Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: UvGmg0pQIEsw8ADqV4RbtCfOtpFiRQe5dTaYP058Z1E=
Subject key identifier: F5:27:CC:46:42:0B:7A:73:87:6A:2C:86:25:57:E6:D0:53:A1:09:BE
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 0199FC58E8251C73709063163366341CAA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: +ewDhV03gej1W5eE8WKU4aTkOhNdHpx7F6GxgS1++/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e8:25:1c:73:70:90:63:16:33:66:34:1c:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=f527cc46420b7a73876a2c862557e6d053a109be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:3b:44:6b:bd:8f:b8:13:0c:f1:d6:a2:9e:
35:a4:ad:9e:1c:76:b7:4e:9d:8c:49:9c:f8:b8:1e:
3a:5d:bb:5c:c8:bb:78:a4:48:16:9b:ad:40:e9:25:
e5:8e:79:91:9c:43:d3:1f:a6:3e:9f:62:10:9e:68:
27:28:bb:6f:e5:bf:e5:be:fc:9b:95:ae:0b:26:65:
02:b5:56:2d:12:8e:b6:7f:1a:9e:8a:42:ea:fb:f3:
8b:48:19:6c:c5:d1:e1:42:8d:1a:fc:7f:85:af:09:
be:eb:7c:5c:ac:6b:d9:f9:b4:af:79:c6:d1:85:ea:
37:22:a8:16:18:9b:c7:ee:e3:7a:22:f3:c7:f7:7c:
80:8f:18:7b:52:fe:c4:12:da:e7:da:d4:32:5b:25:
29:b6:ab:68:36:ff:69:80:c6:14:85:42:1b:4d:ac:
45:f0:da:28:4a:8e:2b:fd:f0:86:d5:77:14:65:c0:
37:35:f9:44:c3:09:96:65:1c:26:39:fa:bc:3a:14:
03:43:86:9e:f6:b8:89:9b:ea:82:67:f3:a7:40:c7:
ae:ba:bf:8b:f2:33:a3:78:88:81:74:14:68:a2:45:
ef:2f:a1:33:62:fa:be:81:f6:76:ac:ac:1f:61:b5:
ee:bc:4b:09:da:7a:97:00:e9:37:ea:26:a0:1e:0c:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:CC:46:42:0B:7A:73:87:6A:2C:86:25:57:E6:D0:53:A1:09:BE
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:c6:cc:d1:f4:3b:17:b9:a3:b3:3b:a4:bb:96:51:68:38:
8d:78:75:8e:a5:0c:95:5f:b9:e2:37:14:77:df:3b:0a:8e:11:
63:75:8c:7c:80:2a:be:d4:12:da:fd:b8:77:8c:07:ca:cf:2f:
3d:aa:b2:19:e9:88:43:c4:a9:92:6d:aa:45:51:dc:5d:fe:1c:
c8:51:3f:cd:d6:5e:40:9d:3f:d3:e3:39:1a:df:28:55:25:5f:
d9:c9:cf:44:48:b4:22:d6:3f:22:d8:3f:ff:36:55:96:3a:28:
45:62:d6:38:ab:d7:cb:ce:02:1e:3c:fd:d8:23:25:9e:a3:a2:
ba:d8:a5:52:82:af:8e:ef:af:22:b8:f9:e4:b8:59:0e:e1:9b:
16:53:8b:ab:3a:4c:30:e1:83:ef:5d:02:05:a8:1d:34:5c:ea:
71:34:a5:25:f8:ce:96:07:af:da:0a:f5:26:e2:b7:f0:c1:c7:
f7:2e:5a:0f:f4:24:14:d8:f2:7b:7f:e2:53:4e:4a:97:53:7d:
c6:f2:fc:9e:08:f4:cf:b4:9a:73:d2:85:a2:e0:60:cd:be:84:
ba:75:f5:f2:ee:c9:08:86:01:9a:6d:a2:12:e9:a2:a4:3b:4a:
27:8b:35:60:d9:53:5c:c7:a2:d7:1c:02:08:4c:bd:af:08:50:
ff:75:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:54 2025 by rpki-client