Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: lE1kyVm4kUv0ZNPJN6lvKNH2a5arhSU5FL6MsYEf/8A=
Subject key identifier: CC:1E:56:E0:9E:68:A9:B7:CC:30:5F:69:08:6E:A2:8A:5E:23:50:C4
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01993F16BD8C7768057347A2AA6BDC5518DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1291
Signing time: Fri 12 Sep 2025 18:01:18 +0000
Manifest this update: Fri 12 Sep 2025 18:01:18 +0000
Manifest next update: Sat 13 Sep 2025 18:01:18 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: unCjwDJCDQVv2GwvgItzEidWG4pif6GtR8/kYTvw7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 15:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:16:bd:8c:77:68:05:73:47:a2:aa:6b:dc:55:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Sep 12 18:01:18 2025 GMT
Not After : Sep 13 18:01:18 2025 GMT
Subject: CN=cc1e56e09e68a9b7cc305f69086ea28a5e2350c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:ab:ad:4a:50:a7:eb:ae:7d:ff:ea:1e:6f:
7a:2a:b9:9b:73:93:49:0e:d3:00:f4:b1:7c:2d:4b:
08:96:a2:4d:85:b2:05:99:0e:6d:14:4e:52:e6:c4:
b9:a1:aa:ee:10:6a:57:0b:50:e7:48:5d:23:28:a9:
83:af:f3:77:99:01:40:cb:40:b1:9d:22:6a:5e:df:
79:fe:e4:fc:c8:52:8e:86:d4:01:16:fa:42:81:29:
ad:67:7d:88:b2:a3:91:e3:74:1a:39:f6:8c:4f:e2:
cb:e3:9c:72:df:27:d4:28:2b:39:cc:68:7f:19:04:
3a:ad:d0:33:db:36:a0:6a:05:2f:7d:0a:6e:b9:4e:
a6:e7:d3:46:76:cb:35:94:f7:a0:d2:01:e8:94:95:
9f:94:fb:d3:28:75:ca:2e:bf:33:cf:ff:a1:af:ab:
b1:f1:1b:a1:eb:03:cc:16:99:e9:29:2c:86:23:7f:
20:6f:c7:b5:7c:7f:d9:01:47:4b:98:99:10:76:b9:
04:94:a3:89:12:17:60:06:d8:52:ea:5b:3d:4a:22:
40:b0:c1:12:82:a4:e8:16:be:60:75:aa:46:ca:c6:
8b:d2:61:fa:ef:cf:9f:53:18:a3:c4:ef:c1:1f:42:
d9:e8:f4:09:02:48:cf:87:10:58:32:d7:4a:ae:f2:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:56:E0:9E:68:A9:B7:CC:30:5F:69:08:6E:A2:8A:5E:23:50:C4
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:5d:3b:36:13:44:ea:85:37:54:b6:fb:35:4a:dd:79:0b:
2d:86:20:17:f0:03:e8:7b:c3:69:62:8b:fa:3d:d6:0a:2a:b5:
20:90:77:27:03:e2:c3:e9:e5:7c:ea:3e:73:0c:3b:f9:b7:83:
46:96:eb:aa:88:84:c6:cd:0b:17:aa:e6:b0:c5:12:1a:ce:e9:
6a:31:23:dc:73:ef:57:07:a0:4b:d3:22:7b:01:0c:b3:4f:07:
60:7d:6e:0e:21:7e:3e:e8:fb:0c:3c:e8:71:38:4d:60:67:98:
7b:47:ef:15:5c:8d:04:99:0d:8b:9b:d5:92:27:52:0b:9a:df:
fd:38:23:77:b4:7c:e0:72:33:22:86:9f:cb:95:77:89:45:bd:
d5:59:25:88:b3:30:40:bf:2f:21:16:3d:23:08:fa:8a:76:a1:
e0:bc:81:fc:d3:6b:2b:b0:39:bc:c9:e4:be:71:e2:74:68:dc:
d7:b0:38:26:0e:40:f9:f2:6b:ca:6b:54:d7:c7:65:9f:be:13:
c6:b7:2e:15:bf:9a:88:c1:46:96:d4:ac:aa:23:8b:82:4f:d5:
85:f9:7c:d3:23:79:dc:2d:05:e7:4c:bb:9c:33:77:96:d1:8f:
8b:44:97:61:b8:0e:4a:2d:87:74:0c:5a:3e:da:13:10:36:59:
ff:9c:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 23:13:57 2025 by rpki-client