Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: ctWrE+yqZffgWnNHaRD9gFd3b0Ub7an6O4eN7N9cZQ0=
Subject key identifier: 75:34:4A:BA:26:3C:03:88:3F:00:EB:49:E0:44:D0:2E:57:48:1B:18
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 019A51BE903FDB21DB52E25B1926A7B95ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 02FD
Signing time: Wed 05 Nov 2025 02:00:34 +0000
Manifest this update: Wed 05 Nov 2025 02:00:34 +0000
Manifest next update: Thu 06 Nov 2025 02:00:34 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: 73YH9gs5pO0h3LN5mYUhFmxEjGwz1sE76BOJD7ROiA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:90:3f:db:21:db:52:e2:5b:19:26:a7:b9:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Nov 5 02:00:34 2025 GMT
Not After : Nov 6 02:00:34 2025 GMT
Subject: CN=75344aba263c03883f00eb49e044d02e57481b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:42:12:b5:79:d7:3c:07:9b:22:28:c9:9f:
bf:48:5f:2c:a8:a2:d9:cf:94:b0:2f:ef:42:d9:15:
3b:3d:c5:6e:46:5c:50:6c:4b:46:84:a6:51:02:40:
e5:43:f5:70:7a:93:96:42:25:7b:76:ca:ab:45:17:
f3:bc:80:3c:85:a5:62:18:b5:05:94:10:b1:92:73:
b6:8d:d1:1b:f8:24:29:30:bb:28:84:3f:c2:3e:31:
53:7a:89:66:04:74:ad:2f:2a:e1:ab:b5:9a:a1:6a:
74:60:f0:78:3a:38:13:6b:56:36:dd:c0:c4:ca:50:
a3:af:e6:2b:86:1c:2a:f8:0c:d5:d2:22:03:72:0a:
29:0d:e5:68:76:bf:29:44:f4:fc:41:40:ad:91:79:
e5:e5:0a:dc:c2:fd:85:77:c9:cd:94:5e:76:fc:60:
7e:a8:4a:da:37:f3:c5:33:1a:a1:69:4d:ce:03:65:
65:60:4d:ce:ef:d5:e4:3b:6f:f9:3d:ff:73:8d:b2:
3f:f8:96:71:91:f5:bb:11:f9:0d:a0:28:af:7c:e7:
d5:5a:9e:58:06:79:b1:04:78:9a:f5:f3:51:f8:4d:
cd:76:4b:1d:61:d4:04:1c:48:b6:85:46:ae:96:57:
a9:50:c8:76:de:19:cc:01:c8:8f:f1:e3:d1:1f:69:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:4A:BA:26:3C:03:88:3F:00:EB:49:E0:44:D0:2E:57:48:1B:18
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:fd:7b:1c:7c:7a:ab:ee:78:7c:89:22:a0:3f:10:3c:14:
38:63:3d:91:39:02:26:ab:8f:3a:3e:98:fe:01:d0:d6:26:f1:
80:3b:a0:36:aa:89:42:7b:ef:ba:c8:36:d1:1d:a9:b1:02:ad:
e1:b6:39:11:37:85:25:e1:c8:da:6f:16:cc:5b:fd:bf:85:1f:
42:d2:6e:7d:df:60:cc:4c:ae:fc:93:e4:27:ea:c4:4d:6d:cb:
d5:8c:e4:1b:90:bb:be:be:66:a7:17:be:a3:14:c0:c4:c1:6b:
d4:75:6f:a3:b0:0e:e9:10:ce:56:bc:13:64:fe:82:9e:9a:89:
2b:f5:9e:d6:2b:cb:91:0a:3c:82:07:d2:29:bf:a0:bf:35:eb:
a5:4c:f2:6e:ee:67:b0:6b:17:b8:9a:f7:b5:68:0a:31:55:47:
e3:c8:37:3c:87:62:e4:65:90:0a:d8:b1:52:db:e8:49:f6:9b:
5f:b6:23:1c:31:1f:cb:53:be:3a:dd:26:71:08:11:90:de:9e:
4d:10:73:cf:bf:86:11:33:51:45:06:f8:f0:de:37:ff:6b:0b:
a1:b5:c9:50:5e:1a:9b:08:7d:da:00:9a:12:92:6c:7b:24:02:
c7:09:80:c9:1d:38:de:b0:59:dc:29:6f:fe:ec:b4:8c:25:4a:
eb:4d:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:37 2025 by rpki-client