Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: DUAwoc+5D4HRCMk6XQKoFlSJAiPi3LQWp3g1PHaNVYU=
Subject key identifier: F1:64:F2:DD:21:08:FC:98:FF:75:72:89:0B:3E:0A:88:EB:AA:C4:7B
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 0197B88F5A7848AB10DDF61EAA27A532B16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 03AF
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: eBhuRm9KUYMddHM5nuhSjYtCokzwS7+wW9JhDzO8aCU=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5a:78:48:ab:10:dd:f6:1e:aa:27:a5:32:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=f164f2dd2108fc98ff7572890b3e0a88ebaac47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:fb:8e:3d:16:e1:89:1a:bb:9b:2b:b6:b6:
e5:df:3f:19:e4:e3:f9:af:49:ea:d8:19:66:d6:3e:
fd:7f:6f:88:45:32:75:42:35:2b:ef:17:fb:d6:68:
ef:cb:f4:5e:dc:cd:0d:96:59:2b:e5:c0:4d:98:d3:
29:d8:cb:53:11:11:b6:7f:e1:f9:65:4e:0b:0f:69:
d4:33:e4:be:8a:91:10:c2:b5:64:68:65:6c:a3:84:
95:b7:73:be:8c:c1:f2:68:41:7f:1e:6a:f0:e5:42:
15:85:74:b3:23:7e:3d:6e:39:c3:8b:e7:73:e9:fa:
db:d7:20:a5:84:3b:56:90:33:fc:59:e3:ac:65:42:
a0:ee:50:bb:4c:22:7e:c2:3c:70:c0:a6:90:65:15:
ad:e9:fe:96:88:67:8e:4d:66:34:09:c4:ba:48:a5:
60:8a:ca:2f:08:8f:61:42:8a:b0:49:9b:82:47:15:
a9:3f:65:79:c5:af:bb:3b:fe:a8:1d:70:04:8f:79:
9a:82:ce:ff:02:8d:50:19:09:f4:a2:59:e5:38:20:
fb:ad:df:e2:9f:a3:ed:97:ba:9c:b3:62:9d:e2:72:
1f:1e:74:ae:cf:f4:6a:00:16:16:87:67:09:e7:39:
d3:19:f9:35:78:e4:59:46:2d:38:6b:c2:ca:ef:01:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:F2:DD:21:08:FC:98:FF:75:72:89:0B:3E:0A:88:EB:AA:C4:7B
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1c:be:00:33:d8:f1:cf:a5:b5:01:9b:f6:81:3a:3c:91:ec:
40:56:9c:dc:8d:49:57:b5:a2:51:0b:b2:07:eb:14:d6:0a:f1:
78:98:57:88:79:ea:91:e4:a0:53:10:19:c6:e2:5f:e4:93:1d:
c8:0d:08:70:fd:dd:06:b8:51:a5:f8:97:02:d9:4b:09:5c:06:
dd:fc:ce:43:1a:e8:0e:4c:c8:b1:30:fd:25:27:cf:a8:9f:6c:
49:3c:c8:04:73:f0:93:48:54:97:e2:d9:a8:1a:28:58:43:30:
43:9c:03:54:9c:f5:f4:40:1e:26:14:b6:b6:fd:23:d0:64:4a:
83:50:9e:ed:8a:a9:9b:6e:73:52:50:43:30:bf:a1:63:6e:d6:
2b:8f:db:9c:46:d6:f7:64:73:51:97:e8:89:6d:f6:8a:39:41:
81:8c:59:dd:05:c0:3e:19:a7:7e:7e:14:fe:f4:02:61:db:7a:
bc:64:36:31:55:03:6e:23:dc:4c:1d:d9:46:a7:4b:8f:17:34:
42:04:a0:5a:d4:58:f6:92:52:74:24:ca:4d:1e:2b:80:15:b2:
ec:35:ff:26:dd:29:44:42:de:7f:41:6f:66:a9:ab:b9:90:18:
57:7f:d2:61:3d:12:3a:bd:e1:06:89:fd:25:b6:2a:71:4c:8f:
86:4b:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:35 2025 by rpki-client