Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: Vc1nAyCZCqKyztrSOmTb72L38Vm/GWv1bXcJLGZkDDE=
Subject key identifier: 5E:FE:99:86:4B:DE:07:A7:9B:4E:E2:AB:55:BC:34:57:F7:84:35:50
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019A4EF4F3A09BFA19EA69C8CA70B7F96355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0506
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: syoJ38HeLKXbJAIXlF2mnIjl2HZ1pcCImdOcWUZA48c=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f3:a0:9b:fa:19:ea:69:c8:ca:70:b7:f9:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=5efe99864bde07a79b4ee2ab55bc3457f7843550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:b9:99:a0:74:b2:dd:09:7c:c6:bc:77:bb:
a0:e5:5d:9a:ab:08:06:5c:67:30:41:50:83:6b:bb:
57:91:a7:a8:04:1b:ca:bc:2b:c3:6e:f5:b1:cd:cb:
b2:57:43:92:6b:73:ff:7f:cc:02:ad:5f:8e:d5:6f:
fc:09:14:69:de:89:69:26:d2:9c:e5:2f:2f:06:0b:
94:96:9d:cc:88:09:d0:d3:20:b0:0c:1d:f6:26:5b:
9e:ef:ce:f6:fe:c4:de:2b:b4:2c:06:dc:b1:b3:26:
b5:f6:ab:17:ca:91:6d:c9:6e:4b:8a:54:e5:f6:03:
f6:1d:01:c6:96:8a:cf:8f:b2:2e:aa:d3:30:e3:dd:
fd:07:5c:56:0f:f3:82:93:bf:01:1b:16:b0:1c:1a:
5b:52:f1:f0:42:36:6e:f5:d9:d6:f8:1c:49:66:be:
15:54:1d:5f:9d:d3:8c:55:d0:fa:af:81:29:af:c1:
e5:ef:3a:50:69:c2:cc:5a:b4:6d:88:6c:14:67:33:
1e:8c:65:2e:71:e9:1a:15:14:5c:3d:41:c2:a4:c1:
55:2c:6d:16:24:a6:1a:d4:9a:65:c5:f0:98:a0:38:
fa:cd:ea:e4:c3:6d:a3:62:87:5c:d3:18:d1:6f:7f:
79:aa:77:20:ba:0e:af:2c:c2:c6:7f:df:4e:30:39:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:99:86:4B:DE:07:A7:9B:4E:E2:AB:55:BC:34:57:F7:84:35:50
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:55:69:e7:62:4d:35:48:81:8c:6f:c8:0c:14:51:f7:74:
90:1f:0c:9b:7c:07:dd:7f:53:46:21:f6:19:0c:f9:70:b8:5e:
eb:48:74:3f:fe:2a:a6:f6:05:e6:79:ab:a6:d0:f6:f0:14:a3:
e5:f7:e7:ef:24:b9:49:82:e2:fb:d7:1d:a0:44:37:66:ab:fc:
1c:5b:4d:d8:69:ee:a9:3a:50:ef:0e:bf:ea:8b:b3:e6:63:b6:
50:cd:cd:dd:61:fb:15:ca:a9:26:e9:9d:ba:b2:e8:58:98:79:
a7:a7:bd:6a:d0:35:50:3e:05:8d:f1:9f:16:90:8d:0b:5d:96:
8f:6a:a7:25:bd:43:e1:94:b3:82:2c:c7:33:df:df:dd:92:e7:
06:7d:94:f8:82:25:40:01:9a:c2:da:8d:f2:5b:de:40:21:48:
4c:3a:7d:56:25:26:f1:ff:85:4b:f5:10:01:0d:df:2b:7a:50:
86:d3:52:b3:66:6f:d3:18:ba:36:7e:58:90:54:28:72:6c:71:
78:81:d1:06:95:39:7a:dd:06:12:b8:38:22:eb:ac:1b:c0:f3:
1a:0e:2c:09:dd:a9:b3:e4:7f:fd:5c:45:11:bb:39:1f:ae:87:
15:5b:1b:28:cf:cd:f5:56:3f:ac:30:a7:80:8b:b8:6a:01:4b:
c3:8b:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:55 2025 by rpki-client