Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: rLhOjzln/GgQKtRQDzo/7ZByFOAFsido1A3z6UyDzYI=
Subject key identifier: 01:9A:66:AB:99:51:28:40:F6:45:C9:2C:FB:46:72:C0:4B:16:3A:F1
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019936EF0C65A21AD10E677190031529EE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:00:59 +0000
Manifest this update: Thu 11 Sep 2025 04:00:59 +0000
Manifest next update: Fri 12 Sep 2025 04:00:59 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: WYo8wnEsC/fStk+6cfgV8//8Mxf7dudU0GmzGVPvjV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:0c:65:a2:1a:d1:0e:67:71:90:03:15:29:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Sep 11 04:00:59 2025 GMT
Not After : Sep 12 04:00:59 2025 GMT
Subject: CN=019a66ab99512840f645c92cfb4672c04b163af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:21:10:a5:8f:78:ab:66:28:8d:e2:9f:2a:
0b:5b:42:e2:7b:e2:bc:bc:b5:e2:40:2d:76:d1:43:
80:56:78:da:ef:0b:4b:84:08:ed:3d:66:e3:5b:b0:
bd:91:fb:6c:e8:4b:d2:97:05:0e:f4:18:33:d9:2d:
ad:0c:17:2c:2d:bc:94:0f:c1:8e:1f:fe:ce:08:2c:
5a:e9:99:10:5f:ec:2e:f8:22:59:4c:e6:9b:0d:ae:
0c:a4:44:ac:7b:a0:90:71:f9:06:4c:0d:5d:1b:36:
73:d5:d7:e7:76:c5:c0:5a:cc:f9:ea:59:3b:cf:1d:
22:c2:87:0a:b4:42:48:7a:14:41:da:3a:66:a9:b7:
ab:72:03:d0:15:b5:79:0c:33:94:4b:1c:27:52:35:
71:c8:d0:1c:88:95:ec:18:cd:24:61:5c:29:7b:32:
1e:da:4e:7c:93:b8:8e:7d:fe:d4:75:c8:4f:d9:58:
50:c8:4b:60:c9:d0:f0:ea:2b:e0:77:7b:cc:3f:9d:
65:56:87:52:56:a7:6a:b4:ab:fd:7c:1b:0f:66:18:
75:9f:43:37:ef:d5:2a:6b:57:54:07:f2:08:2e:52:
e0:f4:64:fe:a7:a2:59:f8:34:ec:29:8c:e3:1e:d8:
7d:8b:0b:58:8c:e5:1e:34:5d:47:b9:7d:26:40:ca:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:66:AB:99:51:28:40:F6:45:C9:2C:FB:46:72:C0:4B:16:3A:F1
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:27:0d:22:54:a0:9c:94:92:24:0a:c7:20:c1:aa:e3:cf:78:
8d:a0:73:a2:5a:34:bd:bb:aa:e7:52:a0:f7:ff:46:6b:cc:d7:
40:c9:18:b2:f5:ab:e8:bb:8a:33:6c:58:5e:0e:39:85:76:4d:
5a:ff:3b:e3:64:f6:3c:f8:63:7d:12:c5:a6:91:cc:17:25:c6:
8e:ab:f6:17:fc:72:7f:d5:4a:13:9d:45:92:51:b6:23:ef:52:
21:3c:34:ca:96:60:de:16:e8:ba:dc:4d:2a:c1:26:b1:ff:03:
de:b2:a7:04:98:92:ad:0c:b2:b6:d1:fc:7f:c2:84:9b:9d:d7:
6b:31:16:a5:5b:9e:8c:68:83:db:d2:6e:93:20:1f:09:a0:3c:
47:78:81:39:bf:43:e5:f2:ea:3d:3f:63:d8:a3:c0:92:d6:f5:
16:de:dd:7a:0d:09:c4:9e:9c:8e:7f:02:58:72:d8:26:eb:14:
2b:df:26:67:03:75:84:d8:ff:ca:f5:dc:26:dd:63:18:34:9e:
a1:2a:0e:eb:ec:d1:78:8b:e4:65:aa:2f:47:d8:57:87:ae:1f:
fe:bd:71:2e:08:ab:7c:33:a1:25:b0:02:ee:be:20:75:82:6c:
30:ae:ca:18:1f:cc:26:09:50:cf:1d:3e:76:ca:f2:47:4f:f6:
b6:f6:85:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk27wxlohrRDmdxkAMVKe5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjUwOTExMDQwMDU5WhcNMjUwOTEyMDQwMDU5WjAzMTEwLwYDVQQD
EygwMTlhNjZhYjk5NTEyODQwZjY0NWM5MmNmYjQ2NzJjMDRiMTYzYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPIhEKWPeKtmKI3inyoLW0Lie+K8
vLXiQC120UOAVnja7wtLhAjtPWbjW7C9kfts6EvSlwUO9Bgz2S2tDBcsLbyUD8GO
H/7OCCxa6ZkQX+wu+CJZTOabDa4MpESse6CQcfkGTA1dGzZz1dfndsXAWsz56lk7
zx0iwocKtEJIehRB2jpmqbercgPQFbV5DDOUSxwnUjVxyNAciJXsGM0kYVwpezIe
2k58k7iOff7UdchP2VhQyEtgydDw6ivgd3vMP51lVodSVqdqtKv9fBsPZhh1n0M3
79Uqa1dUB/IILlLg9GT+p6JZ+DTsKYzjHth9iwtYjOUeNF1HuX0mQMp84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGaZquZUShA9kXJLPtGcsBLFjrxMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHicNIlSg
nJSSJArHIMGq4894jaBzolo0vbuq51Kg9/9Ga8zXQMkYsvWr6LuKM2xYXg45hXZN
Wv8742T2PPhjfRLFppHMFyXGjqv2F/xyf9VKE51FklG2I+9SITw0ypZg3hboutxN
KsEmsf8D3rKnBJiSrQyyttH8f8KEm53XazEWpVuejGiD29JukyAfCaA8R3iBOb9D
5fLqPT9j2KPAktb1Ft7deg0JxJ6cjn8CWHLYJusUK98mZwN1hNj/yvXcJt1jGDSe
oSoO6+zReIvkZaovR9hXh64f/r1xLgirfDOhJbAC7r4gdYJsMK7KGB/MJglQzx0+
dsryR0/2tvaF0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:44:57 2025 by rpki-client