Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: hSy3XcESXZb91UhNmnTkZyen3spy0EbZ18M4WHBgAnE=
Subject key identifier: 11:69:D9:6B:AE:AE:07:6A:B8:9C:EF:82:E8:BE:3D:0C:95:61:E6:13
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01987A1ADE2AA036F6F9C4F0CAD3C6F555DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 122B
Signing time: Tue 05 Aug 2025 12:00:37 +0000
Manifest this update: Tue 05 Aug 2025 12:00:37 +0000
Manifest next update: Wed 06 Aug 2025 12:00:37 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: 31Opq2gTrO95Fb+WwcPU7ipxr4iWHWNq8I6HAYiQauc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:de:2a:a0:36:f6:f9:c4:f0:ca:d3:c6:f5:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Aug 5 12:00:37 2025 GMT
Not After : Aug 6 12:00:37 2025 GMT
Subject: CN=1169d96baeae076ab89cef82e8be3d0c9561e613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:50:91:1a:41:8b:1c:f3:4f:b3:2a:b1:87:
3f:b5:f8:01:5e:b3:77:60:a3:28:df:cb:6c:8f:65:
92:10:81:42:a7:7c:42:12:47:5d:da:49:e1:86:26:
73:78:4c:d8:8d:8b:85:5b:e7:ec:b2:84:b8:ca:c4:
4a:f6:ab:a9:da:4f:76:8b:46:db:7b:18:f4:9f:aa:
4c:03:e8:e9:5c:93:09:e3:1a:a2:79:78:41:34:a6:
c9:f3:f9:25:46:08:4b:b4:10:f7:6a:ab:d7:d1:df:
dc:0e:91:71:fd:d1:8f:87:55:5d:de:42:49:d5:15:
29:d6:67:0d:76:65:09:c9:98:f8:bb:89:27:c2:60:
62:58:f7:5e:77:f0:4d:fc:3f:bc:60:11:b2:68:49:
01:28:94:09:2a:b0:ab:55:d3:b5:c1:49:9c:ca:9e:
0a:39:ae:ce:88:83:2a:27:cf:0a:05:2c:90:f8:a1:
71:d8:d2:7c:5a:50:29:0d:f8:e2:fd:44:45:14:7a:
62:87:60:21:9f:ff:0b:15:0c:39:01:6d:9a:0f:33:
8b:45:ac:b8:31:a2:6e:f0:77:2d:f4:42:b4:47:b5:
a3:25:8d:af:c5:45:8c:0e:66:b2:67:4b:df:7e:36:
e7:f9:36:21:d1:eb:15:a0:58:22:c1:71:05:a5:1e:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:D9:6B:AE:AE:07:6A:B8:9C:EF:82:E8:BE:3D:0C:95:61:E6:13
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9f:8f:46:fd:22:11:e0:7f:a0:60:9f:d6:fe:7e:c7:9b:36:
52:3e:39:9f:06:ce:ca:07:26:68:e2:0e:d9:cd:4c:48:aa:32:
d4:b7:2f:8e:f0:27:83:9d:78:bb:b6:6d:4a:05:2e:f7:98:7f:
16:0c:11:ae:a2:87:41:93:41:b0:86:42:4d:4a:bc:fe:a6:4d:
8a:9f:63:c9:e3:c6:0e:0b:c0:04:a6:a5:91:9b:6e:94:44:5a:
96:94:80:4c:d6:57:22:8f:61:0d:11:7b:32:13:c4:34:89:9c:
5b:37:eb:18:d6:88:86:ba:4b:a6:fe:7b:8b:b3:ab:bb:d9:61:
8a:a6:53:9f:5c:68:db:3c:9f:84:16:72:a9:80:1b:de:6e:5f:
a1:f9:44:10:ef:9a:50:3b:b7:85:5b:ea:3a:c8:c6:61:6e:a4:
75:5c:0a:64:55:2b:86:2b:51:06:86:49:98:5d:7b:ea:2f:d1:
50:c8:f7:5a:fa:ff:3f:22:3a:a6:2b:db:20:26:77:1f:cf:e5:
60:a4:7e:07:41:54:89:63:ac:5c:57:b2:30:4a:12:9c:95:e2:
c3:53:4b:16:f8:0f:44:03:ac:76:39:d3:fe:66:b7:1a:1a:bc:
01:08:b4:ed:2d:8f:9d:4c:7e:c8:29:1d:95:fd:ea:d9:57:13:
f1:ce:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:48 2025 by rpki-client