Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: J4exGLDRyupw4Ioab1qffBVsVEnd22SsAMrAzgfwzqs=
Subject key identifier: 03:93:6A:0C:20:B2:99:52:DB:DB:86:CC:87:DB:FC:89:9B:C4:43:AF
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 019A71B90CF3F3AB0A098D6F89EF07FF7A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 0244
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: 4h4b8zpcECP7oh7gbRRM0jL8VkZsQGEt5SZqZdwq8Jo=)
2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:f3:f3:ab:0a:09:8d:6f:89:ef:07:ff:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=03936a0c20b29952dbdb86cc87dbfc899bc443af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:25:c8:f8:2b:72:11:7a:92:7d:b6:c8:90:
33:24:8a:11:06:a2:86:95:1a:32:ef:d3:7d:e6:10:
39:8d:35:38:ff:45:9b:1c:09:d9:71:2a:b9:e2:2c:
39:47:37:ba:54:be:a0:f0:9c:ee:3b:c2:6b:c6:64:
95:52:7b:d2:2f:56:aa:5b:e0:3a:45:98:bc:6b:0a:
2c:ea:7b:44:6f:3a:88:f2:1f:8e:35:7c:28:12:2a:
01:8a:a4:b6:26:c0:19:39:b4:8d:82:57:14:11:66:
8a:be:a1:9a:4f:8a:9a:d6:1d:bf:e0:15:ff:22:71:
09:06:bb:9f:e2:a3:51:b9:e5:50:b9:80:2c:de:b7:
c9:a7:13:58:60:52:dc:f5:1f:9c:be:18:bc:b5:4d:
03:59:61:a8:86:44:19:e2:59:75:77:7c:c5:c5:a1:
89:d0:d6:c7:bb:97:5a:cb:73:31:88:14:0f:2a:47:
1d:e2:8b:5e:1b:38:fa:ee:a2:ee:63:09:b3:3e:a5:
ad:d9:b0:dc:12:62:d8:44:2c:05:de:8a:aa:77:ee:
13:e4:62:5e:86:01:81:1d:71:8f:e1:de:6a:7f:e6:
27:f7:31:cb:04:96:89:a6:68:a7:a2:98:0e:10:dc:
3a:75:b8:12:a0:3e:28:73:90:be:81:d6:b8:7a:fd:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:6A:0C:20:B2:99:52:DB:DB:86:CC:87:DB:FC:89:9B:C4:43:AF
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:d3:9e:cc:2a:d0:90:a9:e6:94:f5:b1:88:ac:69:eb:3b:
c4:c7:2d:6d:7c:77:ea:93:09:5b:14:e2:99:28:7c:b4:1b:cb:
76:5b:fc:11:7c:56:b0:44:c4:1a:ba:c5:6a:ed:05:61:f4:72:
1f:a8:7a:4d:0d:18:a2:35:3a:72:1b:17:f5:07:32:3b:36:6d:
8b:05:45:37:e2:81:23:3a:66:9b:5e:f1:f3:0b:6c:2a:1c:94:
5e:91:34:c3:be:c9:9e:c2:ab:7c:35:c6:0c:0f:03:6e:47:82:
8c:90:25:1a:dc:db:87:a3:da:36:51:0b:17:73:96:f0:1e:d6:
e9:30:88:6a:9a:d3:c0:89:3a:3f:76:3d:3b:48:3d:eb:13:88:
91:87:87:0b:37:5f:f5:58:2b:db:f8:af:f1:5a:4e:7d:5f:e3:
10:5a:98:b9:47:72:37:b7:e7:0a:fc:1a:3f:2b:06:9e:74:e9:
7c:81:a6:5f:f5:18:c1:4d:04:2b:b8:90:a3:84:52:3f:b1:b8:
3e:4d:ac:7b:bb:11:3f:fc:b3:52:d5:70:6d:60:cb:e1:bd:fd:
8c:84:05:e7:74:a9:55:bb:ce:83:8d:f8:51:44:19:b0:b9:b1:
8f:cc:42:fe:9b:55:62:b0:a8:e4:29:ae:f4:8f:48:5a:9d:cc:
66:39:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:53 2025 by rpki-client