Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: Ko8hdjhSt7pcPng975uDTAyHKCTLXUY0bZJLPLoQkdA=
Subject key identifier: CF:27:24:4D:E9:51:C6:89:CC:EC:67:00:44:EA:CE:05:75:0F:F2:25
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019776AE9BB35B31D11B080853F73CB5958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 038D
Signing time: Mon 16 Jun 2025 03:00:43 +0000
Manifest this update: Mon 16 Jun 2025 03:00:43 +0000
Manifest next update: Tue 17 Jun 2025 03:00:43 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: Z+e2AaXCj7O54KXZnxxGV+p49J9e0urR12CGy0HbEpo=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:9b:b3:5b:31:d1:1b:08:08:53:f7:3c:b5:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Jun 16 03:00:43 2025 GMT
Not After : Jun 17 03:00:43 2025 GMT
Subject: CN=cf27244de951c689ccec670044eace05750ff225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:1e:06:f6:1e:54:1b:c8:4d:98:72:c3:45:
08:b1:01:6d:fe:67:60:08:0e:ff:7e:95:7f:ea:81:
7e:c7:88:d6:60:91:63:90:0b:7b:a0:43:02:f0:2c:
06:67:f9:ad:7b:b8:df:79:07:a7:19:e7:9a:9f:c9:
b1:b1:2a:80:d5:c5:15:0d:a2:a2:ac:fd:b5:1f:4d:
57:c5:64:bb:66:0b:21:b9:2a:34:71:3f:a5:2b:b9:
2e:12:ef:0e:1c:6f:7e:7a:90:cb:bd:42:51:c5:44:
85:a1:a2:f8:95:1b:69:66:36:a1:08:e3:e2:f8:0d:
20:86:d2:5b:5f:34:7c:ce:74:75:0c:71:51:12:f6:
a1:3e:76:89:f5:6c:02:a0:fc:66:fe:b6:40:7c:74:
57:2d:3e:43:84:68:0b:09:18:b6:07:5f:41:0b:16:
ca:7c:82:01:45:bd:f5:e8:0c:4c:ab:ac:e9:1e:1e:
c7:99:2f:3d:28:d6:d4:73:e5:90:43:74:a1:39:e5:
ec:8c:9e:2b:e0:19:82:a8:7d:ce:7c:a4:01:76:ac:
bb:12:bd:3d:1d:8e:a6:a4:14:34:8c:2b:b5:cc:0d:
16:3f:e8:fe:49:6c:7d:a4:a8:7b:23:2c:60:2d:9a:
14:21:14:e1:48:7d:0f:49:5c:18:c8:db:64:aa:39:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:24:4D:E9:51:C6:89:CC:EC:67:00:44:EA:CE:05:75:0F:F2:25
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:68:9d:9d:75:3e:9a:33:51:f3:78:87:2c:42:39:30:18:a4:
e4:07:be:c9:c4:16:ca:68:41:89:36:58:c3:42:c3:f2:3e:8a:
2a:74:4c:ac:e8:08:db:f8:c3:97:65:5b:f4:72:9a:ee:28:62:
1b:77:a8:a4:ed:95:70:1d:55:e7:17:a9:b4:e9:4b:a2:17:38:
4b:81:eb:c0:03:fd:6b:38:0d:08:a8:6e:32:03:dc:d1:18:c3:
0c:a4:b1:23:36:c6:72:58:ee:58:d0:43:0a:a2:d0:2d:6f:6c:
54:a9:61:cc:cb:32:3d:d8:05:b4:bd:db:01:8c:39:aa:5c:68:
93:f3:e3:a6:0b:6b:08:71:e7:4e:f7:ba:56:05:df:91:20:02:
7c:2b:bd:2d:f1:dd:63:c1:30:ae:fb:78:58:7b:1f:02:24:d5:
f5:fd:f3:e5:a2:cc:6f:b2:b5:4d:86:20:db:4c:a9:a8:55:61:
fe:2e:59:7d:80:f1:31:82:e2:d1:c2:3c:3e:74:4a:da:fb:f8:
aa:10:7a:bb:eb:25:50:9a:d5:f9:a2:1a:bb:1b:c9:f4:36:e3:
5b:f0:85:34:d1:1d:07:ad:25:4c:4d:ad:5a:5e:e0:72:3d:dd:
7c:fc:3e:49:8f:47:78:4d:93:8d:65:8f:c9:c0:64:8d:ce:93:
7e:18:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:13 2025 by rpki-client