Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: 6benQAB41emclWAxwMQBKajzA7LJvdPj3b2tmxGfPJU=
Subject key identifier: 13:74:BD:F6:18:97:71:CC:FE:07:E5:FA:C3:B1:8C:F2:C4:FF:CD:43
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01993A26DB3EBE40CA9AF2C8ECD64FAABCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 19:00:48 +0000
Manifest this update: Thu 11 Sep 2025 19:00:48 +0000
Manifest next update: Fri 12 Sep 2025 19:00:48 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: 8kagfLvfLI6MWKebTQ4Eh9k3Sh2vMn+FE4Rm+AX+FXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:26:db:3e:be:40:ca:9a:f2:c8:ec:d6:4f:aa:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Sep 11 19:00:48 2025 GMT
Not After : Sep 12 19:00:48 2025 GMT
Subject: CN=1374bdf6189771ccfe07e5fac3b18cf2c4ffcd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:de:e3:27:e4:80:32:4b:db:e0:06:15:ca:
3b:da:70:56:26:65:5c:6b:7a:7c:e9:3d:9b:ec:c7:
19:64:b3:71:68:22:95:66:15:54:f6:96:b7:66:1e:
55:29:3f:74:52:a2:2c:22:9e:e5:85:1e:ff:cd:78:
cf:a5:d9:ef:90:7a:19:48:22:23:96:e6:14:fb:9c:
c5:d4:ac:24:6a:88:87:f2:ac:b8:9c:37:92:33:69:
e9:ae:3b:b3:e4:0f:6e:65:81:cd:37:47:40:80:d3:
a6:0d:22:96:0a:9f:9a:25:2f:0b:77:fb:c6:09:60:
d2:bf:45:0f:6b:2b:47:8f:3a:e7:4e:d3:e2:52:3c:
ac:dd:83:ed:ae:cb:bf:69:9b:9c:b9:44:35:cb:c4:
cf:b0:42:cd:aa:75:d6:83:df:57:f8:c5:de:fa:46:
0b:63:3d:b3:0a:27:47:0a:39:1c:76:93:ef:31:ba:
75:b2:bd:72:7c:83:a7:bd:0f:1c:93:be:e2:a2:93:
54:f8:59:f2:0d:0a:8f:24:5e:2e:af:f9:4f:a3:2a:
64:67:87:53:d1:45:e5:4e:59:29:5a:e4:1a:27:34:
bf:a5:18:bb:13:73:dd:b2:35:2e:af:2b:fa:e7:19:
9a:89:4f:b6:69:8f:1b:b7:30:6f:e5:87:5e:8a:c4:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:BD:F6:18:97:71:CC:FE:07:E5:FA:C3:B1:8C:F2:C4:FF:CD:43
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4e:63:12:62:b1:f1:2f:26:40:be:99:d7:c3:28:60:fb:78:
a1:5a:ff:b3:c3:e2:e1:fa:71:fb:8e:6a:20:ef:3e:5f:33:92:
55:d5:54:9f:00:81:9a:96:9a:6a:7b:de:a8:99:0c:dc:51:f4:
67:2c:50:c1:e9:a3:91:df:e0:59:85:5e:92:3e:b3:bf:7e:7a:
1e:03:f3:5e:db:fa:e9:72:57:fb:11:cc:96:3d:ec:42:77:2f:
2d:67:6c:f0:f2:2a:da:7e:f6:54:f2:06:2f:e5:42:3d:ea:f6:
11:b5:cd:1a:40:ad:d1:af:11:4c:2c:90:e9:ee:0b:50:f5:a6:
16:7f:18:5e:8f:3d:41:75:5d:bf:cd:2f:c1:8a:de:96:59:c7:
df:6e:76:3e:19:cd:7f:b2:c7:98:8a:93:7a:eb:fa:42:81:e5:
78:d7:99:c6:9f:bb:ab:0a:af:e2:9a:c8:cf:74:91:58:2c:47:
3e:18:5c:6f:fa:22:c0:fc:59:6f:a6:56:90:11:f1:3e:df:f0:
3f:79:f2:47:7b:1c:ee:70:8a:82:8b:f2:4c:60:7d:67:ee:7b:
1e:23:fd:c7:a3:c7:2f:03:3f:e4:95:0a:b6:d3:41:17:99:53:
f9:67:43:cf:ac:52:f6:f6:75:db:4f:68:8c:70:b3:75:2f:1c:
9a:40:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 04:26:27 2025 by rpki-client