Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: yXkeVLeJJ2I4oQN6pDBkYiP/Q7JR9n4u+cYV9V0ol7w=
Subject key identifier: 64:80:B3:02:65:C3:EB:F8:9E:18:EB:2D:E3:A5:31:AF:75:A3:5F:AC
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0197488D2B2FDE565D6B21A7B327C35226BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:40 +0000
Manifest this update: Sat 07 Jun 2025 04:01:40 +0000
Manifest next update: Sun 08 Jun 2025 04:01:40 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: +CdBLc0lY4SQuajWrvQ80VZwlHN4KaJ/5s/0SjvgsF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2b:2f:de:56:5d:6b:21:a7:b3:27:c3:52:26:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jun 7 04:01:40 2025 GMT
Not After : Jun 8 04:01:40 2025 GMT
Subject: CN=6480b30265c3ebf89e18eb2de3a531af75a35fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:c0:46:28:59:46:74:b9:80:7f:ee:89:a5:
90:3c:4e:d4:10:f5:8c:b3:26:57:1f:2c:12:18:12:
6b:21:2c:bf:d8:c1:ac:23:03:ed:70:15:3f:87:e1:
65:00:1d:10:8a:45:25:05:de:66:16:e4:56:3d:54:
7e:82:52:1c:a8:39:21:cf:ee:52:43:9f:e5:50:6c:
86:9f:2d:b4:61:10:fc:69:50:3d:04:24:b5:83:de:
a9:61:ea:cf:40:d8:30:68:13:5c:fc:e8:a8:4b:d0:
0b:6a:8d:ce:45:82:40:c8:28:1c:59:33:5a:d8:8a:
93:46:9b:fb:6e:57:07:ee:f7:b4:7c:e6:f2:e2:82:
37:73:3a:e9:3c:df:09:29:4d:91:28:92:ce:0c:ed:
58:61:66:c0:b3:e3:31:a2:df:fe:a3:0f:7b:62:f2:
83:ac:b2:45:d7:60:3b:52:a3:64:5e:ca:89:af:69:
55:92:81:8a:ec:85:59:5d:96:3e:da:37:ff:6f:15:
f4:8b:56:13:c7:d8:5f:6e:fb:a0:de:98:93:1d:4e:
81:83:8c:fb:c0:c4:a8:7f:b7:5c:a5:58:ea:16:76:
80:04:d2:e4:7b:bb:48:e9:e4:f8:4a:e4:53:a1:ad:
4a:e8:ad:bb:67:89:c4:8a:9e:16:b4:ab:a9:ea:6f:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:B3:02:65:C3:EB:F8:9E:18:EB:2D:E3:A5:31:AF:75:A3:5F:AC
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:84:b3:3d:6d:10:de:bc:4d:3f:31:fe:09:b6:2c:5e:75:6b:
d9:fa:e7:0d:83:bd:24:95:14:25:ba:7d:41:b5:8e:a1:bb:97:
f8:30:e3:8b:20:04:f8:7a:5a:2f:b4:b2:2c:7d:a8:57:24:b6:
0d:03:21:21:60:65:22:5c:36:c2:69:a5:21:31:ff:f8:88:82:
b8:9d:c6:3a:0a:ab:43:1c:73:2a:36:0a:db:a4:03:44:b3:70:
88:6b:6b:ff:f3:99:24:4e:8f:e7:c4:91:d5:32:f4:19:a9:10:
6d:15:8c:45:47:d8:84:ae:20:9c:aa:53:37:fa:63:d8:ba:ee:
6a:0b:d1:e8:0b:88:cf:fc:52:ea:84:ef:84:88:e2:a2:0f:56:
60:a1:d8:97:ca:b3:56:c0:ce:6c:a7:02:11:4d:5c:18:a1:79:
58:bf:01:cb:cf:03:a7:86:37:16:e3:bf:04:34:00:ef:44:9f:
37:0c:27:fd:3a:51:0d:ae:45:81:a6:e4:fa:0b:38:fe:8e:be:
10:73:49:82:c9:8d:c1:2a:d2:fc:78:85:45:7d:31:7d:ef:df:
0e:5e:69:b5:c8:18:25:ee:b3:20:0d:7e:09:25:3f:3a:f5:1a:
13:42:75:21:07:a6:92:70:f2:48:75:bf:60:82:78:7b:14:ed:
f0:69:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:27:04 2025 by rpki-client