Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: 5gyYXm6AV3A2N41TnGwj+bkFUM/qhgV3p56+zYGhFBU=
Subject key identifier: 87:B2:2F:7B:40:71:70:64:2E:22:39:9C:C0:D4:BB:61:CA:23:0A:DE
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 019748FAA6D0B2EEBA604AD844EB85ED05DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=)
2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: YFkToeyFc1A7HsK1Sof14AfwLWWJNbOto7WKxNx7ErM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a6:d0:b2:ee:ba:60:4a:d8:44:eb:85:ed:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=87b22f7b407170642e22399cc0d4bb61ca230ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:f2:a6:c1:1e:18:ed:19:29:18:b9:4a:c9:
53:44:46:64:ec:ec:46:e8:a1:cd:c2:dd:42:74:1f:
2a:af:7c:fe:15:1e:57:f1:b2:96:58:91:5b:65:16:
6d:07:d3:35:a3:fd:93:19:0e:bb:d6:2e:86:1b:91:
d2:77:08:dd:3a:40:0b:6c:09:9a:7b:ae:2f:3a:c7:
88:25:68:14:0b:8d:79:cc:ed:1a:f8:e4:1a:5c:4c:
fa:25:0e:46:f9:3b:79:f0:20:85:d2:d3:43:0c:b6:
a3:e8:cd:4f:d9:08:a8:75:21:da:86:4c:2f:be:7b:
21:7e:1a:40:ff:ca:26:7a:3c:ba:83:be:a1:40:f7:
ea:b7:f4:e7:85:7e:86:f8:d8:33:8c:de:b4:88:4a:
85:20:43:f7:dc:87:a8:91:69:ef:71:d5:ce:4b:7c:
64:59:49:d7:8e:45:6f:a8:59:78:ed:60:f9:7e:f3:
ad:f0:0d:d9:4f:5c:29:8c:4c:53:a8:2f:f5:c2:82:
75:34:97:39:f5:63:ea:c9:9e:98:8b:bd:74:61:57:
3f:6f:8c:e7:bc:a1:e1:73:b6:e4:b1:d7:11:73:c7:
4e:ae:25:ed:a3:25:73:bd:8e:92:16:28:ee:c8:17:
87:e8:1a:80:37:7b:7e:15:80:13:cb:62:a3:b5:2e:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:2F:7B:40:71:70:64:2E:22:39:9C:C0:D4:BB:61:CA:23:0A:DE
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:47:57:7f:cb:a9:c9:90:fd:33:6c:7a:33:42:bb:b5:62:d4:
ed:60:da:34:b0:19:5f:dd:f1:4c:03:09:d4:78:d3:88:85:0e:
3a:d9:65:a8:88:89:41:56:56:2e:1d:2a:ca:37:95:b4:41:30:
da:dd:78:69:d0:57:c0:93:ec:4c:c2:52:3b:d7:64:5e:88:44:
92:18:3d:8f:a7:96:7d:db:c1:35:24:20:1e:e2:63:a0:a6:f5:
76:2e:97:9e:8c:52:6a:69:f9:25:d0:26:a5:04:45:b6:13:e8:
0f:a9:52:4d:87:9a:99:c2:b4:77:b4:f1:89:2c:97:7e:38:87:
62:0d:df:04:9c:d5:16:63:ff:05:e0:33:bc:ad:29:91:c2:d4:
b4:5c:d8:2c:da:c5:75:51:d6:b3:6a:4c:0a:05:14:93:cd:cf:
df:cb:5e:cf:66:a5:58:b5:da:ac:97:62:71:97:84:08:35:fa:
11:36:29:ef:3f:2c:5b:b1:a8:f3:f4:d9:c4:d1:be:3a:3b:81:
90:fc:d3:a3:ef:03:dd:4f:14:1c:89:73:40:b5:07:cf:06:7e:
90:e1:06:c7:4f:72:78:c9:25:59:f9:05:05:cd:66:15:49:88:
d8:24:28:2f:9a:e7:8a:49:91:95:57:c6:b0:16:74:fe:78:79:
dc:6a:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:23 2025 by rpki-client