:fb:f1:7f:6c:da:c7:ef:07:73:38:0c:05:b7:c7:72:4f:
8a:eb:18:3e:56:5e:d8:8f:02:29:7c:5e:64:e5:87:fc:61:73:
c9:d5:a4:56:ae:f4:25:6f:e6:80:ca:26:83:d7:88:77:b6:42:
70:01:69:42:3e:64:30:7e:8e:19:e6:ed:8c:53:55:da:e4:fb:
03:36:e1:9f:93:c7:4d:9f:4d:66:33:26:27:51:9c:a6:14:be:
02:cd:84:35:28:f2:78:0f:e2:13:62:e4:97:3d:55:d4:d1:8e:
c8:20:5a:a2:09:bf:24:b4:71:66:33:28:c0:57:c5:de:0b:67:
95:fd:9f:e0:47:8a:72:c0:6a:3b:bd:d3:da:82:81:9f:1b:f0:
c9:2a:e1:ae:15:ea:1c:84:ac:b9:65:cd:0f:24:8d:76:5a:6b:
64:fd:0e:2b:04:f0:ce:d4:a2:58:03:d8:b3:18:3f:51:ca:68:
e2:90:eb:46:90:18:22:ff:4a:c1:14:51:c8:27:c0:8f:a3:ae:
5c:36:cb:b8:9e:62:17:54:97:27:a5:f5:02:64:22:c3:16:2e:
8d:c4:29:55:21:c6:2b:43:32:b2:d0:36:7a:96:05:39:c4:0f:
22:ea:70:18:fb:8f:5f:91:51:44:73:37:c4:9a:0c:d1:17:ce:
79:2d:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:15 2025 by rpki-client