Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier: lbdFhJKeXBZH9xN4PDWe0NNuhekAhwDg7YLWjjGPMC8=
Subject key identifier: C0:32:E1:D9:EC:96:0F:60:D7:69:81:05:08:43:32:31:95:E7:F5:C5
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial: 0199240CFD68868C2F810FF2EC619044423A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 12:00:54 +0000
Manifest this update: Sun 07 Sep 2025 12:00:54 +0000
Manifest next update: Mon 08 Sep 2025 12:00:54 +0000
Files and hashes: 1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=)
2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: UR4ZmE64ZGwp/8ppjLGS5Q3lP12KBldBY1NL9aLOlV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:fd:68:86:8c:2f:81:0f:f2:ec:61:90:44:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Validity
Not Before: Sep 7 12:00:54 2025 GMT
Not After : Sep 8 12:00:54 2025 GMT
Subject: CN=c032e1d9ec960f60d76981050843323195e7f5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:01:f0:b9:46:10:13:c3:46:fc:73:12:94:
17:08:38:2e:c2:4b:49:4b:5d:e3:02:cd:b5:a5:41:
14:0e:c8:ad:c8:76:c7:fa:0f:00:dd:cb:de:54:47:
12:8e:e9:2c:62:68:35:dc:a8:19:8c:87:f3:2e:8f:
7b:2a:21:42:c1:5e:cd:28:d6:84:a8:0f:95:91:3d:
b6:e0:66:e6:7f:b8:37:ea:a6:0e:1b:ff:24:94:85:
ef:50:7d:99:6e:c2:ce:69:a5:49:8e:2e:26:22:b3:
28:4e:f4:3c:d4:7c:da:e7:66:2d:66:2d:5e:d7:ec:
64:ac:af:2b:5b:55:95:70:e7:b5:c0:0c:3e:67:e0:
13:ed:8e:86:3e:1f:c0:cd:d4:a8:1d:80:85:96:2f:
01:ef:9d:60:97:f9:d8:9d:c6:d7:de:9c:b8:42:1c:
98:b3:6f:b4:0d:ee:c0:d3:55:73:8b:37:b5:b0:c9:
1f:25:80:12:0f:b4:77:7b:fd:f8:98:9c:47:f9:6b:
89:78:95:7d:6c:6f:02:84:e4:e0:80:b8:43:04:4e:
bd:f7:b4:f8:70:0e:5c:41:fa:d1:77:1e:bc:32:63:
65:44:a7:53:e5:3d:7b:b2:d4:dc:92:b7:a4:5f:ba:
0c:7a:c2:5e:a9:d9:f8:33:0a:1a:78:43:c7:20:a8:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:E1:D9:EC:96:0F:60:D7:69:81:05:08:43:32:31:95:E7:F5:C5
X509v3 Authority Key Identifier:
keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:50:a2:82:5e:5a:3a:c2:11:3a:60:4a:5d:26:f0:dc:b9:96:
84:ae:f5:0b:df:84:15:1a:46:93:1c:a0:ed:9e:4c:25:11:4d:
a1:65:8c:72:fd:17:3a:6f:e9:10:96:cf:73:a0:8d:38:ba:7d:
69:58:63:b5:8c:43:91:37:fc:f1:92:8e:3f:15:c7:ec:40:93:
2a:76:34:0c:6f:c9:32:0a:49:ab:eb:39:20:dd:4f:84:76:9d:
b5:29:8c:bb:53:ac:9d:6c:60:0f:52:f8:69:a6:df:58:b5:19:
8c:e6:b8:44:b2:5b:7d:64:9e:e5:1e:aa:d8:34:2c:f5:e7:16:
da:ca:b4:01:3f:29:65:a5:17:3b:20:59:79:8b:27:97:05:07:
9e:bc:21:9d:e1:81:25:ed:e9:73:d8:9d:ce:8f:43:5a:e3:90:
0e:e8:4e:c7:12:f2:4d:25:ff:dc:2b:4c:46:40:8c:a8:20:05:
be:91:6b:63:e8:9a:b9:dd:7d:2b:15:b1:98:0a:0d:8c:cf:0b:
3a:23:83:ee:2c:03:78:32:eb:36:09:41:eb:16:a0:21:1b:37:
dc:95:ab:30:6f:5c:bd:37:d1:b7:7b:bd:6a:50:fe:bd:29:12:
6f:74:6d:68:5d:fb:1e:ce:7d:62:23:8a:83:cb:74:73:36:c6:
88:52:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:58 2025 by rpki-client