Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: NT/YodHE5aZTKugQLohBsgJvJzT9PgaV6RbVB9m6oBQ=
Subject key identifier: D2:0C:DC:F0:60:80:61:5F:D3:31:F4:D8:55:C1:79:66:3B:BA:48:41
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 019A7293986AB79B352E343C38C53F104FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 030E
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: 2AgPFQhVz8dLV77dooAmvH2K1S+4FCvSBP0vnMsFE1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:98:6a:b7:9b:35:2e:34:3c:38:c5:3f:10:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=d20cdcf06080615fd331f4d855c179663bba4841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:55:c2:82:66:8d:84:4f:a9:13:56:4f:a4:
8c:63:2f:3f:7c:ff:0f:2c:33:69:5c:b2:f5:ed:a7:
5a:2b:3e:66:86:74:bc:3b:17:8a:b2:46:91:1a:48:
f0:8e:42:a7:11:0b:8e:96:32:6d:f5:ac:de:7a:2e:
4c:e4:bf:eb:5d:a8:33:c3:f5:4c:c0:d7:ca:00:1d:
98:e2:32:d2:93:f7:3e:2a:c0:de:c6:7e:87:55:3e:
ff:3c:98:0d:97:5e:1e:3c:cc:3e:ab:b0:01:90:fb:
f1:2e:a5:5a:03:7d:cf:d6:3d:9a:5d:a8:35:55:8c:
de:31:62:23:51:2e:6b:83:8b:ad:4b:fc:f2:72:92:
33:61:09:49:a8:a4:bb:23:69:ad:57:7a:5a:55:10:
97:a8:34:46:de:6b:5c:37:6e:13:9e:e0:30:b9:dc:
8d:31:31:22:18:32:04:76:82:b2:67:97:1c:40:c1:
e1:7c:3b:08:ec:73:de:63:06:90:02:55:9d:3a:92:
ae:49:45:5b:36:2a:f2:82:79:49:f4:96:7a:d0:3c:
78:83:6f:67:b2:0c:f1:66:7a:e4:3c:06:30:5b:33:
a7:71:ea:4a:0c:2e:a9:11:4e:f1:e7:58:aa:00:32:
e2:c8:99:2d:57:13:9f:19:13:35:5c:89:23:a7:04:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:DC:F0:60:80:61:5F:D3:31:F4:D8:55:C1:79:66:3B:BA:48:41
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:4b:74:02:b6:ac:1a:95:01:f6:1c:22:40:d8:22:3c:d9:
9c:8c:56:b9:6b:5e:ef:21:86:c1:d6:3e:41:d8:4c:50:68:ef:
52:98:d4:cc:41:bd:f1:86:ee:82:bc:ce:a2:37:ab:fa:08:9e:
d1:6a:28:84:4b:cd:fe:d9:59:81:c6:69:42:bb:90:db:8f:f2:
6f:9b:1c:9b:ae:98:6d:bd:85:12:40:86:30:a1:7f:e8:22:72:
47:e5:8b:b2:a0:59:ca:ea:d8:da:c2:9d:ea:1f:85:20:aa:8e:
8c:29:5e:11:b1:0d:21:a0:11:db:ae:01:0d:20:04:96:b6:11:
6b:80:3c:8a:0b:37:46:24:13:14:27:6a:b0:93:af:5c:a7:16:
67:c2:dd:15:2c:fe:5d:c2:5d:f2:c3:30:02:73:e2:a5:2e:e6:
4d:d7:33:05:e1:42:cc:f1:c8:19:31:58:d9:f9:c7:be:82:84:
b6:09:a2:bc:11:af:9c:44:b6:9a:f3:a5:14:30:d2:6c:c9:e0:
a3:78:a1:79:fd:f9:98:43:09:1a:db:6a:ee:d1:0a:e4:f3:df:
eb:f0:08:57:62:fd:e5:41:3b:f3:f5:e3:e0:94:20:b6:e0:b9:
5f:2b:fd:54:b3:a1:2c:46:80:34:df:83:d0:a5:87:0c:45:0b:
c2:fe:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:39 2025 by rpki-client