Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: VTdytM4eMcdnAHCXmSSMx0T3gXo8vi2W0Pnldz8Kvt8=
Subject key identifier: 2B:A5:70:16:95:C0:64:1E:7D:50:72:69:74:E1:FE:A6:8B:32:87:CA
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019849D30505C87712020830BD5A5AD4C993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1212
Signing time: Sun 27 Jul 2025 03:00:22 +0000
Manifest this update: Sun 27 Jul 2025 03:00:22 +0000
Manifest next update: Mon 28 Jul 2025 03:00:22 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: 7hD36jxETBvgV5xqlP7mYTiw+wfNU83zsgvqIcg604w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:05:05:c8:77:12:02:08:30:bd:5a:5a:d4:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Jul 27 03:00:22 2025 GMT
Not After : Jul 28 03:00:22 2025 GMT
Subject: CN=2ba5701695c0641e7d50726974e1fea68b3287ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:cf:08:91:e4:c0:c7:b2:08:09:68:e3:00:
5d:d3:c2:e0:c6:37:b9:86:9c:31:6a:fe:3d:9a:7e:
06:c3:ea:73:e2:5a:d7:ea:6d:36:16:3e:3b:c9:5e:
ec:85:4c:5b:b6:52:77:36:91:08:5d:a3:af:c6:59:
f1:81:13:33:a9:11:3b:0b:b8:83:e8:e6:e0:ad:02:
63:10:cb:be:58:7a:ab:18:a0:77:c3:31:da:8d:60:
c1:de:eb:f9:c7:f2:41:08:91:07:54:d1:90:7a:b6:
3b:8a:6f:93:a0:32:88:cd:e1:c2:e8:2f:a2:32:2c:
e3:b5:73:30:89:8b:90:19:a2:eb:cf:b8:83:aa:e1:
77:a2:c6:cb:cc:f9:19:c0:c9:cd:af:90:39:d0:9b:
22:d7:2e:20:72:79:24:32:a7:89:6b:e6:7a:b3:58:
53:4c:e8:5c:41:98:ba:64:87:65:8f:65:73:3a:a0:
8e:3c:68:e1:5b:d1:5b:99:e1:fb:d7:de:42:b2:a6:
9a:ea:ab:5a:61:c4:f4:c9:8f:dc:b6:9b:83:97:25:
40:5e:4b:84:6a:d5:d9:7b:48:b2:88:97:67:37:80:
95:bc:c6:9f:e8:3e:4e:9f:19:9b:1e:4b:45:e0:cb:
a7:08:05:d8:7a:f6:ee:0c:83:26:0d:a3:6d:f9:4b:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:70:16:95:C0:64:1E:7D:50:72:69:74:E1:FE:A6:8B:32:87:CA
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:de:c4:97:41:db:32:49:3c:df:96:c4:d4:db:f6:9a:1e:
5b:f7:29:a3:8c:a3:71:fa:72:5d:2f:a0:57:7f:3d:1f:85:61:
32:6d:ed:8c:1a:32:c9:89:c4:b5:6d:f5:dc:43:57:89:11:43:
94:bd:17:18:3c:7d:ae:6e:b5:5c:8d:4d:2c:ab:34:17:ae:45:
99:ac:bb:09:31:33:a4:82:3e:f2:71:c9:83:a9:dd:d8:f7:81:
79:c1:b5:4a:54:cc:39:1f:7d:78:f3:98:8f:57:61:f5:2f:97:
bf:f1:11:b3:bb:45:f5:af:1c:a2:84:3c:24:6e:95:6c:50:3a:
31:cf:8e:d1:68:43:03:5d:3e:37:e0:98:b1:9b:df:ff:87:b7:
4f:23:9a:d6:8f:db:98:e7:0c:7b:d2:4f:38:f0:a3:2f:e5:98:
d2:18:d7:2d:5c:5c:c3:4c:da:8e:d9:06:95:54:ca:4e:fd:a9:
81:73:3b:9f:aa:61:c4:19:fa:76:40:2d:24:4c:1a:fc:c1:7f:
60:68:e9:5a:0d:48:27:c1:07:30:72:2c:fe:74:c9:11:99:6d:
bd:e3:e7:c3:63:62:f8:50:ef:a3:26:d4:0d:19:d8:31:5d:ea:
db:e2:34:d1:fb:79:94:5d:62:c1:30:b6:bf:f9:bc:fc:8a:bb:
10:b3:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:19 2025 by rpki-client