Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: sVhTru36skqB01UYHaQP2w7O7GKQAXFIXoxi4hCewBA=
Subject key identifier: 41:0E:70:30:87:3C:4B:E6:78:A5:3A:0E:BB:53:15:3C:49:BB:9B:A0
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 0198D5BBD21BB9B4478662A3390249D5106A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: Q9RAp9Ut58QWgb4qhXVhx8iur4My2uSbyrRgBSyXQt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:1b:b9:b4:47:86:62:a3:39:02:49:d5:10:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=410e7030873c4be678a53a0ebb53153c49bb9ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:55:32:00:43:0b:08:d4:ae:b1:31:44:b9:
04:da:dd:c0:70:c0:85:fe:95:11:06:65:fa:f6:71:
7d:18:0c:12:4b:d4:4c:8a:ee:71:27:eb:9e:c6:e6:
fb:d7:9f:07:51:c9:e4:d2:55:25:75:88:95:6a:79:
19:16:b1:79:f4:d8:76:f6:9e:70:69:5c:89:b1:a7:
71:90:c9:62:9d:3b:23:11:21:b1:35:7c:33:35:b6:
d6:5e:ac:37:b0:49:56:65:91:90:1c:a1:31:40:f5:
41:4e:2a:bd:f2:fa:ac:c0:2e:49:c9:50:64:a6:52:
37:29:bb:42:f2:61:da:6a:b9:c7:62:3f:a8:d9:34:
6c:c1:d6:a1:01:75:d5:f0:d7:7d:c0:af:a9:17:09:
ee:0f:46:18:aa:e2:85:f5:74:7c:ee:74:5a:e2:c5:
ad:78:8b:88:9f:70:93:4d:d3:13:16:01:e2:16:27:
ca:0e:d5:0d:3b:b5:86:d1:b3:14:ab:f0:df:9f:4c:
bf:dc:71:81:67:6b:6a:63:0e:e2:b7:e2:91:e3:85:
d0:04:7e:5f:0a:f6:d5:55:f7:59:2c:2c:64:bb:59:
7b:be:30:0e:51:a7:45:85:52:79:12:b1:3c:4a:f0:
18:52:37:8f:b8:7d:07:54:af:51:4e:fe:5d:7f:56:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:70:30:87:3C:4B:E6:78:A5:3A:0E:BB:53:15:3C:49:BB:9B:A0
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:64:76:7d:e8:a4:b8:77:b6:02:51:50:2e:5f:fa:2b:a8:
03:ab:92:95:b4:29:dd:7a:e7:6b:64:1e:a0:85:95:5b:b4:e4:
cc:02:22:5d:23:00:a5:43:97:d6:ad:59:ca:0f:70:17:53:a3:
b6:3c:78:c6:b5:42:1d:1d:d9:9f:f4:1e:7d:bf:85:fd:19:21:
98:53:8b:00:e6:13:b5:57:06:0b:5a:ba:85:29:54:df:17:05:
5b:8c:13:7c:68:7c:fa:20:21:8d:78:61:1e:61:ad:bf:68:6e:
0a:f1:e2:a9:e3:f5:cd:52:67:8d:dd:30:32:67:99:70:6e:83:
40:fc:ce:a3:33:12:97:47:7d:1e:d7:f1:6e:80:0a:0d:34:87:
1a:a6:7d:d4:47:ff:de:10:1a:5d:8e:9a:66:f0:f6:f9:76:7d:
64:65:a6:aa:63:58:ed:d6:b2:dc:ee:c6:37:e1:f7:3f:9c:b7:
6b:4f:50:c8:92:2a:d7:41:00:62:03:4b:a9:24:7a:4b:2e:e9:
0a:cc:d1:04:ab:05:14:62:49:b0:ef:22:b2:7d:39:35:c0:31:
bd:e8:80:89:02:d1:c8:df:eb:77:9e:45:bb:cc:7c:95:b1:f1:
50:13:79:22:3e:2a:e1:d5:91:bb:0b:ac:9f:b7:44:bc:b3:b1:
8f:cc:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:15 2025 by rpki-client