Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: ouBUEF0ocCdGYLGX4bUtkDHAvQjDU31lACu7VwLp+aM=
Subject key identifier: E0:95:59:E0:79:8F:29:31:EF:17:7B:BF:28:57:A7:50:2B:69:28:79
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 0196C0B8C2F3FAAB3ACC748C83163EC7A1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 19:00:56 +0000
Manifest this update: Sun 11 May 2025 19:00:56 +0000
Manifest next update: Mon 12 May 2025 19:00:56 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: wXKCSa9m3IDQ23GVqloVkng7xjz3Qxw8egHzKBgm2J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c2:f3:fa:ab:3a:cc:74:8c:83:16:3e:c7:a1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: May 11 19:00:56 2025 GMT
Not After : May 12 19:00:56 2025 GMT
Subject: CN=e09559e0798f2931ef177bbf2857a7502b692879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:3f:94:4e:75:38:b7:fd:f5:46:4e:40:f7:
27:35:66:8b:b9:8b:94:5a:69:d5:0d:7a:23:fc:47:
6a:7e:f9:79:ad:1b:05:c7:02:71:bb:32:d7:d2:1c:
a5:c8:bc:35:18:75:46:a0:5b:dc:69:cf:53:d4:1d:
01:6b:61:0f:70:8d:5c:50:e9:72:7f:ac:76:0e:31:
b0:cc:fd:1e:66:5c:7d:82:ae:70:81:79:a5:a1:5c:
56:88:19:24:70:c2:00:a3:83:9f:41:64:3f:c3:69:
f0:6b:a2:34:e3:44:43:55:76:a7:0a:c1:e5:d1:ce:
87:93:20:9e:4d:19:2c:ad:9d:2f:4c:28:97:89:d8:
54:07:b9:12:62:37:d8:4b:d0:03:be:09:2e:18:1d:
44:e2:37:79:07:20:9e:2c:d0:42:84:a0:59:bd:07:
56:2b:8f:cc:e0:74:96:87:6b:70:0d:c7:55:f8:83:
de:c8:90:50:2d:5b:ba:a6:cd:0c:d0:9d:f2:31:7f:
7d:44:45:7d:4e:31:55:7c:58:7c:f2:d0:c6:c3:98:
98:f2:86:f4:c3:54:c9:c4:80:25:eb:72:a1:74:eb:
38:75:7f:2b:9d:f5:9f:9a:77:52:b9:04:8e:c6:68:
89:77:ad:b5:08:df:32:2a:c2:ac:91:a3:5a:f2:c7:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:59:E0:79:8F:29:31:EF:17:7B:BF:28:57:A7:50:2B:69:28:79
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:91:33:fe:93:3a:72:cd:8c:d6:9a:da:3b:98:fb:89:63:a4:
25:c8:9c:ea:d9:78:4f:12:2a:c3:04:71:a2:71:fe:d7:7c:5b:
29:56:39:bc:43:42:c1:2d:55:1a:3e:4f:a2:8b:c5:9d:19:f7:
98:34:dc:65:47:d2:91:74:e7:59:0c:c5:49:91:fd:87:be:a6:
a5:ad:15:fb:7f:55:87:70:f0:ca:46:c0:7e:80:e9:70:d8:63:
c0:f2:0b:77:8a:0f:14:a4:54:9f:0f:6f:54:ad:1a:c6:f0:5e:
09:ae:a4:30:03:85:57:05:2d:eb:22:75:ad:39:03:7f:2a:e6:
d2:50:f6:8f:52:af:ea:99:f6:2c:da:f7:38:2d:08:ae:6b:3b:
fe:ad:81:42:f0:79:8e:54:96:32:e7:f0:c1:21:60:86:a0:94:
fc:c2:ef:3c:44:64:81:31:5a:c0:1c:a2:68:c1:ef:27:e5:f5:
93:f5:1d:f6:41:3a:04:a1:cf:fb:a7:88:23:e0:f7:ff:bf:77:
31:80:58:da:bb:4e:e1:e1:0c:8e:1f:04:46:b0:cf:02:46:1c:
03:3f:61:5b:c9:96:db:e7:d1:f1:b6:85:8d:51:c7:e3:14:22:
06:10:14:39:c8:41:4a:7f:3d:77:0f:99:1d:cb:64:18:98:09:
2a:42:2f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuMLz+qs6zHSMgxY+x6HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjUwNTExMTkwMDU2WhcNMjUwNTEyMTkwMDU2WjAzMTEwLwYDVQQD
EyhlMDk1NTllMDc5OGYyOTMxZWYxNzdiYmYyODU3YTc1MDJiNjkyODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsA/lE51OLf99UZOQPcnNWaLuYuU
WmnVDXoj/Edqfvl5rRsFxwJxuzLX0hylyLw1GHVGoFvcac9T1B0Ba2EPcI1cUOly
f6x2DjGwzP0eZlx9gq5wgXmloVxWiBkkcMIAo4OfQWQ/w2nwa6I040RDVXanCsHl
0c6HkyCeTRksrZ0vTCiXidhUB7kSYjfYS9ADvgkuGB1E4jd5ByCeLNBChKBZvQdW
K4/M4HSWh2twDcdV+IPeyJBQLVu6ps0M0J3yMX99REV9TjFVfFh88tDGw5iY8ob0
w1TJxIAl63KhdOs4dX8rnfWfmndSuQSOxmiJd621CN8yKsKskaNa8sdJPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCVWeB5jykx7xd7vyhXp1AraSh5MB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpEz/pM6
cs2M1praO5j7iWOkJcic6tl4TxIqwwRxonH+13xbKVY5vENCwS1VGj5PoovFnRn3
mDTcZUfSkXTnWQzFSZH9h76mpa0V+39Vh3DwykbAfoDpcNhjwPILd4oPFKRUnw9v
VK0axvBeCa6kMAOFVwUt6yJ1rTkDfyrm0lD2j1Kv6pn2LNr3OC0Irms7/q2BQvB5
jlSWMufwwSFghqCU/MLvPERkgTFawByiaMHvJ+X1k/Ud9kE6BKHP+6eII+D3/793
MYBY2rtO4eEMjh8ERrDPAkYcAz9hW8mW2+fR8baFjVHH4xQiBhAUOchBSn89dw+Z
HctkGJgJKkIv8A==
-----END CERTIFICATE-----
Generated at Sun May 11 22:14:01 2025 by rpki-client