Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: tl6STk9gNleT58Ygf0WA6JgtppdVql7lubyNuQqkT88=
Subject key identifier: 85:B3:CF:6B:9A:5C:15:4F:9E:D6:C8:48:5D:71:45:59:29:80:FA:33
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01964D7E8B9AA24E7E48594F81F5D6805D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:01:00 +0000
Manifest this update: Sat 19 Apr 2025 10:01:00 +0000
Manifest next update: Sun 20 Apr 2025 10:01:00 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: psSz9g4450mUKKJ2cY1xDx8O+byoIcJdJabJJoDdEW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:8b:9a:a2:4e:7e:48:59:4f:81:f5:d6:80:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Apr 19 10:01:00 2025 GMT
Not After : Apr 20 10:01:00 2025 GMT
Subject: CN=85b3cf6b9a5c154f9ed6c8485d7145592980fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:a3:b2:20:5a:d6:ff:8e:f8:6d:84:a6:a6:
fd:e9:d8:c0:bc:da:90:2e:d4:08:2c:d7:3c:6b:5f:
50:47:e9:42:86:a1:05:31:9e:85:b5:2b:cf:dd:04:
44:c7:38:eb:2a:67:36:54:9c:78:d5:01:65:19:e9:
01:a0:7a:8a:5e:27:5d:93:94:13:ff:e8:da:f8:dd:
76:79:31:e5:48:ce:5b:d4:92:6d:bc:8c:81:3c:44:
4c:b4:14:bd:1b:31:76:9a:b0:33:dc:1a:87:11:ba:
47:5d:03:3f:b7:d3:0b:e7:0f:76:18:4d:59:37:62:
cf:8e:4d:4f:c0:52:d0:7f:25:d2:31:c9:1b:bb:ea:
f3:dc:0d:a4:fb:c0:07:49:ad:c1:b5:f6:a8:5f:a2:
18:b2:ad:79:db:2a:a4:13:de:4f:79:2b:a6:e8:48:
db:42:79:7e:95:8d:36:4c:c2:9f:53:a2:6a:eb:1d:
b7:c1:63:7c:fe:7c:be:f2:c2:64:3d:09:4e:96:81:
99:38:a5:f3:e7:1f:b8:62:4a:a4:96:92:ae:57:1a:
63:63:48:94:fb:80:78:8c:c5:ec:d0:57:ce:80:6d:
43:18:c8:0e:32:f8:f5:07:a3:ca:71:8f:a4:8a:18:
b2:2f:57:54:6e:d0:16:b8:0f:cf:d9:16:4e:90:f5:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:CF:6B:9A:5C:15:4F:9E:D6:C8:48:5D:71:45:59:29:80:FA:33
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:51:9d:cf:95:6d:ad:0a:26:67:70:56:3a:df:58:c3:7a:d6:
c2:e7:b1:db:07:1d:10:dc:10:4a:72:cc:f5:f9:b9:0f:48:e4:
77:ac:b7:d6:bd:b3:77:70:d4:c9:7c:3f:45:1f:40:02:8b:5d:
dc:07:a8:b3:a2:35:0b:0b:ba:f4:e3:d6:59:c1:35:23:9b:13:
3b:4b:e1:5c:72:4c:6e:d8:88:48:a0:93:3f:17:4a:3d:b9:e5:
61:90:7d:61:dd:30:2a:b2:3a:26:54:d6:a7:1e:e0:a4:85:f1:
b7:28:fb:10:63:01:5e:1f:60:ad:0b:85:30:f6:cd:f0:89:94:
ad:4c:c3:50:37:86:65:08:42:4a:36:ce:66:ca:0f:90:f4:cd:
a5:d4:51:a1:fa:fd:06:94:93:81:8d:91:f0:82:2d:0e:b5:d2:
8d:f7:cb:84:46:ec:e0:1b:ff:2d:a3:ea:38:9b:59:6c:6e:6e:
94:6c:09:e8:4a:7d:34:15:98:f8:bd:28:03:70:d8:fa:b6:96:
88:c4:6b:13:bb:e2:b3:b5:d0:4c:ec:af:e2:12:05:86:db:46:
9b:7c:89:ae:17:b2:45:18:74:13:92:a2:0e:bb:71:11:d0:89:
d9:77:d5:01:36:29:01:1c:36:5c:29:f0:c8:80:32:2b:f1:92:
d3:ff:e6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfouaok5+SFlPgfXWgF1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjUwNDE5MTAwMTAwWhcNMjUwNDIwMTAwMTAwWjAzMTEwLwYDVQQD
Eyg4NWIzY2Y2YjlhNWMxNTRmOWVkNmM4NDg1ZDcxNDU1OTI5ODBmYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2yjsiBa1v+O+G2Epqb96djAvNqQ
LtQILNc8a19QR+lChqEFMZ6FtSvP3QRExzjrKmc2VJx41QFlGekBoHqKXiddk5QT
/+ja+N12eTHlSM5b1JJtvIyBPERMtBS9GzF2mrAz3BqHEbpHXQM/t9ML5w92GE1Z
N2LPjk1PwFLQfyXSMckbu+rz3A2k+8AHSa3BtfaoX6IYsq152yqkE95PeSum6Ejb
Qnl+lY02TMKfU6Jq6x23wWN8/ny+8sJkPQlOloGZOKXz5x+4YkqklpKuVxpjY0iU
+4B4jMXs0FfOgG1DGMgOMvj1B6PKcY+kihiyL1dUbtAWuA/P2RZOkPWiXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWzz2uaXBVPntbISF1xRVkpgPozMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1Gdz5Vt
rQomZ3BWOt9Yw3rWwuex2wcdENwQSnLM9fm5D0jkd6y31r2zd3DUyXw/RR9AAotd
3Aeos6I1Cwu69OPWWcE1I5sTO0vhXHJMbtiISKCTPxdKPbnlYZB9Yd0wKrI6JlTW
px7gpIXxtyj7EGMBXh9grQuFMPbN8ImUrUzDUDeGZQhCSjbOZsoPkPTNpdRRofr9
BpSTgY2R8IItDrXSjffLhEbs4Bv/LaPqOJtZbG5ulGwJ6Ep9NBWY+L0oA3DY+raW
iMRrE7vis7XQTOyv4hIFhttGm3yJrheyRRh0E5KiDrtxEdCJ2XfVATYpARw2XCnw
yIAyK/GS0//mRA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:34 2025 by rpki-client