Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: Xe+lYefLvd+mNUCWZtU5pYHL40DiYnYhSzYQGY6dhb0=
Subject key identifier: 50:82:00:DD:9D:6C:8F:59:A3:2B:49:A0:2F:4B:86:BE:C4:48:F6:E3
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01974CD78DADC12FDC3799313B6DEC8CFEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 118F
Signing time: Sun 08 Jun 2025 00:01:24 +0000
Manifest this update: Sun 08 Jun 2025 00:01:24 +0000
Manifest next update: Mon 09 Jun 2025 00:01:24 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: m0dISOoGftmCB8xYJnNxRAn5GMID/6NrlVWRqOQawi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:8d:ad:c1:2f:dc:37:99:31:3b:6d:ec:8c:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Jun 8 00:01:24 2025 GMT
Not After : Jun 9 00:01:24 2025 GMT
Subject: CN=508200dd9d6c8f59a32b49a02f4b86bec448f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:d1:9b:3c:45:c7:db:0e:0a:64:30:f6:0e:
a6:1a:45:dc:c2:2c:54:aa:a4:68:8e:55:c9:d3:fe:
2b:83:eb:4f:4b:e3:d6:23:10:d7:16:a8:2f:0c:45:
c2:4b:d6:be:49:71:f8:03:62:88:79:ae:ef:2e:44:
73:bf:44:73:8d:bf:53:8f:f1:92:da:69:67:c5:ab:
ba:39:4a:ed:ac:ab:af:f3:3d:d5:53:bb:14:67:5e:
0a:d1:e1:73:2d:59:42:97:f3:fb:49:ab:9d:a7:d3:
de:f0:16:d0:64:c5:a5:72:d6:5e:0e:86:b0:74:0c:
ef:7e:01:73:d2:2d:ea:74:a7:85:e7:d0:26:49:8e:
5a:f7:3c:48:0e:e8:2c:6c:79:40:0e:94:4a:53:12:
00:54:37:27:1a:c1:4c:f5:2b:b9:6d:8a:12:e2:bf:
a8:25:ec:02:5c:0e:b4:1f:16:37:49:3f:c9:2e:98:
3f:e4:c1:23:57:2b:0b:02:d8:53:00:0c:e3:0a:5a:
10:11:fd:3f:73:2d:57:c3:66:c2:0f:64:0a:e9:7c:
4d:94:6c:36:3a:50:7a:0e:ea:0b:5e:43:70:93:b6:
e1:00:ac:fe:e8:07:a5:d9:c1:0e:da:29:e4:1c:b6:
98:51:d6:d2:9f:20:09:eb:5b:f1:ad:b1:da:af:5f:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:00:DD:9D:6C:8F:59:A3:2B:49:A0:2F:4B:86:BE:C4:48:F6:E3
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:46:88:fc:36:06:0a:40:d7:a0:02:45:28:cb:7b:3f:9b:
b9:34:29:23:4e:f1:df:b6:9c:50:d1:d8:b1:d7:7a:b7:99:1e:
22:7a:e1:b8:26:00:c6:80:63:25:2f:32:38:67:9f:82:59:70:
f0:3a:95:85:e9:88:a2:cf:0f:58:a3:58:b5:df:7c:b9:70:36:
96:cf:73:6a:67:e3:e1:60:d3:13:5d:6b:27:ab:ef:94:31:07:
72:28:50:84:05:77:d0:5a:c5:57:d5:fb:b3:77:4a:b4:bf:20:
ee:35:b7:ae:12:30:34:a2:3b:b2:4e:0c:4e:ae:51:81:55:bb:
31:f3:ec:01:12:4f:ad:78:15:a2:1b:99:95:52:03:cc:38:02:
f3:99:99:8f:dd:1e:62:6b:25:85:76:c1:ec:14:23:12:35:57:
0b:ec:80:d1:1f:e8:55:e3:af:97:60:9b:47:05:cd:dc:50:29:
48:f0:42:ec:1c:5d:b3:f6:1c:22:30:89:12:0a:6b:d2:d8:cf:
1e:3b:5e:45:81:77:35:30:60:ee:02:8a:87:34:df:bc:20:1e:
ac:65:6e:75:e2:c1:1b:e2:5a:82:44:3e:82:88:c8:d9:7c:08:
1d:48:17:10:17:52:69:3d:38:0c:8b:f4:04:72:86:aa:65:5e:
37:df:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:32 2025 by rpki-client