Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: RLxf8EFwnsv2GGGD/Pi5tj/dQz1o3m58r+sYOldE0hU=
Subject key identifier: 06:29:BA:4F:A4:39:AA:81:C5:E8:E5:27:A7:F0:13:F3:FE:4B:DB:74
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 0199FD344F9B1CDF6B63D125677B9A63FFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: qGPWTr3Z5kV1Hm4g/GANpmbqRLpTAVeSyLgQc194hAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4f:9b:1c:df:6b:63:d1:25:67:7b:9a:63:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=0629ba4fa439aa81c5e8e527a7f013f3fe4bdb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:e1:89:df:a8:36:e4:19:08:7b:e5:2b:b9:
60:91:ed:af:e2:c2:24:6e:3f:47:01:9c:b1:d8:ad:
ea:5b:d6:49:57:53:0b:04:b1:22:f9:9f:59:f5:c1:
cc:69:da:92:a2:3b:ae:3c:53:5a:53:11:42:8f:91:
11:40:6e:65:29:ed:31:70:27:86:27:36:aa:44:e8:
42:bc:62:54:fe:3d:20:81:f5:7c:3d:1e:9f:39:3e:
2e:20:ec:21:df:c0:f9:55:01:de:1c:ff:d5:60:a1:
74:7d:62:ac:24:7a:5d:9e:6c:84:ee:17:73:9c:18:
92:ca:b0:e4:fb:83:13:64:fc:1d:bc:40:29:ea:e4:
4f:26:15:ef:a3:58:da:c1:60:17:a2:1f:2e:0b:60:
7e:5f:ae:8d:ce:39:50:d8:71:b9:de:25:db:c6:44:
62:88:19:ac:b4:fc:95:9f:66:14:ed:b9:4d:78:91:
6e:74:54:4b:50:b3:a8:9b:1c:fc:ca:a1:c1:e9:b5:
ab:60:d9:19:4a:5f:83:48:3e:37:e2:83:f7:87:6f:
ff:c9:de:1b:37:3b:14:6c:81:de:e8:9b:18:d8:ce:
f4:3d:32:58:f9:f4:84:66:5b:0c:92:7f:f2:cd:f4:
8e:25:ee:da:d5:71:58:dc:70:8a:9f:4f:64:98:24:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:29:BA:4F:A4:39:AA:81:C5:E8:E5:27:A7:F0:13:F3:FE:4B:DB:74
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:f9:28:c7:4c:7a:e8:8b:19:dd:b5:72:a4:77:e9:23:12:
ad:a7:4a:0f:34:33:a6:30:4c:b3:20:5d:f0:4f:ea:56:e5:26:
1a:e9:8f:8b:de:bb:18:8c:86:1f:b6:8a:f1:51:98:ad:08:e7:
2c:fc:98:88:2f:e0:9f:15:61:26:76:7d:41:9f:40:f4:d5:ed:
1b:e5:0e:37:78:cf:1b:5d:ed:3e:95:e8:bf:9c:4c:9a:35:d7:
56:71:c3:5e:85:d4:a3:b7:28:fb:8f:0e:80:2c:94:bf:5e:92:
b2:94:8b:52:d6:51:94:7c:56:7a:13:a2:b9:5e:8a:69:a4:41:
53:f0:bb:d1:98:0a:99:fb:7d:07:10:9b:41:f6:ce:0f:ea:0e:
f4:a9:9f:66:1e:98:78:23:e8:5f:76:f5:9a:6b:52:23:af:b3:
ff:86:64:26:0f:c9:bd:23:dc:e2:c9:b5:5c:71:5f:cd:62:41:
00:47:35:9c:fc:24:e9:d5:7a:b4:de:ca:03:70:10:87:06:d9:
f8:5b:c1:e6:33:2a:7d:96:c6:56:84:a3:bc:95:7a:84:0f:70:
1e:2f:7e:fc:c4:72:8d:c7:ee:e2:ae:d6:fc:0d:91:f3:d5:3c:
54:e3:58:d7:9b:d2:99:6c:c1:c1:13:45:d3:39:fa:77:2a:1f:
bc:40:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:05 2025 by rpki-client