Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: 6QTxYjCi1tPK0Gd3oIUs3/P86Lzp2+gnGyy/O5+bnV8=
Subject key identifier: F9:4F:8B:25:68:5D:1E:5C:33:9F:0C:38:78:BB:08:FE:C2:04:84:90
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 019771887E143DDB9F67918D23520D0F8138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 03:00:59 +0000
Manifest this update: Sun 15 Jun 2025 03:00:59 +0000
Manifest next update: Mon 16 Jun 2025 03:00:59 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: eis3JFbcMbbcpP1u6x6VdNwb48GT2HJIIWs+IVqo/wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:7e:14:3d:db:9f:67:91:8d:23:52:0d:0f:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Jun 15 03:00:59 2025 GMT
Not After : Jun 16 03:00:59 2025 GMT
Subject: CN=f94f8b25685d1e5c339f0c3878bb08fec2048490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:b4:00:b3:08:ee:25:0b:ba:1e:a0:42:d8:
19:54:6b:24:c3:20:f5:fa:4d:3b:9c:7d:4c:a9:2f:
ca:5c:99:59:d4:68:35:e6:a7:9f:19:2b:d8:77:be:
8f:4a:b4:d1:b8:4e:2a:ea:f6:6d:66:5b:c9:29:a7:
00:bf:76:fb:ba:96:ed:45:86:39:6f:ca:44:98:d0:
68:68:fc:2d:3b:7a:a7:28:e2:68:67:46:75:9f:78:
64:81:ff:3d:eb:a3:73:b7:01:de:11:26:e7:eb:8a:
b7:47:a8:a8:fe:20:c4:98:34:57:d9:72:bb:6b:cf:
1e:0d:b2:35:8e:52:2b:ed:f9:0a:21:26:0a:b0:c2:
f8:1e:b9:41:2f:02:bc:f7:a5:79:eb:f9:69:76:0a:
db:27:94:6d:61:e2:4f:a6:45:62:ae:75:a5:de:2d:
aa:0f:1c:14:64:d6:db:60:ff:f8:8b:ad:71:0d:2d:
95:93:4f:73:4a:2f:c7:e2:a5:22:7f:69:53:10:11:
22:5e:92:b9:a5:5b:48:c2:b2:1a:a2:50:a5:41:45:
e4:17:6a:87:a6:4f:89:88:94:9a:bb:00:1b:ce:ea:
a0:e8:88:8e:d5:86:72:6a:2f:9e:0c:cb:1d:cf:6d:
a3:1e:2a:3d:1b:b9:45:35:62:0b:87:2b:be:23:f7:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:8B:25:68:5D:1E:5C:33:9F:0C:38:78:BB:08:FE:C2:04:84:90
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:90:5c:89:59:f0:c6:6b:83:ab:fa:f8:dc:33:e7:8e:26:96:
f9:b0:90:87:4b:8b:49:50:db:25:6a:aa:34:15:14:5a:e3:74:
e3:8e:c2:4a:1b:16:59:21:bc:11:72:0e:e4:3e:b5:7d:a0:d9:
db:8d:76:bb:84:1c:c1:5e:cd:7a:9a:7e:0a:8e:fd:54:8d:01:
76:9a:6c:60:20:03:9a:cd:4a:3d:6b:f1:1d:0e:1e:55:2f:4f:
a9:be:4e:3a:74:5c:bd:04:3d:9e:e2:43:af:95:c6:e1:01:0c:
35:d5:5e:c9:d4:8d:ed:2b:5a:25:8e:7d:61:96:51:37:bc:1e:
62:45:71:a8:59:45:fc:87:09:9a:69:d5:30:06:b8:82:3d:be:
21:6e:2b:b4:71:3e:66:68:6c:39:a5:0b:71:bf:f6:8d:a6:8c:
e8:f5:bf:b7:bc:ef:de:c4:0a:34:de:01:98:c9:ab:c4:c9:ce:
a9:8e:ad:5c:35:b2:22:30:f9:cd:d4:be:5e:26:e7:4b:8f:35:
54:59:26:5f:aa:de:20:3f:3e:8a:2c:5e:06:50:18:ce:b8:a3:
9d:50:42:05:8e:1c:63:56:cf:4f:a9:33:3f:f6:37:56:a4:76:
e9:fc:a9:21:07:17:a5:76:af:73:b9:8e:37:d4:ff:b1:e7:8a:
c3:52:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:14:57 2025 by rpki-client