Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: Ij7dn0nVXWuw8BUnmK68K938IXTLM0dycYdo7Bv+Iq0=
Subject key identifier: 2F:80:7A:17:BE:2C:07:55:6C:2F:B5:8F:12:78:B1:49:2D:96:76:67
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019895FFFE361944F1AA903CBAF5C7C13866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 22:00:38 +0000
Manifest this update: Sun 10 Aug 2025 22:00:38 +0000
Manifest next update: Mon 11 Aug 2025 22:00:38 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: Y9ebEyZ4MlMVce86tsNdhZGY7GBpejq9VgSdOZ+DNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:fe:36:19:44:f1:aa:90:3c:ba:f5:c7:c1:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Aug 10 22:00:38 2025 GMT
Not After : Aug 11 22:00:38 2025 GMT
Subject: CN=2f807a17be2c07556c2fb58f1278b1492d967667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:e3:28:c4:3d:66:e7:f1:21:35:7e:13:4f:
00:07:d5:18:f7:61:c8:0b:8f:65:9c:2e:dd:4a:51:
03:a8:fe:81:63:f3:3d:fb:9e:ab:90:03:58:27:b5:
2f:b3:d6:5f:24:2e:a6:70:97:f6:b6:2c:25:60:76:
e4:b5:60:d9:00:55:06:ed:f4:08:ac:4a:03:a5:2b:
a0:7c:66:e8:41:a3:2e:67:9b:08:b8:fd:4e:26:b8:
ef:94:35:d2:6f:18:8f:e2:2e:f4:55:92:ae:c9:ac:
77:73:db:49:97:b1:b5:b4:92:f3:60:2e:3e:f0:5d:
2f:d5:a1:8a:d0:92:2c:a5:cc:46:b5:bb:85:1a:51:
0a:2c:1f:3f:d7:49:68:a9:37:fb:6e:67:fb:54:45:
e1:b3:32:94:ca:ef:0d:87:f2:83:2f:cd:77:5c:b9:
65:c5:fe:b0:11:29:01:7c:91:ae:ed:69:77:ae:98:
33:2a:9d:27:1e:99:41:af:fc:8b:97:5e:51:68:79:
6c:49:2c:eb:a9:bb:32:95:4e:8c:45:83:93:0a:39:
d7:df:48:dc:24:ef:8d:86:35:9e:bf:5c:dc:e0:ae:
f9:d4:5b:c9:15:41:e2:df:c9:d9:13:fd:2c:56:16:
fe:fb:97:32:6a:27:c3:8c:85:59:14:a2:f6:12:e5:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:7A:17:BE:2C:07:55:6C:2F:B5:8F:12:78:B1:49:2D:96:76:67
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:93:fe:79:cc:08:bb:e0:fc:1b:8f:9e:0b:e6:7b:7a:15:
c5:c4:0a:70:b9:83:c8:51:16:a1:88:d5:2b:fa:6c:20:25:46:
77:7d:4b:e8:cb:16:9f:13:42:9b:9d:6a:a5:bd:f3:e7:8c:7a:
cb:26:9b:06:37:f9:24:3d:c0:24:15:2c:ee:0f:3e:be:ec:d1:
0b:66:c1:e1:b0:b9:e1:fa:2c:14:a0:17:ce:87:df:ce:b0:40:
db:23:31:f6:24:e7:69:e0:bf:ab:06:39:bb:b2:78:b5:5c:45:
4c:e8:be:e3:25:ad:d1:0a:7d:d4:41:5c:7b:57:cc:04:c0:73:
15:06:85:0b:97:c5:f3:66:35:c7:66:e1:d3:99:f8:19:58:1f:
91:7e:d5:04:15:99:b4:88:5e:9f:2d:21:5c:85:82:b5:99:b1:
7b:f5:b7:cb:d3:2c:1d:10:9c:a3:e0:d5:d8:e9:6d:6c:85:6a:
6e:3e:17:2d:f3:15:9a:58:13:ca:33:19:0c:3c:36:2f:5e:2f:
ac:eb:4f:ee:2b:a4:c3:bf:9e:b7:d3:72:83:1a:43:d4:96:85:
b1:38:fe:e8:2e:3a:19:95:45:64:29:2c:3b:c6:cf:53:a9:b1:
be:af:23:bd:3e:cd:23:ee:d5:eb:e0:3c:a9:be:d7:c3:12:c4:
46:f1:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:24 2025 by rpki-client