Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: a6+OmCwxHvpVPaW+RI8ZOGT6JSRY1OWtXFOYa1PEfKA=
Subject key identifier: 9C:E6:4A:23:B8:BA:A2:EF:8D:59:4C:06:97:E1:C9:31:10:78:03:CE
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019A4D73FFB3FFB0F77E7C14206663EB00CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 131D
Signing time: Tue 04 Nov 2025 06:00:38 +0000
Manifest this update: Tue 04 Nov 2025 06:00:38 +0000
Manifest next update: Wed 05 Nov 2025 06:00:38 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: g7JLszFwhQ0/0OQSZAtnNjO8nJvBrTbEzzppGFpsoJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ff:b3:ff:b0:f7:7e:7c:14:20:66:63:eb:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Nov 4 06:00:38 2025 GMT
Not After : Nov 5 06:00:38 2025 GMT
Subject: CN=9ce64a23b8baa2ef8d594c0697e1c931107803ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:35:e8:13:2d:29:1c:d1:75:10:f9:0d:a8:af:
37:a2:dd:ac:3d:38:91:da:e8:aa:cf:69:c4:b4:a8:
54:85:19:15:87:cc:c6:29:a4:c4:05:22:f9:b9:20:
1a:9f:f0:38:94:cc:84:45:2c:5a:ab:81:54:09:16:
ab:45:ce:d5:cf:f2:8d:7c:9a:fd:7d:07:fa:af:02:
c9:c2:90:a8:a8:13:47:88:57:c7:0c:79:f0:16:17:
4e:da:99:72:03:a2:15:77:b5:1b:75:0c:fa:d6:70:
06:8a:8e:8e:91:ce:e0:6f:a4:60:75:45:39:61:ed:
99:11:60:4c:11:65:c8:91:78:f7:9e:fd:74:02:e3:
3e:60:cb:92:62:4b:87:7b:84:d2:67:02:83:d2:76:
20:7d:ea:2d:bb:39:8d:4c:84:aa:f4:b9:e4:77:e4:
8d:0f:05:2e:b3:37:b1:d3:5e:46:b6:9c:6b:83:65:
42:f4:cd:00:c3:74:95:ca:1f:f8:ae:41:69:00:c6:
52:47:1a:3b:58:fc:09:ca:4a:ac:e7:66:67:d8:76:
2d:61:87:7a:f9:6f:04:e2:4f:47:91:97:1f:fc:12:
29:f8:71:e9:cb:dd:95:81:15:75:66:76:c5:04:05:
93:f7:b0:6d:ff:af:18:ff:ef:53:33:1e:56:29:d7:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:4A:23:B8:BA:A2:EF:8D:59:4C:06:97:E1:C9:31:10:78:03:CE
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:49:3e:f2:86:f5:df:ab:87:ac:2f:cc:b9:b5:36:ac:fe:
b1:e9:d5:cb:70:ce:d2:06:c6:60:db:8f:e7:39:9c:3c:60:c1:
e6:11:f6:36:3d:af:a3:44:11:93:70:6a:aa:ec:1e:e2:66:7d:
e0:08:67:e1:58:64:be:75:a2:20:90:7d:02:16:ce:e6:91:b4:
b7:ee:f6:94:e8:a6:cb:79:84:fc:ea:20:60:e1:a6:6c:e5:8b:
d5:7f:f7:6d:53:65:5f:83:7c:b3:70:d5:46:0c:ed:a4:9f:d9:
66:7b:0d:f1:12:06:46:2f:0f:0a:13:24:1c:10:12:55:39:e5:
2f:d4:70:57:b4:45:c5:12:6d:fc:8f:25:f4:6b:eb:a0:8e:f8:
56:fe:7e:0b:b4:ef:ac:3c:f2:9c:a5:45:49:92:1c:d6:54:34:
e4:1c:3c:22:e0:1c:d6:1e:17:2d:6a:81:36:8a:b2:26:c7:48:
32:4d:18:28:86:2d:2f:26:d4:38:a3:54:6b:4a:92:2a:6f:66:
02:0f:b3:ff:bf:89:fd:0a:83:12:43:76:18:ff:22:87:48:dd:
b0:d9:5d:7a:30:ef:04:e8:3a:2b:a1:27:46:f3:21:e6:2a:28:
eb:21:c7:fa:2c:d2:ca:6f:a4:e6:2d:2e:eb:39:ba:a4:88:c4:
ca:8e:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:26:11 2025 by rpki-client