Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: xZ/N6SG6nGTTWkR4d19uRdkqNtuPwUSCbOu0LoeGvLo=
Subject key identifier: E8:CC:32:87:EA:71:D2:27:AF:F7:95:28:86:E1:E2:50:F5:17:3F:76
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 0198D65F18BB346822C4FC6F97E35E358EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0443
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: in1JmFVHikX7ixOdKOOww/tw31JqSJHnbK7VOTTV7WM=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:18:bb:34:68:22:c4:fc:6f:97:e3:5e:35:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=e8cc3287ea71d227aff7952886e1e250f5173f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:ea:0a:2c:6e:13:5e:04:80:0b:e8:0b:1d:
bd:58:7b:3f:4c:bb:a8:46:87:10:42:87:f4:d5:4c:
c3:c3:21:41:87:7e:e5:0d:bb:f9:4e:30:37:45:18:
13:fc:b4:56:e8:35:da:24:b8:df:c4:e8:ce:b0:2d:
7e:35:6c:16:dc:c1:57:c9:2a:48:60:22:f5:1f:2e:
12:8d:d0:83:d9:2d:55:61:69:51:76:70:f6:c1:23:
56:f6:8a:d6:fb:16:8c:3f:73:27:fd:a6:c7:32:b4:
75:3c:3e:aa:3c:1f:18:81:7a:c8:5c:14:16:2a:0c:
b4:d5:53:c9:a3:74:ad:60:29:05:cd:b6:6a:68:d9:
00:ac:70:64:13:ab:fd:6b:07:36:bc:40:f9:7b:e7:
44:ab:7c:a9:ba:58:8a:ce:6c:cd:76:00:39:7a:e0:
f1:7e:22:bd:20:80:f0:54:a4:05:12:2d:d6:e6:3b:
15:41:49:54:60:d1:e1:1a:f2:d5:44:fb:f3:43:b8:
4f:86:68:42:8d:49:94:0f:6d:41:17:d3:55:2e:cf:
db:33:24:98:4c:a9:d9:09:0d:ab:69:ff:b3:70:9f:
81:7e:b8:04:c7:6d:aa:64:6a:5e:4c:b2:6a:a6:12:
71:d7:92:5e:e3:a7:ce:0b:cd:cc:60:d0:2a:ac:06:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:32:87:EA:71:D2:27:AF:F7:95:28:86:E1:E2:50:F5:17:3F:76
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:63:db:ae:e9:f8:37:ea:23:e8:48:13:5d:b0:e4:a9:36:22:
59:7b:1e:fa:c9:06:58:44:14:05:05:6c:27:2d:1b:12:c5:1f:
56:d8:f0:cc:fc:db:71:01:d2:cb:30:61:c9:30:c1:86:46:e9:
5c:d0:f0:1b:8e:4e:a6:5b:a0:12:12:80:22:fc:c8:c1:d2:d6:
a2:7b:1f:76:ce:5e:ff:2c:a9:4a:5a:a2:26:69:b3:36:10:56:
d6:71:6b:1a:53:16:62:4f:3b:3a:56:ed:3d:f3:fb:9d:09:7a:
e0:25:1a:bf:42:87:09:d2:c8:07:48:05:16:b8:5a:e0:57:01:
b8:1f:94:11:c1:b5:29:d3:de:46:06:36:d4:9d:4b:c7:45:96:
b1:28:7e:5c:78:a0:6c:17:44:ce:d1:8c:dd:fc:44:c5:e3:a9:
18:e4:95:fa:33:b4:73:bd:0e:7f:6c:23:0c:03:13:2b:ab:07:
58:49:83:fe:1c:01:ba:5e:6e:9b:39:b2:d2:bd:cb:eb:42:d4:
3f:3c:dc:c4:ae:08:5b:d3:87:be:f7:7e:07:bd:ab:60:61:2e:
65:44:b7:cf:ed:30:89:41:6e:2f:a4:00:da:ac:76:37:96:1b:
9e:fc:8f:40:1d:08:95:57:5a:dc:6c:91:78:8f:c2:e4:2d:1c:
66:d6:32:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxi7NGgixPxvl+NeNY6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh
MTkxYmYwHhcNMjUwODIzMTAwMDEzWhcNMjUwODI0MTAwMDEzWjAzMTEwLwYDVQQD
EyhlOGNjMzI4N2VhNzFkMjI3YWZmNzk1Mjg4NmUxZTI1MGY1MTczZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwizqCixuE14EgAvoCx29WHs/TLuo
RocQQof01UzDwyFBh37lDbv5TjA3RRgT/LRW6DXaJLjfxOjOsC1+NWwW3MFXySpI
YCL1Hy4SjdCD2S1VYWlRdnD2wSNW9orW+xaMP3Mn/abHMrR1PD6qPB8YgXrIXBQW
Kgy01VPJo3StYCkFzbZqaNkArHBkE6v9awc2vED5e+dEq3ypuliKzmzNdgA5euDx
fiK9IIDwVKQFEi3W5jsVQUlUYNHhGvLVRPvzQ7hPhmhCjUmUD21BF9NVLs/bMySY
TKnZCQ2raf+zcJ+BfrgEx22qZGpeTLJqphJx15Je46fOC83MYNAqrAbWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjMMofqcdInr/eVKIbh4lD1Fz92MB8GA1UdIwQY
MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt
ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4
LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2Pbrun4
N+oj6EgTXbDkqTYiWXse+skGWEQUBQVsJy0bEsUfVtjwzPzbcQHSyzBhyTDBhkbp
XNDwG45OplugEhKAIvzIwdLWonsfds5e/yypSlqiJmmzNhBW1nFrGlMWYk87Olbt
PfP7nQl64CUav0KHCdLIB0gFFrha4FcBuB+UEcG1KdPeRgY21J1Lx0WWsSh+XHig
bBdEztGM3fxExeOpGOSV+jO0c70Of2wjDAMTK6sHWEmD/hwBul5umzmy0r3L60LU
PzzcxK4IW9OHvvd+B72rYGEuZUS3z+0wiUFuL6QA2qx2N5YbnvyPQB0IlVda3GyR
eI/C5C0cZtYykw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:37 2025 by rpki-client