Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: ap3OKmUw8aE3Omp9qyph3WQd9nF5Idi3tPtyLMLSQWE=
Subject key identifier: 22:AE:95:10:EF:28:45:3A:9D:2A:39:BF:E9:16:77:8F:76:EA:E5:76
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019A533E9E82D4FEE4B149B44584DBFAB822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1320
Signing time: Wed 05 Nov 2025 09:00:03 +0000
Manifest this update: Wed 05 Nov 2025 09:00:03 +0000
Manifest next update: Thu 06 Nov 2025 09:00:03 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: 5Pbs1uJXpKc8cTqEuvpo24zuuFkKEVLHqZJ3MTDlpCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:9e:82:d4:fe:e4:b1:49:b4:45:84:db:fa:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Nov 5 09:00:03 2025 GMT
Not After : Nov 6 09:00:03 2025 GMT
Subject: CN=22ae9510ef28453a9d2a39bfe916778f76eae576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:af:f1:af:66:5d:65:4a:59:df:33:0c:73:
34:3c:54:06:48:bf:0d:0e:24:c7:6e:1c:73:55:6c:
d5:36:4a:ae:84:bd:58:3d:5a:4e:db:88:5d:76:77:
d8:d7:40:f7:84:2b:d9:6d:6a:c3:b6:25:05:ed:65:
30:a4:6c:71:56:ea:fd:60:d6:e1:c2:70:f0:19:65:
f6:f1:0d:bd:ea:9b:d8:38:a1:46:5f:58:41:5e:f0:
1c:07:d5:7e:85:93:eb:49:21:13:71:6b:85:c6:73:
31:15:94:93:b0:fa:a6:0a:5a:9f:0c:69:04:37:89:
cb:56:da:7e:82:13:dd:dc:31:a8:fc:b4:76:9f:e2:
ba:7c:b0:20:a0:3a:b5:12:6e:cd:86:09:6c:d1:7c:
27:4c:ef:ba:13:b1:91:86:64:7f:a8:bf:74:72:71:
24:3e:9c:18:4d:99:77:25:4d:1c:b2:15:e1:31:d1:
05:56:72:ac:04:23:8b:cc:da:ce:5d:c7:c4:64:99:
12:ce:a5:4a:71:ac:b9:0b:b7:dc:06:57:1e:c4:3f:
57:0b:40:e1:b6:1e:4d:91:bb:e3:99:7d:59:47:b8:
7c:48:2a:85:8f:98:f0:d4:22:e3:11:b5:52:9f:e1:
fd:8c:d4:15:60:5d:d1:81:7d:9e:c4:cf:9c:f8:6e:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:95:10:EF:28:45:3A:9D:2A:39:BF:E9:16:77:8F:76:EA:E5:76
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:4f:9b:0f:ed:4a:0d:85:a5:ed:27:ef:97:65:6b:43:30:
77:15:d4:ed:c2:b3:c3:34:02:80:ba:51:be:9e:87:68:73:f6:
87:2f:27:54:6b:29:8c:33:9d:be:48:98:4d:5c:7b:45:4b:0b:
7f:51:e5:13:69:9f:4f:c6:fe:88:0a:4b:a9:7a:38:c4:c1:45:
12:63:ad:a0:56:51:55:f9:8e:b4:82:50:bc:8f:2b:09:00:cc:
9c:0d:b6:59:ec:7a:37:3d:74:e0:5a:b6:7a:08:62:de:c1:a7:
06:7e:a7:af:56:3d:f1:17:a3:20:12:5e:f3:95:b7:63:2a:f0:
25:d5:17:de:82:c1:c9:85:7a:22:42:b6:e0:6f:af:53:c8:3d:
34:d9:3c:5e:af:cf:2b:73:b2:07:5d:9b:5a:ef:df:38:1b:93:
d2:96:a1:e5:09:1d:c5:f9:95:65:e0:37:e4:7c:57:7e:8b:35:
56:3b:ef:bb:52:b9:e6:63:51:28:70:bc:37:de:01:21:2e:5f:
fb:98:cf:cc:1d:a6:96:f3:5d:47:38:46:c3:40:b8:27:65:b4:
ad:76:4a:75:a3:dd:85:f0:1f:79:90:dd:8f:dc:07:c8:ee:a6:
2e:71:82:a9:a4:2f:c1:2b:6f:ce:da:5a:44:66:e9:ef:a4:f5:
0c:fa:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:26 2025 by rpki-client