Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: f/iKMroVP9NRllr3vgR8qjKsr5UIK2+NcPa7/TFsmQU=
Subject key identifier: 02:6A:93:18:B1:50:01:FC:B0:5C:45:3D:3B:8F:EE:51:E2:0F:2B:5B
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01976C98797EE110BF6D6B4EE91C01A742F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 04:00:20 +0000
Manifest this update: Sat 14 Jun 2025 04:00:20 +0000
Manifest next update: Sun 15 Jun 2025 04:00:20 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: MizBGY4Jrd53RQ9TsG+6rCxyDqDWd4pN4s5DaHiReR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:79:7e:e1:10:bf:6d:6b:4e:e9:1c:01:a7:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jun 14 04:00:20 2025 GMT
Not After : Jun 15 04:00:20 2025 GMT
Subject: CN=026a9318b15001fcb05c453d3b8fee51e20f2b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:34:f6:0d:b9:c5:0a:72:2c:2d:08:61:e9:
86:f0:90:01:d8:f3:2f:bc:e5:9e:4e:bd:74:fd:c0:
92:e8:00:73:e5:ad:35:5f:d6:de:8e:dc:b6:68:5a:
8e:c5:31:c9:ee:0d:63:15:8b:a6:5a:49:9c:92:82:
07:92:53:b4:b1:5d:6e:99:df:c4:a3:84:8d:b3:2d:
ae:9c:7d:42:7b:30:2f:73:1b:b0:f0:f7:2e:ce:91:
67:b2:8e:5a:96:65:1d:1c:83:5d:bb:7f:24:79:dc:
3d:51:59:db:d7:95:52:e4:4e:a3:f1:76:33:0f:f5:
3c:29:79:e7:a7:b0:56:23:62:66:ff:0b:89:3b:53:
18:b3:58:8c:6d:82:56:72:9e:68:a4:12:a5:33:70:
f1:3e:14:61:37:5a:12:bf:85:2e:84:07:f7:44:23:
25:ae:49:81:84:5f:5c:13:4d:21:d8:b2:62:30:b7:
0f:9d:a9:6d:42:f9:f8:ad:60:f1:af:7c:6f:cd:66:
44:f6:17:d1:92:7c:b1:17:3a:fa:af:a9:f5:2d:19:
08:92:e2:af:24:b4:06:df:6f:63:99:a7:5d:54:7f:
6d:0c:99:7e:06:14:eb:1d:a4:ae:0a:81:45:f9:ba:
19:ea:76:24:cc:ef:d9:9e:d8:42:81:6c:a3:92:c5:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:93:18:B1:50:01:FC:B0:5C:45:3D:3B:8F:EE:51:E2:0F:2B:5B
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:b7:88:c0:18:87:4d:89:4f:f8:ba:3e:32:f9:08:7c:7c:
a5:8e:04:49:32:39:e9:eb:3f:7c:0c:9c:e0:0f:a0:09:c9:32:
0d:5a:13:76:b5:ed:4f:a0:da:fe:4d:ca:db:c7:d6:de:82:da:
81:20:af:86:df:50:56:dd:2f:85:e9:9e:a0:da:2f:01:fc:5c:
b3:91:f9:cf:ee:45:16:39:e0:5d:9a:b2:f4:99:f7:6b:ed:58:
f9:63:c2:94:03:15:f9:91:ca:16:02:11:49:36:08:e5:2b:b2:
0e:f0:a4:1d:c7:0e:dc:2a:48:10:ae:00:47:55:99:34:a4:06:
ea:17:8f:a4:7b:43:9f:83:d0:7f:00:56:f5:3c:cf:d3:20:3a:
e2:8b:76:25:88:7b:e5:ee:5d:e5:82:b3:d4:4e:5c:45:de:3a:
96:97:2e:e7:9a:db:c0:f5:21:69:b5:4f:9b:ab:54:37:77:ba:
d6:41:63:d7:6b:0f:6b:72:f5:09:7c:06:36:f1:9a:13:72:e5:
21:11:cf:48:11:26:40:b2:04:df:d5:1d:da:a5:21:e4:a6:e4:
43:25:d3:9b:89:e4:32:52:0d:08:55:ca:73:b7:47:bd:d0:58:
ea:19:5b:3f:fc:21:96:f7:b2:98:b7:0f:5c:6f:d5:78:bb:ee:
64:94:ea:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmHl+4RC/bWtO6RwBp0L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjUwNjE0MDQwMDIwWhcNMjUwNjE1MDQwMDIwWjAzMTEwLwYDVQQD
EygwMjZhOTMxOGIxNTAwMWZjYjA1YzQ1M2QzYjhmZWU1MWUyMGYyYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GA09g25xQpyLC0IYemG8JAB2PMv
vOWeTr10/cCS6ABz5a01X9bejty2aFqOxTHJ7g1jFYumWkmckoIHklO0sV1umd/E
o4SNsy2unH1CezAvcxuw8PcuzpFnso5almUdHINdu38kedw9UVnb15VS5E6j8XYz
D/U8KXnnp7BWI2Jm/wuJO1MYs1iMbYJWcp5opBKlM3DxPhRhN1oSv4UuhAf3RCMl
rkmBhF9cE00h2LJiMLcPnaltQvn4rWDxr3xvzWZE9hfRknyxFzr6r6n1LRkIkuKv
JLQG329jmaddVH9tDJl+BhTrHaSuCoFF+boZ6nYkzO/ZnthCgWyjksWQmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJqkxixUAH8sFxFPTuP7lHiDytbMB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHS3iMAY
h02JT/i6PjL5CHx8pY4ESTI56es/fAyc4A+gCckyDVoTdrXtT6Da/k3K28fW3oLa
gSCvht9QVt0vhemeoNovAfxcs5H5z+5FFjngXZqy9Jn3a+1Y+WPClAMV+ZHKFgIR
STYI5SuyDvCkHccO3CpIEK4AR1WZNKQG6hePpHtDn4PQfwBW9TzP0yA64ot2JYh7
5e5d5YKz1E5cRd46lpcu55rbwPUhabVPm6tUN3e61kFj12sPa3L1CXwGNvGaE3Ll
IRHPSBEmQLIE39Ud2qUh5KbkQyXTm4nkMlINCFXKc7dHvdBY6hlbP/whlveymLcP
XG/VeLvuZJTqWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:34:45 2025 by rpki-client