Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: uGBoj3mIUCHDEZMF1tD3VGjPoOACTY+K/xlbZhMf6do=
Subject key identifier: CF:A8:A4:55:F1:11:D7:E0:FD:7F:B7:BE:47:DF:3E:FC:E3:3A:71:77
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019A1CBF312314524ED14357C57DC6F6EC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 04EC
Signing time: Sat 25 Oct 2025 19:01:23 +0000
Manifest this update: Sat 25 Oct 2025 19:01:23 +0000
Manifest next update: Sun 26 Oct 2025 19:01:23 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: YupJGNs/oL2bj0w+D0MeyOacXpSd7urSKSrJ9zF1Hww=)
2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:31:23:14:52:4e:d1:43:57:c5:7d:c6:f6:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Oct 25 19:01:23 2025 GMT
Not After : Oct 26 19:01:23 2025 GMT
Subject: CN=cfa8a455f111d7e0fd7fb7be47df3efce33a7177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:3b:b6:56:4e:d1:21:5f:b7:d4:76:a1:b7:
59:58:82:93:be:8e:9d:9c:2c:4f:9b:97:fe:a6:96:
72:9a:58:58:d6:99:06:00:ee:67:33:1d:56:c7:ef:
f1:25:18:c4:b5:5a:e6:32:14:fa:00:d3:e7:6b:99:
f4:df:1f:3b:4d:62:2f:d0:13:7b:a0:82:3c:ed:ca:
4f:6d:f7:d0:d4:71:d7:8a:c1:f7:d7:22:3e:5f:4c:
1b:24:32:af:a2:aa:a6:0f:b8:20:45:fc:ac:7b:73:
a2:bf:ae:43:fb:b4:c8:f2:df:3d:d0:b7:1c:fc:a9:
bc:89:8e:2a:10:75:11:e1:7c:83:41:dc:85:63:a0:
66:62:1c:42:ee:fa:f4:ec:2e:0c:41:4a:17:1d:f7:
00:3f:58:f4:d9:c9:69:15:96:83:8f:c4:ea:bc:d3:
09:49:50:0f:ae:3f:e1:e8:bd:68:71:b0:c4:f1:4b:
d1:4b:d9:f6:5d:58:23:4f:df:bb:c2:3d:18:b0:69:
43:b3:18:9c:f2:4f:02:5d:25:75:77:6a:0c:c3:ad:
12:9e:4d:2b:ee:4d:5d:e9:f8:88:9d:1c:1d:b2:2a:
84:bc:49:7f:d8:e3:55:5d:60:aa:b2:34:4c:45:39:
7b:9d:e1:a1:48:78:63:a4:ee:22:86:a4:47:ea:58:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:A4:55:F1:11:D7:E0:FD:7F:B7:BE:47:DF:3E:FC:E3:3A:71:77
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2c:3d:c0:39:d4:c4:2e:e4:96:dc:45:24:06:6a:5f:cf:71:
c1:d1:45:66:71:25:1c:a9:bc:40:15:ba:f6:56:77:48:6b:49:
12:0a:2c:d5:13:32:47:e3:db:3d:01:2a:f2:ae:68:71:87:5b:
43:4d:ef:75:82:b9:75:83:84:0e:3d:8a:e4:39:ce:16:af:a4:
0a:ae:04:13:25:79:6e:a9:7d:df:dc:ca:ef:76:03:1e:20:d2:
56:98:18:df:7a:3c:b5:e1:1a:b0:f0:8a:58:9d:fa:90:0c:2c:
1c:32:94:f9:90:25:9b:25:b9:cd:eb:e7:7e:9e:8c:45:29:ac:
e2:79:78:09:d9:55:42:12:0b:02:f4:2d:eb:d8:50:fe:b2:66:
9d:2e:d4:a3:34:9e:e0:31:b7:5a:21:e5:1b:c7:e4:f9:07:eb:
95:e5:9c:22:b2:32:89:8b:1b:04:e5:40:0a:6b:ed:54:06:2e:
87:3b:aa:44:c9:64:d1:85:72:f9:61:7c:0f:8f:81:80:6a:30:
11:c1:bc:1e:d9:d3:8f:ad:c4:37:dd:c2:42:d4:f6:e7:84:66:
51:81:ed:d9:45:7f:65:bc:ca:e1:bc:87:be:c4:db:06:66:6e:
90:6d:16:af:6d:fe:87:af:41:c5:14:e1:24:19:a0:00:51:87:
5c:06:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:36:30 2025 by rpki-client