Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: F/Ikq+Z/q76InwVm5zMDjuK1/NmMps0bROjAhk98RMQ=
Subject key identifier: 95:98:78:5D:09:FF:0A:6C:14:DC:66:64:69:CB:D2:B4:6E:A3:03:42
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 019849669C68F6D0AD490E1F3D5380B47573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: _TL6mTZXcLYAPXlu1htfIyUl8rc.roa (hash: auu5lQMtJmBXhYLmFNZ2Cdy4mHQJ8c7v+J19cT4Wc3U=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: bWKwAoHHbbu1uSVmdxa88tE0E7S06RTfkCGNwSJnTDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9c:68:f6:d0:ad:49:0e:1f:3d:53:80:b4:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=9598785d09ff0a6c14dc666469cbd2b46ea30342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:ac:02:e4:7d:9e:2c:80:96:42:8f:ce:45:
8a:29:bc:b6:1f:9a:92:1c:0f:d8:e4:2e:b3:fa:02:
7f:64:b7:29:2b:0d:13:97:e4:af:24:c1:13:c6:0a:
a0:e8:4f:76:fa:cb:0e:ec:89:3d:b3:15:84:47:47:
bd:60:93:b1:19:a8:97:8f:ee:42:84:13:76:ec:16:
97:f9:5e:fb:5b:ec:b9:98:2e:7b:8e:44:71:a5:67:
ac:3a:17:d0:ef:2c:69:ce:e9:30:aa:66:7e:d0:e3:
e8:86:33:d9:e3:ae:e8:d1:b9:12:71:2a:dd:46:b8:
72:b9:90:46:90:14:af:55:1a:87:b4:32:90:3a:e1:
f1:de:f8:19:49:e8:ca:1a:22:73:08:30:a4:16:ee:
bc:c1:bf:81:65:7a:ea:cc:d8:cf:59:07:4d:1a:3e:
a0:0f:e1:ce:f3:60:fb:89:bd:ad:94:3a:60:c5:73:
ad:ba:69:15:18:91:7c:05:39:ff:a7:60:dd:12:8a:
5c:fd:76:e1:43:a6:15:b8:47:73:0d:87:dd:a8:20:
a0:a0:9b:e7:61:ea:9a:14:e2:5c:fd:ee:84:e7:20:
19:aa:4d:e6:da:3b:24:e6:32:74:16:3f:44:11:b9:
3d:1d:47:31:e3:6f:c8:95:fa:4a:e8:06:06:02:b9:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:78:5D:09:FF:0A:6C:14:DC:66:64:69:CB:D2:B4:6E:A3:03:42
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:ce:42:be:5c:21:2e:df:85:51:55:06:9b:27:12:73:c3:
c6:9e:24:49:cf:15:ec:2d:92:6b:4a:04:32:14:1d:4a:d7:33:
7f:46:c9:ab:c8:4a:f9:fb:af:97:39:5f:2f:b6:f1:e9:67:62:
b2:89:5f:cf:f1:34:8a:83:59:60:c3:b5:a1:e3:e5:08:de:b6:
86:5f:d5:b7:c8:fb:cb:3b:fd:69:5e:ef:54:d6:c7:d9:c1:c9:
3a:83:5a:44:0e:1d:77:5b:4a:36:32:d2:b6:be:3b:b7:98:c2:
e1:c4:f5:ff:5b:ee:e4:99:13:43:01:be:57:97:3c:3f:c2:35:
e8:3a:63:97:7b:be:5f:fc:e5:2d:71:68:40:a4:c1:fc:65:ce:
41:ca:14:8d:2d:83:cd:fe:09:52:9e:a6:75:52:b3:a1:a2:77:
29:80:73:31:b1:1b:19:3f:f7:c2:4e:f0:95:db:9c:4f:0b:6c:
f7:75:61:55:73:54:ea:e9:d2:84:a4:fd:26:60:6e:e5:4e:56:
97:70:b9:0d:72:88:ca:a1:85:0c:f7:29:f8:1b:87:e9:b1:23:
e8:e3:13:e8:91:3b:48:2e:22:0f:9a:80:4f:eb:3e:aa:49:5d:
c9:55:c5:0f:db:3d:1b:fe:3e:57:5f:b6:a1:f9:ea:6b:d7:84:
77:95:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:56 2025 by rpki-client