Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: 2ej/i6YoqFDYKHzJkAYPNrTpDXDMSHiXbhxLVMILj9Y=
Subject key identifier: 15:54:57:12:4A:F0:F6:45:5D:BF:AE:5C:C0:0B:6E:3B:DC:B7:EE:81
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 01965011A31F6F548807DBFACEC968000AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 22:00:54 +0000
Manifest this update: Sat 19 Apr 2025 22:00:54 +0000
Manifest next update: Sun 20 Apr 2025 22:00:54 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: /M+3jLL1UbLI7bYngbRM4COOvu1VY6oSYOgg2YqbsQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:a3:1f:6f:54:88:07:db:fa:ce:c9:68:00:0a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Apr 19 22:00:54 2025 GMT
Not After : Apr 20 22:00:54 2025 GMT
Subject: CN=155457124af0f6455dbfae5cc00b6e3bdcb7ee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:67:33:ca:5b:75:67:df:cf:2b:90:df:ab:
08:aa:4b:2e:60:69:44:67:b5:dd:0d:f4:a5:16:4d:
46:ac:27:9c:aa:c8:11:d4:26:8d:7e:67:f9:1e:0d:
27:ed:65:66:f6:84:65:2e:0b:b1:91:a7:78:aa:37:
18:af:c9:49:56:90:b5:9c:0e:50:e7:30:c6:3e:7d:
27:1b:df:64:49:3e:af:7d:37:2e:7b:a9:ec:7d:c1:
dc:98:2b:08:49:49:ae:fe:f6:81:63:69:02:a1:d3:
9a:0d:24:1a:cf:35:6d:02:0c:9b:05:cd:39:1f:ac:
60:1c:e8:98:fd:19:8a:3a:c3:62:d8:fb:69:5f:5b:
57:b4:02:02:44:2c:b8:9e:68:be:8e:c1:a1:4e:91:
24:55:24:cc:21:c1:2b:e7:f6:b0:6c:67:96:97:0f:
39:24:9e:5a:6b:1a:37:eb:8a:f3:2c:3a:08:50:cb:
a2:90:90:08:bd:0a:ac:a4:69:8a:e3:3c:f1:44:fe:
d1:ac:cc:97:5c:ef:16:a8:43:13:2b:75:2f:37:78:
29:dd:42:cf:77:79:8c:27:f2:3e:07:27:94:c4:75:
2d:ac:c1:3c:66:39:02:df:ce:67:85:52:f1:a2:48:
93:74:a5:42:19:73:0b:07:47:f2:cb:49:97:6a:81:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:57:12:4A:F0:F6:45:5D:BF:AE:5C:C0:0B:6E:3B:DC:B7:EE:81
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:b5:94:8e:18:ec:cc:49:1c:48:13:45:6b:f6:99:8d:21:
27:b2:58:fb:9b:84:c7:14:3c:ef:a6:69:9a:1c:36:05:2c:0f:
84:7a:e9:86:3e:68:b6:4c:e4:6e:65:14:8e:06:bc:d7:fe:a3:
a6:6b:33:92:8d:7b:8b:b7:50:25:02:b3:95:d7:36:e3:e0:1a:
9b:75:d7:e0:f1:c3:51:be:e0:2d:62:dc:08:b8:f9:b5:3e:71:
6b:ca:8c:a7:89:70:74:62:5e:c4:b3:df:c5:d5:12:73:79:b0:
c0:7c:d3:40:46:7a:f5:c2:4b:57:e8:5b:9e:b8:8e:c4:e9:f8:
1f:24:5e:da:5e:6d:45:93:f8:bb:61:d4:7e:8f:43:48:3b:f6:
cc:a7:9c:43:cd:0b:81:4b:7f:e5:cd:ce:c2:b2:33:87:53:58:
23:47:5d:8b:ff:9d:e2:48:85:a5:5e:64:80:97:18:a0:ec:78:
7a:c4:25:34:17:0a:82:51:c3:ac:aa:84:63:fb:da:20:bb:75:
e5:27:77:4c:9d:23:32:62:a7:bc:2c:80:f9:fc:8b:6e:58:c4:
20:31:93:ca:58:a0:32:f3:27:d1:e0:c1:97:43:7d:c0:b3:ee:
bb:2c:68:9a:bd:70:f7:6c:16:b9:af:52:a6:1d:f7:59:aa:e7:
32:00:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:18 2025 by rpki-client