Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: idBIae/9jjfJmpAWBdyRqVaA66a1B5vSO3KVctBCO24=
Subject key identifier: 83:7E:EE:5C:E7:91:B7:F6:75:0E:12:1B:C7:5E:9F:A1:C8:4F:18:7A
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019892C92DA11E6A20F017ACE268ACDFCDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0420
Signing time: Sun 10 Aug 2025 07:01:54 +0000
Manifest this update: Sun 10 Aug 2025 07:01:54 +0000
Manifest next update: Mon 11 Aug 2025 07:01:54 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: 9WkBZc8BFNiYnt+MsrbFEI/Sjxc/0B17mMSjfnKvcq0=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:2d:a1:1e:6a:20:f0:17:ac:e2:68:ac:df:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Aug 10 07:01:54 2025 GMT
Not After : Aug 11 07:01:54 2025 GMT
Subject: CN=837eee5ce791b7f6750e121bc75e9fa1c84f187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:fd:1e:6c:fb:21:9e:3d:48:81:9d:cb:74:
50:b2:dc:9b:4c:71:00:77:a6:f2:11:5d:b1:00:6f:
96:e3:a2:06:18:d1:c3:4f:1e:a7:1a:a3:70:a7:e7:
d4:e6:31:3d:63:d4:98:6f:76:e6:4d:fe:fb:dc:9f:
37:9e:51:2f:2f:af:d1:90:42:7b:b5:92:5e:69:61:
68:29:b2:81:ca:02:ba:2f:4e:d4:53:ce:07:9e:e8:
d0:57:41:29:f2:46:4f:65:6b:05:77:19:19:48:5a:
ec:9d:d0:d0:9f:2e:e0:58:71:73:23:85:31:db:2c:
ac:6e:97:6f:00:53:46:02:73:5e:25:c3:ff:57:e6:
6f:80:c4:4f:38:a9:80:b5:4f:1f:1f:fc:9d:99:44:
f6:4f:da:de:73:6b:09:a4:bc:12:11:2c:43:71:a8:
5b:93:c7:cf:73:7e:b9:34:74:da:fd:48:3c:2a:c8:
0f:ff:0f:36:a7:c7:49:bc:4a:60:1d:df:a2:80:96:
70:ec:00:c8:6e:40:ae:03:a7:9b:fc:0e:84:99:dd:
3e:b1:80:0f:ea:95:7c:dd:ea:3d:98:09:d5:b9:4f:
e2:b6:bb:59:0e:74:b4:ef:67:c2:d8:ed:9e:cc:a3:
71:25:f0:76:31:96:cc:2e:87:18:b1:d5:1a:ea:a8:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:EE:5C:E7:91:B7:F6:75:0E:12:1B:C7:5E:9F:A1:C8:4F:18:7A
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:f6:e4:30:89:a8:c5:bf:1f:8f:28:8a:ad:61:e4:ad:94:
80:ef:16:56:53:62:31:b8:cc:2f:42:05:74:52:9e:11:a4:a3:
1a:22:a9:e6:69:76:d7:9c:81:ad:60:2f:28:79:0d:07:38:4d:
e1:92:92:4b:fc:c2:80:97:5f:25:42:07:fe:ba:aa:22:e8:20:
a5:d8:ef:f1:b9:27:42:ab:af:c1:36:11:bc:e7:99:8d:97:bf:
42:0d:c9:73:38:ab:cf:50:22:f2:e2:98:ab:e7:f7:7e:fd:43:
2b:47:d6:d5:9d:a6:4e:dc:8d:49:a6:b8:3f:19:e2:0b:11:af:
85:f3:05:b6:b5:0f:3b:d5:17:c3:cd:83:6d:dc:dd:ca:d0:e4:
8c:53:23:b7:77:9d:d2:5a:7f:b6:e8:2d:13:7a:1e:95:5f:53:
02:4e:77:ba:3b:3c:4b:23:e5:9b:cc:07:9a:97:fa:23:8a:b5:
5d:e3:f2:d2:8c:6c:7d:f3:a3:32:f9:cf:16:2f:8b:35:9b:32:
03:31:9f:97:0d:a5:9b:a1:95:b4:83:95:c9:ed:3b:7b:6f:25:
07:52:15:61:47:84:29:7a:81:49:ee:b5:c8:ae:d6:71:b4:48:
a3:7c:ee:a0:25:81:b1:a6:b1:23:74:a2:4e:16:13:1c:76:36:
ec:9d:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:28 2025 by rpki-client