Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
File: TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json)
Hash identifier: Okp7jGxpDxvAWyXGX41Ax1Pa+wER+aD0yDAhxQ1vTvc=
Subject key identifier: 03:58:DD:E8:B3:16:41:96:C4:09:6B:37:BC:59:70:55:CA:F7:4A:1C
Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
Certificate issuer: /CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Certificate serial: 0198D65F1F244F8B01E26B32F33A6496EE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
Manifest number: 0A3E
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: VFzEovNjoxsfhzuE4LJx1vGyb8+lo5Ioh2Vfpzf/Dvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1f:24:4f:8b:01:e2:6b:32:f3:3a:64:96:ee:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=0358dde8b3164196c4096b37bc597055caf74a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:39:9a:af:ac:23:f5:ae:82:5f:4d:b7:86:
e4:ad:d1:97:8a:c4:11:65:7f:c5:73:f1:fc:2a:25:
d8:4e:fa:ba:0b:07:6f:04:6e:29:19:c5:70:15:79:
7e:1f:94:39:9d:69:af:26:fc:77:b6:f1:1c:2b:d8:
0c:08:82:02:9b:e7:c9:20:02:37:48:fa:21:32:03:
32:61:e4:82:cf:70:02:46:91:11:95:49:7d:e4:63:
05:5e:ca:be:35:a8:1f:ec:ac:1a:f4:5c:96:31:09:
b6:42:f3:51:a0:af:45:81:6e:9e:ba:99:af:7b:1a:
d2:cb:f6:eb:be:08:69:c2:a5:33:a9:c9:22:84:2e:
a4:3b:3e:67:87:95:fd:a4:ea:a4:d6:ef:d2:b1:d3:
13:1e:c7:a8:d2:d1:d1:f5:44:4a:13:82:b3:90:40:
ff:ec:79:ab:d6:62:b5:a7:a2:29:21:52:ef:67:b6:
07:13:e3:c0:2f:8c:34:2c:9a:00:06:ec:0d:1f:dc:
8d:ba:d1:d9:1d:3b:ea:7a:d6:46:a8:ef:98:4e:56:
e4:25:08:fe:0f:1e:1f:ad:0a:4e:4e:1a:bf:5d:24:
55:57:eb:fd:35:74:3d:9d:7d:5a:e5:81:dd:b0:e8:
92:81:75:a8:f2:14:7b:05:13:74:d1:7f:7d:4f:72:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:DD:E8:B3:16:41:96:C4:09:6B:37:BC:59:70:55:CA:F7:4A:1C
X509v3 Authority Key Identifier:
keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:86:58:42:54:8b:91:e0:f4:0b:08:b3:00:35:94:a4:0c:94:
da:e0:c4:3a:bb:ba:03:29:77:f7:f0:95:ad:d3:c7:87:b6:32:
6e:3e:43:a1:6c:f7:26:9a:1f:93:6a:1c:ca:27:25:63:65:59:
4e:2f:54:7e:58:93:e2:a9:8c:06:a5:87:d4:fc:bb:2a:c3:c6:
98:ca:80:76:30:7f:21:96:20:6b:1b:3d:38:d7:40:44:2d:31:
a7:17:a3:59:26:56:26:13:4c:7c:51:f2:55:36:f1:74:c0:69:
0e:07:14:23:ac:af:7c:70:11:4c:ff:2e:14:46:a6:91:0c:0f:
cf:5a:cf:ba:a3:70:27:00:6c:f9:22:c8:14:6c:4f:55:d9:d3:
4c:a2:86:f4:c2:fa:93:79:1b:d9:47:aa:66:bd:70:c8:4c:d9:
1a:df:be:76:93:2e:d3:a2:e0:1b:0c:ac:4d:f3:e0:aa:2f:28:
57:fd:b1:db:40:c8:6b:c8:b9:04:6c:f8:c6:74:f7:bd:db:1f:
0a:2b:7f:df:e4:0e:08:c2:f1:1c:f2:89:e3:1a:86:05:13:5f:
c5:86:6b:9e:ac:12:a7:40:02:0b:0b:99:b3:5f:5e:ca:39:4b:
5f:dc:3b:3c:4b:14:0f:eb:0b:35:59:3a:6f:37:9e:67:09:e5:
3f:0c:94:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXx8kT4sB4msy8zpklu4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI1Njg1ZWUzOTY3ZmNjZjU0YWYxNTBlOTgzZjBmODAy
NTVhOTIwHhcNMjUwODIzMTAwMDE0WhcNMjUwODI0MTAwMDE0WjAzMTEwLwYDVQQD
EygwMzU4ZGRlOGIzMTY0MTk2YzQwOTZiMzdiYzU5NzA1NWNhZjc0YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYg5mq+sI/Wugl9Nt4bkrdGXisQR
ZX/Fc/H8KiXYTvq6CwdvBG4pGcVwFXl+H5Q5nWmvJvx3tvEcK9gMCIICm+fJIAI3
SPohMgMyYeSCz3ACRpERlUl95GMFXsq+Nagf7Kwa9FyWMQm2QvNRoK9FgW6eupmv
exrSy/brvghpwqUzqckihC6kOz5nh5X9pOqk1u/SsdMTHseo0tHR9URKE4KzkED/
7Hmr1mK1p6IpIVLvZ7YHE+PAL4w0LJoABuwNH9yNutHZHTvqetZGqO+YTlbkJQj+
Dx4frQpOThq/XSRVV+v9NXQ9nX1a5YHdsOiSgXWo8hR7BRN00X99T3IdTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANY3eizFkGWxAlrN7xZcFXK90ocMB8GA1UdIwQY
MBaAFE4rVoXuOWf8z1SvFQ6YPw+AJVqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUt
NmEwY2U1MmM3YWJkLzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUtNmEwY2U1MmM3YWJk
LzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIZYQlSL
keD0CwizADWUpAyU2uDEOru6Ayl39/CVrdPHh7Yybj5DoWz3Jpofk2ocyiclY2VZ
Ti9UfliT4qmMBqWH1Py7KsPGmMqAdjB/IZYgaxs9ONdARC0xpxejWSZWJhNMfFHy
VTbxdMBpDgcUI6yvfHARTP8uFEamkQwPz1rPuqNwJwBs+SLIFGxPVdnTTKKG9ML6
k3kb2UeqZr1wyEzZGt++dpMu06LgGwysTfPgqi8oV/2x20DIa8i5BGz4xnT3vdsf
Cit/3+QOCMLxHPKJ4xqGBRNfxYZrnqwSp0ACCwuZs19eyjlLX9w7PEsUD+sLNVk6
bzeeZwnlPwyUXw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:14 2025 by rpki-client