Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: W22xYgQiT/kTnLEEMqXKtf5AnfcuEFvqZzBMqf7UpHI=
Subject key identifier: 78:37:D4:89:E7:F4:D4:F8:85:85:BD:EB:C9:C0:88:88:FD:56:EC:80
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0198477791EDE3B6E1594B7D1111F7C1EDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:15 +0000
Manifest this update: Sat 26 Jul 2025 16:01:15 +0000
Manifest next update: Sun 27 Jul 2025 16:01:15 +0000
Files and hashes: 1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: pNOFPsL6JTwUTncMr5o1x0SZS53plKJ/YnlmVhbtWCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:91:ed:e3:b6:e1:59:4b:7d:11:11:f7:c1:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jul 26 16:01:15 2025 GMT
Not After : Jul 27 16:01:15 2025 GMT
Subject: CN=7837d489e7f4d4f88585bdebc9c08888fd56ec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:ae:a5:d9:ce:1d:35:44:88:ad:ca:f4:ca:
53:a9:01:f6:65:53:df:d5:d3:6e:77:e0:a7:8e:93:
09:32:78:87:05:a5:c1:1b:3d:61:01:6e:a7:88:61:
15:fe:7f:e2:0d:cc:b9:39:92:ff:66:a5:a6:f1:21:
24:6e:2e:63:bd:49:4c:17:25:47:a9:2c:14:b9:a8:
62:62:13:26:f4:32:82:25:87:00:bd:f3:6b:83:31:
b5:ec:06:ef:84:2b:55:12:92:8a:a1:8e:2a:33:7b:
97:a3:4f:18:ed:e6:59:4d:db:90:d7:ae:c9:1d:08:
c8:73:85:d6:33:bd:89:5f:15:92:98:94:15:1d:35:
77:53:25:09:4f:9a:52:91:37:8a:27:e4:fc:6d:d7:
f3:01:6a:7f:e2:98:1d:b9:74:b6:7e:81:26:c8:cf:
a9:62:2e:00:1e:ab:85:ea:76:2c:db:54:9e:bd:b1:
d3:de:5c:6b:c3:cf:24:3b:08:c5:f0:11:95:f1:d0:
05:8b:4d:4c:4b:5d:77:d7:cf:89:64:7c:a2:5d:f5:
31:a0:d6:db:42:a8:c5:2b:d9:19:16:a5:fa:4b:5d:
21:f8:3f:39:12:cb:b2:1b:40:e0:18:f4:c3:89:db:
59:9d:9b:29:9d:44:51:2e:f8:7f:67:4e:66:9a:5c:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:D4:89:E7:F4:D4:F8:85:85:BD:EB:C9:C0:88:88:FD:56:EC:80
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:44:a3:c1:a0:08:66:ba:a3:97:28:6c:4f:5b:96:41:5f:
02:b4:e9:ff:b2:d0:6a:66:6a:a4:83:50:59:c6:00:a5:6d:05:
93:88:6a:b3:e9:b2:ce:5a:57:bd:a8:e1:94:14:00:79:d0:cc:
67:c9:ef:e1:5f:66:55:f2:b5:40:e7:38:72:e9:db:46:79:d1:
33:f2:63:9f:b6:6d:74:e8:54:9e:b9:7f:4d:61:2d:45:5d:99:
a7:04:0f:e6:d2:91:e9:c5:e3:4e:dd:3e:6c:a7:38:e4:ac:6a:
42:a3:a5:52:fb:2c:e5:e3:d5:32:dc:38:41:81:b4:cc:a6:84:
e6:a2:3f:43:50:8a:69:3c:f5:ad:02:3d:f0:8e:95:ea:88:38:
7a:88:95:67:2d:cd:ac:b7:38:81:71:f2:43:f7:0e:ae:da:8c:
3e:af:99:2f:d8:05:ff:92:f9:4f:99:3c:31:1c:f8:28:c6:36:
41:15:ca:9d:fd:41:2a:ec:0f:1c:59:e7:ef:d9:e6:a5:91:de:
a7:98:c2:80:3a:61:c5:51:d4:e2:22:d4:77:36:29:9e:f8:97:
4b:3b:45:0f:4b:a3:21:9a:4b:96:0f:b8:26:33:54:ea:0a:62:
60:a2:32:58:76:2a:ed:16:59:7b:fc:44:3b:37:c0:99:36:55:
59:f0:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:21:53 2025 by rpki-client