Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: xq7tL5hrynKQyu7Y7A9n3+YXQWvZR2gw86cq4QJ7K8s=
Subject key identifier: E4:25:40:5E:26:0C:68:DD:8D:61:13:BE:ED:89:67:30:9C:3A:C4:F7
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01984C9D5336B7F49735C7786752E35F06A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 16:00:35 +0000
Manifest this update: Sun 27 Jul 2025 16:00:35 +0000
Manifest next update: Mon 28 Jul 2025 16:00:35 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: OHLVtkQplHpweVnqpeJC2JZIfAzQReta3Mtb6yTuoTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:53:36:b7:f4:97:35:c7:78:67:52:e3:5f:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jul 27 16:00:35 2025 GMT
Not After : Jul 28 16:00:35 2025 GMT
Subject: CN=e425405e260c68dd8d6113beed8967309c3ac4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:57:7a:e0:2f:50:fc:f8:86:5e:39:2e:2b:
60:bb:1a:0a:a1:0f:ca:8b:22:84:c0:f6:0f:f4:50:
8c:1d:08:c7:43:78:fb:4d:a8:23:e5:e1:eb:d1:65:
22:26:58:55:13:c8:5f:50:b9:18:26:ec:9c:93:ed:
50:5a:2a:9e:91:cc:2c:a6:d4:61:45:6e:41:dd:d7:
c2:d1:99:0e:14:af:9a:f2:fb:dc:8a:89:d6:e3:b5:
d0:47:d5:5c:5c:99:2c:46:ed:6c:80:7f:e3:5e:00:
69:46:7d:96:e9:b3:75:26:c9:00:d7:99:38:e1:4b:
7b:f4:f5:ec:9f:a0:65:b1:39:82:b0:a8:90:57:eb:
c3:88:dd:d7:d7:46:f4:0a:40:c9:04:bc:1c:7a:99:
8d:8b:8f:c2:06:b0:b7:71:57:e0:e6:54:5b:73:b8:
a5:d5:1f:78:ce:ed:c1:d8:81:54:89:f0:ee:02:34:
64:08:f5:59:56:2f:f4:b2:94:15:70:b5:9d:6f:0b:
d1:33:53:23:d5:e0:ae:f1:1b:df:ba:42:32:ef:64:
f3:04:0d:82:7b:0b:2e:f8:9b:dd:89:16:35:be:a5:
3c:f3:a8:77:e1:38:da:f0:e5:46:38:ac:14:01:02:
04:e0:45:86:b9:23:79:b8:ad:33:4e:17:a6:f8:dd:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:40:5E:26:0C:68:DD:8D:61:13:BE:ED:89:67:30:9C:3A:C4:F7
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b9:f7:79:40:8c:81:59:f4:92:f4:9f:df:9b:7f:2f:e7:c9:
33:d9:2e:7e:b7:be:5e:f4:a0:ec:fc:0e:33:dc:45:a7:2b:50:
77:a1:7d:62:11:4e:00:91:bd:26:60:08:fb:d8:5f:e1:34:f5:
1f:80:f7:77:21:dc:f0:3a:ab:ec:5f:d1:dd:1b:f1:7f:2e:9f:
d0:42:2f:c7:a2:da:9a:63:83:34:73:b7:2b:f8:c3:80:4e:cc:
32:46:6a:19:1a:ba:2c:d7:53:5c:23:f6:44:6f:87:0b:54:a8:
77:b3:77:44:c7:c0:37:48:f5:a6:9e:85:89:1c:b7:e6:89:21:
25:3c:81:b0:25:65:7e:b1:8b:70:78:43:7a:f5:fb:22:8e:dc:
71:ba:12:78:f9:88:b1:68:1b:8f:a2:94:a9:97:30:80:ea:e6:
04:6e:07:6a:d5:40:a9:57:4a:85:17:0d:c2:86:f8:96:47:35:
b1:6c:74:11:b7:4e:17:44:24:86:ed:81:05:b6:f6:f8:ea:af:
53:93:76:56:9f:f7:ba:13:73:ca:86:c0:15:34:dd:8c:96:6c:
e3:46:da:83:a6:de:36:2e:87:51:b0:3a:c1:3a:4f:29:f8:21:
9b:cd:2e:1b:3e:ee:6d:6a:ee:04:19:16:5d:d2:0c:dd:f2:b7:
89:3c:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:06:23 2025 by rpki-client