Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: vtDphF4JR/0v9Axcr9ah70Iul448AS0ncPeGUZSKvf4=
Subject key identifier: 7E:29:21:CD:00:E9:FF:04:B1:52:EC:D5:F2:90:B3:51:B9:E9:6E:FA
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019A4E4FD47884D658EEAF3229334ECE3AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: fYo43N4MwPAa0YvnxqnowRa63hLQa+eHZ3Otwf4QdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d4:78:84:d6:58:ee:af:32:29:33:4e:ce:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=7e2921cd00e9ff04b152ecd5f290b351b9e96efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:f1:e6:67:5d:89:95:fe:c4:ce:d5:f7:e8:
80:6f:a5:3f:b5:36:80:63:1e:18:be:81:fc:ac:ca:
a1:41:2d:13:57:a9:90:94:d8:de:5e:eb:19:21:13:
e3:5d:fd:1f:f9:bb:31:ef:a6:bc:40:74:ce:56:94:
92:39:37:08:78:c7:1b:36:92:9e:17:65:78:f5:04:
10:44:47:19:4c:a4:23:cd:9f:6f:c7:cd:04:35:f1:
e8:c4:11:7f:2b:33:25:6e:59:a6:be:f5:4b:4e:80:
95:0a:36:b9:f1:82:9f:a6:51:45:1a:c3:dd:8a:d1:
41:8e:c4:b4:bc:6e:57:bb:1b:6d:22:2e:d4:ba:22:
aa:d1:92:05:ce:5f:da:45:b9:9f:72:f4:d0:6f:e4:
37:58:6e:e0:87:cc:81:38:98:69:77:44:2e:7e:15:
15:dc:5d:2b:93:48:0b:b3:cc:21:95:e3:16:08:c0:
62:08:45:9f:93:79:1d:d7:e0:f1:06:bb:98:42:fd:
6a:6f:b2:fe:42:9e:ea:bd:90:f8:2f:17:8a:bc:c7:
46:2c:ef:3b:09:e9:69:33:22:2f:ac:80:5b:24:23:
d9:36:cb:81:f1:38:16:ba:06:d6:15:78:c1:cc:07:
35:7d:c8:5c:22:e0:a8:35:34:82:1f:b9:d8:ff:d6:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:21:CD:00:E9:FF:04:B1:52:EC:D5:F2:90:B3:51:B9:E9:6E:FA
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:5b:38:28:1d:5d:b7:3b:3d:7d:8e:db:de:b0:b5:9c:7d:
fc:b5:fd:e8:16:19:41:55:22:90:e8:18:2c:dd:49:d2:61:cf:
23:9f:e7:13:b0:3a:45:a5:18:c2:4d:57:ff:b5:f6:b1:f3:eb:
55:96:a0:30:85:47:b1:d2:09:20:fa:3d:ec:ae:c3:c2:64:6e:
cd:53:1d:b2:1e:19:6f:4d:e9:37:57:76:32:4f:81:47:00:e3:
e8:4c:d1:1c:5a:68:5e:5c:34:5e:4f:7c:90:ae:b8:b1:a7:54:
3c:8a:72:9e:86:5d:29:79:38:1b:25:b6:ef:15:d3:92:86:8c:
2f:20:f4:f4:6b:ae:6d:2f:a8:b5:b7:5c:6d:83:27:24:e4:c9:
d1:91:9f:d0:5a:17:0e:e5:61:2a:a8:6a:97:ea:fc:d6:29:fa:
fd:45:19:36:50:be:1d:b8:ae:c1:f5:6a:77:fd:f7:85:7f:2b:
a9:47:fc:aa:cb:cf:82:2d:dd:f5:ce:a4:b9:1f:56:34:56:7e:
a9:06:3c:97:1a:51:43:86:b8:64:da:23:ba:31:c5:e2:2c:dd:
1c:99:7c:92:e7:6f:05:e5:29:49:2d:9d:04:48:5d:90:91:b6:
cc:64:e2:a7:f6:5e:c4:54:d2:74:4d:cb:b9:09:79:25:80:77:
1f:f7:55:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT9R4hNZY7q8yKTNOzjqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjUxMTA0MTAwMDQ1WhcNMjUxMTA1MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZTI5MjFjZDAwZTlmZjA0YjE1MmVjZDVmMjkwYjM1MWI5ZTk2ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuHx5mddiZX+xM7V9+iAb6U/tTaA
Yx4YvoH8rMqhQS0TV6mQlNjeXusZIRPjXf0f+bsx76a8QHTOVpSSOTcIeMcbNpKe
F2V49QQQREcZTKQjzZ9vx80ENfHoxBF/KzMlblmmvvVLToCVCja58YKfplFFGsPd
itFBjsS0vG5XuxttIi7UuiKq0ZIFzl/aRbmfcvTQb+Q3WG7gh8yBOJhpd0QufhUV
3F0rk0gLs8whleMWCMBiCEWfk3kd1+DxBruYQv1qb7L+Qp7qvZD4LxeKvMdGLO87
CelpMyIvrIBbJCPZNsuB8TgWugbWFXjBzAc1fchcIuCoNTSCH7nY/9aYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4pIc0A6f8EsVLs1fKQs1G56W76MB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaFbOCgd
Xbc7PX2O296wtZx9/LX96BYZQVUikOgYLN1J0mHPI5/nE7A6RaUYwk1X/7X2sfPr
VZagMIVHsdIJIPo97K7DwmRuzVMdsh4Zb03pN1d2Mk+BRwDj6EzRHFpoXlw0Xk98
kK64sadUPIpynoZdKXk4GyW27xXTkoaMLyD09GuubS+otbdcbYMnJOTJ0ZGf0FoX
DuVhKqhql+r81in6/UUZNlC+HbiuwfVqd/33hX8rqUf8qsvPgi3d9c6kuR9WNFZ+
qQY8lxpRQ4a4ZNojujHF4izdHJl8kudvBeUpSS2dBEhdkJG2zGTip/ZexFTSdE3L
uQl5JYB3H/dVXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:21 2025 by rpki-client