
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: FCnpNxa6FTnYbGToDiyQsB0IENni+Tqz8Iwo8leT8BA=
Subject key identifier: 1A:84:11:64:72:AE:64:0F:F3:92:1C:48:83:3C:26:9D:6E:C7:E1:83
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 01988B7CBFED4842288CFFA2E03156BAE780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 21:01:05 +0000
Manifest this update: Fri 08 Aug 2025 21:01:05 +0000
Manifest next update: Sat 09 Aug 2025 21:01:05 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: aX45OLHqzkXUSAMcFlQO0NN7aqpWNmLNSO3Ga4/NnUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:bf:ed:48:42:28:8c:ff:a2:e0:31:56:ba:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Aug 8 21:01:05 2025 GMT
Not After : Aug 9 21:01:05 2025 GMT
Subject: CN=1a84116472ae640ff3921c48833c269d6ec7e183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:c8:ce:ce:be:eb:7f:47:98:94:a4:ec:57:
5e:74:5e:72:aa:f5:6d:3f:0f:a9:e3:67:90:cb:92:
dd:f1:10:e7:31:e2:79:85:87:19:c4:08:59:6c:79:
74:b4:06:3e:b9:1c:74:2c:cd:91:bd:2a:81:e5:07:
24:bc:c4:52:69:31:9f:0a:cd:fb:99:fc:b9:ae:fd:
f3:bb:18:b6:88:a3:c9:74:17:1a:10:10:1b:50:62:
07:2e:31:43:89:84:70:87:89:ba:66:cc:7d:22:3b:
42:28:52:0f:f2:c9:8b:cd:31:51:95:eb:4b:d4:e7:
3a:d7:a9:58:58:e5:7f:c7:96:57:e7:e9:8c:eb:bf:
fd:29:72:b3:02:7b:ac:40:5a:15:11:46:19:13:66:
d7:64:32:c7:12:eb:7b:47:d1:89:14:7a:6f:f9:8d:
1d:93:ea:ff:03:0f:fd:16:6d:65:c7:6d:83:d6:14:
b4:4e:ac:3d:7e:bf:3b:1e:72:93:3e:20:ec:0c:64:
2c:57:aa:d0:5b:18:b0:f7:0a:31:1c:7e:62:9f:1a:
db:f0:46:06:3d:65:52:08:7e:ff:24:9f:f8:df:a1:
ab:6d:45:42:bb:5c:58:1a:b8:cb:42:aa:a7:15:d9:
5b:8b:eb:a0:f2:96:94:f6:b1:1f:7e:5a:ec:a8:93:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:84:11:64:72:AE:64:0F:F3:92:1C:48:83:3C:26:9D:6E:C7:E1:83
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e9:f8:10:3f:74:be:f4:a4:9b:2e:ce:dd:cd:0a:f2:96:7c:
96:47:d3:88:99:2d:38:2f:f3:88:10:fe:a6:74:6a:16:51:dd:
d1:f9:8c:d3:2b:d9:1d:48:4e:74:84:13:8a:7e:f3:73:90:83:
e6:58:ff:61:ea:95:09:52:03:81:fd:b9:b1:10:0c:4b:27:3a:
b5:b0:c6:2f:64:c5:ff:eb:b7:3d:00:4a:1a:8f:88:81:bf:4e:
40:71:17:f1:4b:32:57:d5:19:2c:70:16:6d:c0:1e:8d:91:e4:
29:e1:59:6d:29:90:4c:a6:88:dc:1c:d4:7d:d6:5e:87:5d:ed:
ec:fb:c8:60:0a:d0:99:b5:c8:e8:c1:f2:93:af:90:3f:d4:2a:
32:df:40:06:c0:d2:c3:7b:71:51:a1:c1:38:77:3f:66:30:f9:
69:d8:57:c1:87:c2:0d:86:6a:24:90:1b:73:cb:d0:eb:79:28:
4c:4e:6a:5a:06:24:bc:a1:78:f7:c5:a8:95:c3:4b:cc:a3:e0:
de:fb:0b:a1:80:41:97:a2:2a:23:55:43:56:34:85:a6:8d:63:
02:ac:88:0b:5d:ef:a1:6e:5c:68:7b:63:03:b2:da:1b:83:51:
ef:a5:a3:f7:1b:f5:29:6b:6c:86:ee:52:d4:ba:92:3d:0c:97:
45:2c:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:18 2025 by rpki-client