Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: tfHnHocYPeFaHtawVcSVSCSPEcDUc1OKMJ5KyAr67W4=
Subject key identifier: AE:4D:CB:49:99:56:A3:C9:38:A3:A8:7D:A2:A9:07:B8:E0:B4:A1:2F
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 0199FBEB7911BF2055375A9128AA71579E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 04DB
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: R+14sxXkWYuIAnW4WJzQXciu/f7wd+fGaaJOgkQTjnc=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:79:11:bf:20:55:37:5a:91:28:aa:71:57:9e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=ae4dcb499956a3c938a3a87da2a907b8e0b4a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:6f:82:be:91:57:9b:b0:52:55:f0:c7:22:
b3:7b:d9:82:d1:bc:26:80:ac:0f:ae:e1:c7:5a:22:
73:84:d2:ca:e6:02:24:8e:63:f0:a6:31:75:37:10:
53:1c:e5:b4:d8:ce:d6:50:61:4a:33:1a:8d:54:d6:
ad:1e:28:90:0a:a5:07:4f:0f:74:08:40:4a:15:ac:
76:f0:99:f5:79:14:ce:02:a8:b5:aa:3f:7b:05:68:
10:e9:fa:41:ca:7e:b4:ea:ac:10:93:26:7b:c3:60:
43:e0:aa:49:9a:37:88:f4:ef:d8:d5:fe:92:d2:30:
a2:86:21:a5:42:f2:dd:26:05:72:a7:8b:a1:0e:ef:
a5:92:99:91:f1:c0:f2:64:65:43:52:52:5f:fe:ee:
d8:c9:9d:32:98:58:0f:31:85:b3:a1:de:ef:d7:a8:
22:db:47:9d:23:4e:33:ca:86:05:fd:da:7a:55:cb:
14:1c:30:f8:b9:03:0f:80:45:e7:d2:cb:dc:6c:cd:
58:38:2d:11:b6:db:2c:98:3b:a2:cb:7e:f5:f7:c1:
91:79:e0:21:33:a3:dc:a9:51:cb:03:8b:34:e5:0c:
41:c2:b0:2b:c5:31:58:64:c6:bd:c6:5e:8d:b7:2e:
0a:80:2f:e6:38:bd:6e:b6:ee:72:85:2d:24:a0:27:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:CB:49:99:56:A3:C9:38:A3:A8:7D:A2:A9:07:B8:E0:B4:A1:2F
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:81:51:dd:1e:2a:71:07:d6:55:b6:27:1f:03:0f:f2:4f:
2e:6b:a7:0d:65:96:c5:97:d8:eb:85:1f:85:67:fb:de:41:8d:
68:4f:6f:2f:f5:4f:4c:63:8c:ac:a4:19:31:2b:9f:6c:5f:58:
11:f7:37:d8:fb:ad:60:91:2d:86:d3:10:d0:1a:e3:29:76:28:
d5:14:4c:87:a6:99:33:23:7f:20:bc:6f:df:89:8e:39:65:5d:
52:31:96:c1:8f:b0:a5:bb:3e:01:fa:b5:d1:53:9b:91:4a:89:
2b:66:e4:bb:29:2f:b5:96:85:8f:3c:93:d5:8a:cc:f3:7d:29:
18:34:da:d7:4e:a0:cb:0d:6f:4b:c5:2d:b2:46:30:79:80:2b:
24:9d:ba:b0:4d:cf:15:04:5e:14:c6:88:c5:c3:92:11:05:76:
84:bd:27:12:78:3e:51:ec:1d:81:0f:2e:3b:a1:50:c9:59:6a:
0d:be:6c:7a:eb:2b:05:42:ab:d3:31:30:9f:ac:1a:57:4e:41:
68:4b:25:a4:bc:02:0b:fc:ee:87:a7:48:96:25:cd:e3:2a:44:
5b:cf:f1:aa:03:68:5f:91:f3:1d:f9:67:8a:47:67:e7:5f:37:
0e:cf:c6:31:7c:e7:61:04:61:cb:fc:60:b6:3d:49:f2:75:53:
4a:b5:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:55 2025 by rpki-client