Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: OwBJxWS5sJK+MRjQ03hPMk82zBsAuLChm+39nHobFN4=
Subject key identifier: 76:C2:08:B8:4E:1E:E3:A4:02:59:D8:E4:29:27:46:31:D7:66:EA:76
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 0198D4E0C39CB4655A601A9D7B85CB81B120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: AJZHdjFjgaJK5KhqdBxRuWN/gjLqflRw2QFsi8O1nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c3:9c:b4:65:5a:60:1a:9d:7b:85:cb:81:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=76c208b84e1ee3a40259d8e429274631d766ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:6b:5f:0d:51:20:cb:3d:08:db:6a:0a:d6:
29:7d:a9:08:f7:78:55:5c:ce:da:3f:18:5f:38:d5:
15:a7:15:64:dc:0a:82:d9:9d:ad:5e:ee:79:5c:66:
d7:04:11:99:81:f6:1b:37:46:5b:69:5e:04:ae:4a:
29:48:be:49:f4:16:b1:54:4a:1c:73:04:f1:2a:89:
f6:54:a7:95:93:8b:d8:43:06:83:34:a3:59:2c:e7:
45:fe:e2:22:3e:d5:10:cd:b5:9c:57:82:40:56:09:
b8:f0:91:6e:28:41:85:38:6f:91:95:9b:f0:07:25:
87:a3:ea:4a:10:81:ff:a2:50:53:5f:77:78:fc:eb:
7a:e2:34:e9:35:a4:04:8a:43:95:3a:79:93:6a:25:
36:8b:57:f1:7a:c5:e5:fc:e3:e0:27:6b:4a:12:d2:
98:30:18:9b:6f:e9:f9:30:c4:f0:6a:12:ad:ae:ed:
06:75:26:f9:fb:cc:e6:ef:35:d9:6a:5b:0f:d1:c0:
fd:f0:d0:35:3f:7f:04:3d:12:19:13:60:13:ee:21:
21:fa:be:a8:a2:bd:89:26:84:94:43:22:38:73:56:
f8:47:21:62:bc:a6:5f:e5:ed:1d:35:4b:64:f6:a3:
c6:c8:a5:c8:eb:23:70:fc:58:3c:4c:63:ae:3b:fc:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:08:B8:4E:1E:E3:A4:02:59:D8:E4:29:27:46:31:D7:66:EA:76
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:f1:3a:79:ff:1b:ba:72:57:85:4e:de:74:2a:d4:34:f3:
45:97:64:bf:ab:09:74:f2:a2:27:5b:d8:a2:52:f3:84:99:14:
24:7f:89:a4:72:42:af:de:c2:58:7f:24:bb:c7:df:f6:5d:56:
d3:3b:f5:15:a0:50:4f:00:a4:c7:bc:1f:b5:e6:12:1d:db:e8:
4c:65:2b:b0:d8:8d:52:6a:eb:51:85:6d:80:ff:d7:d8:32:c2:
50:af:df:3c:60:91:21:a2:c8:c6:0a:3f:6e:b4:25:81:70:65:
ed:2e:e5:bd:48:a4:27:fb:4a:e9:b5:05:89:1c:5e:d8:68:9c:
b0:1e:33:d5:4e:d9:11:92:9e:94:9b:b5:3a:c0:33:3a:cd:e9:
67:65:4c:1c:6f:83:4b:2f:60:dc:da:31:df:f2:c8:16:95:29:
31:f2:e4:37:de:48:17:e4:04:e9:37:2a:59:85:08:df:ce:8f:
21:7d:f1:d5:bd:19:36:98:b0:6d:63:51:87:ae:2e:dd:dc:90:
19:9e:24:7d:d7:ba:ca:06:de:6b:51:ac:e6:af:13:15:79:fe:
0e:7a:4f:fa:38:9a:50:5a:24:50:c2:d8:d5:33:63:37:53:cb:
81:1b:63:fe:18:a3:2f:72:6f:a1:6c:28:5c:5d:e9:e2:53:30:
e8:d4:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:55 2025 by rpki-client