Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: NG1RCqSKnPtx04juZq0AW9QFwq4wLn0wndABb95toxo=
Subject key identifier: E3:C3:C0:8C:BB:1E:A1:41:0A:2A:9C:A7:D7:26:8E:E9:3A:A6:0C:45
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 019A70DC777408AD4946FD8C885884C00EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 059D
Signing time: Tue 11 Nov 2025 03:01:27 +0000
Manifest this update: Tue 11 Nov 2025 03:01:27 +0000
Manifest next update: Wed 12 Nov 2025 03:01:27 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: BDBw1Kvbq2QL8P6KJCYvqvJldBVzC3Sa5nKvJ33N4cY=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:77:74:08:ad:49:46:fd:8c:88:58:84:c0:0e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Nov 11 03:01:27 2025 GMT
Not After : Nov 12 03:01:27 2025 GMT
Subject: CN=e3c3c08cbb1ea1410a2a9ca7d7268ee93aa60c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:16:40:59:fa:78:be:b0:e2:9f:ab:19:e7:
02:d6:0f:90:cb:a2:e2:19:bc:6c:bd:a5:ae:86:e1:
ee:b1:aa:af:c4:d9:b0:0f:b4:0b:86:22:ec:36:fc:
7f:a2:1a:59:e3:74:7c:50:87:98:34:56:63:8c:6f:
8b:a3:73:45:f5:50:2d:0e:0f:47:c8:91:f9:1e:01:
47:d6:06:7f:a2:a6:ff:d2:f4:9f:84:2d:b2:b2:30:
16:09:2b:95:4b:80:1d:20:60:5f:89:4e:3b:2b:a0:
f1:b1:33:0c:60:9a:97:da:db:96:5f:e6:d0:7e:77:
c9:46:00:99:dd:6a:67:df:3a:1a:b0:d4:9c:a7:ae:
4b:30:72:a7:d1:5c:45:03:16:c1:87:db:15:cd:bd:
42:d2:b1:2d:5c:10:45:99:ca:d1:02:9c:1e:66:54:
bb:e0:fb:4e:31:b5:67:09:19:27:da:e9:b1:f6:06:
df:ea:3c:58:05:6b:cc:03:e5:96:95:89:47:73:68:
54:10:6c:f8:43:04:fc:05:79:98:89:d5:f3:f7:36:
99:b7:a7:68:22:83:3a:f3:3e:b2:42:c9:ec:bd:f3:
a3:6b:a1:f1:13:eb:6f:32:cc:cd:85:84:99:11:6d:
ea:a4:41:56:be:b8:4c:22:a7:9c:5d:bc:a4:28:78:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:C0:8C:BB:1E:A1:41:0A:2A:9C:A7:D7:26:8E:E9:3A:A6:0C:45
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:3c:b8:05:87:2d:62:c0:c2:14:ac:da:bc:53:98:21:e7:
0c:90:25:9b:61:8a:0b:cc:cb:fe:34:17:a7:dd:de:b2:de:9f:
3e:16:d4:4d:20:84:8b:08:1f:8f:4f:5e:22:53:22:0d:02:e6:
fe:da:ed:dc:07:b9:ec:e8:d0:71:e5:8f:f9:5e:f1:2c:a5:b8:
66:70:21:41:fe:23:95:36:bc:8d:a2:28:f2:34:6d:94:1d:b9:
04:79:ea:23:7c:a8:f7:81:94:0d:d9:21:47:8e:20:01:71:e2:
fb:20:22:ca:6f:e4:72:a5:ed:7c:ee:42:23:c0:36:3c:ce:03:
fb:b6:b9:ea:9e:54:a9:c5:4f:6c:31:fe:75:6f:7b:b7:63:11:
72:62:a3:3b:ca:eb:df:1a:3f:0f:00:9a:9f:f1:47:ad:59:e5:
5f:7d:0f:8b:21:eb:1a:1f:84:86:e9:16:7b:30:a4:ec:ad:5a:
f1:04:bd:4d:90:69:3c:95:a1:2e:a2:62:ba:02:4f:7f:df:75:
29:e6:0c:29:2d:c0:d8:a6:47:6f:cb:6a:36:fe:24:30:15:b1:
4a:f1:66:6f:85:4e:09:f6:da:db:fd:5d:52:22:85:64:20:31:
22:44:c9:42:55:db:8d:36:0b:55:36:0f:4e:25:c5:49:74:2c:
c9:2f:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:14 2025 by rpki-client