Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: S+piZqRffivB6ENq/vzQ4tvCbkOCY4WYbnqZYt6CT0o=
Subject key identifier: 41:EC:44:4B:F9:96:4C:00:D5:43:D4:A5:BD:99:8D:B7:B8:DA:99:DD
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01974FA0DC4C6C0B2B25BD238F98C4A95381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 13:00:31 +0000
Manifest this update: Sun 08 Jun 2025 13:00:31 +0000
Manifest next update: Mon 09 Jun 2025 13:00:31 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: de2hnDKJdOaqm0sRzQgUcNwtnxdNWQmTn3p0Af65pMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:dc:4c:6c:0b:2b:25:bd:23:8f:98:c4:a9:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jun 8 13:00:31 2025 GMT
Not After : Jun 9 13:00:31 2025 GMT
Subject: CN=41ec444bf9964c00d543d4a5bd998db7b8da99dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:ed:6f:d5:59:63:68:a1:25:af:51:08:d5:
80:ef:6c:07:41:d1:29:a3:5d:e6:10:8e:47:ae:d1:
50:17:dd:b8:59:0d:70:0b:81:5b:03:48:52:2a:35:
27:a1:89:bc:8b:d3:58:c9:ad:0e:af:f2:dd:ab:d9:
58:bc:44:7e:87:c4:58:3b:35:82:4e:a0:47:46:b8:
14:3a:49:2c:8b:34:00:43:6e:5d:eb:f5:63:76:95:
2d:2c:67:89:c8:4c:96:d6:c2:46:05:63:5d:d7:63:
46:95:20:51:ba:0c:ed:47:f9:94:af:6f:ea:20:a4:
de:e3:c5:75:e4:e4:b0:a6:f4:fb:ae:f8:4f:b2:5b:
df:e7:4c:70:21:0b:e4:49:b0:7b:07:58:23:9c:3b:
91:a4:6c:e0:eb:8d:7c:b7:51:5b:62:03:07:af:02:
07:95:38:4e:3d:cd:12:0c:9b:74:ae:36:15:ca:7b:
2d:70:5b:53:91:55:62:5b:ff:95:53:43:26:ca:06:
9b:0d:aa:80:10:f2:4a:2d:cd:a1:a8:fe:f8:44:2b:
70:f4:9b:49:77:a3:43:59:d3:21:cb:f7:85:ad:81:
52:61:57:e8:30:bc:88:2a:20:1e:7b:71:85:b8:67:
8c:2a:40:d6:1c:85:1b:ad:f8:57:3f:f6:29:ae:95:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:44:4B:F9:96:4C:00:D5:43:D4:A5:BD:99:8D:B7:B8:DA:99:DD
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9c:78:d1:cc:ab:4f:69:39:3b:e4:6d:be:79:a7:a4:0f:f6:
c6:90:98:2a:ce:6d:95:fc:c3:0b:6c:90:5d:86:24:3e:a7:8e:
db:0f:59:67:19:23:17:01:d6:d0:91:91:26:d5:29:7a:af:cf:
82:fd:a5:05:3a:f7:fc:47:bc:cf:85:42:79:df:ce:41:35:0e:
9e:d8:70:e9:f6:c0:4f:03:d0:a8:f7:22:ee:ee:d4:cb:76:51:
2e:9a:4a:bb:73:a9:52:70:98:0c:a5:c7:e7:80:c0:10:6e:ed:
94:2e:86:80:c8:9b:78:58:db:34:30:91:6c:22:64:6b:34:14:
39:14:61:d2:07:c2:1e:b7:87:c6:c6:f0:00:55:6d:10:93:e9:
34:c5:9c:f0:5e:7a:b1:d3:fe:9a:06:10:9b:eb:3c:6e:6a:68:
54:42:63:06:6e:21:37:3b:99:96:e8:ba:2a:eb:9d:ab:18:e3:
37:df:c9:b5:4f:80:95:f6:fe:28:7f:51:2c:db:72:ab:cf:2f:
49:fa:79:b1:6e:1c:ee:a3:d3:9b:a2:77:f9:94:32:f6:15:39:
75:50:6b:03:d2:2c:e6:1f:2b:7e:48:e7:15:1e:61:45:d7:45:
54:c3:ae:b8:0c:97:f0:69:9a:75:b9:09:ce:d1:da:bc:4b:84:
6b:c2:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:40 2025 by rpki-client