Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: bG6mwv0Y6aiGrDGIvVfxP7wu1ru7vJ3o3XPRrOWG8Uk=
Subject key identifier: 27:1A:E4:CF:96:36:B3:0D:D0:42:0D:BC:5D:65:A8:32:BC:DA:5A:00
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 01987A8901F59409E7CEFB4CD8F94788C1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 0209
Signing time: Tue 05 Aug 2025 14:00:55 +0000
Manifest this update: Tue 05 Aug 2025 14:00:55 +0000
Manifest next update: Wed 06 Aug 2025 14:00:55 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: 84xoVmgkd9hH3cwBMT4T5c8iBX+rPATW+VwCXe/QADM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:01:f5:94:09:e7:ce:fb:4c:d8:f9:47:88:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Aug 5 14:00:55 2025 GMT
Not After : Aug 6 14:00:55 2025 GMT
Subject: CN=271ae4cf9636b30dd0420dbc5d65a832bcda5a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:51:3d:d5:7b:8b:66:22:3f:88:11:01:f1:
60:8d:f1:65:a8:fd:ed:e4:72:e7:04:f9:96:cb:6b:
c3:80:b4:d3:8f:cf:f7:fb:24:e6:e4:66:ef:26:16:
3d:00:e4:13:2b:c6:6a:f7:ef:32:62:00:61:de:98:
e9:f9:c5:15:ca:8f:13:c3:c6:9b:9f:15:55:17:a8:
17:d3:42:45:ab:62:f2:3e:9a:58:8e:16:59:32:ef:
3e:e7:56:cf:b7:75:1c:42:06:44:96:5e:42:0e:7f:
25:e9:d0:0b:66:36:9a:22:83:71:b3:df:6c:1e:75:
1a:c4:99:90:66:e4:bd:35:a3:f0:7e:57:83:3d:fd:
d4:e9:9f:6e:ac:c4:d7:05:10:76:38:0a:1e:d0:7a:
89:9e:73:26:91:72:3e:cb:13:a4:15:7e:64:e5:fd:
5e:a3:68:4e:34:be:9a:64:00:0f:82:fe:19:9a:56:
04:73:97:d4:2e:4e:02:d5:bd:2c:9f:91:c0:ec:bf:
cd:fd:8d:d9:e4:b0:8d:05:d4:86:bd:5f:80:c9:d3:
59:86:49:5c:8c:ec:e5:e7:17:e2:64:97:cd:0e:dd:
a1:6b:04:96:06:cc:95:6e:9f:27:99:79:da:3b:48:
18:51:f7:d1:d1:c7:28:79:75:11:b3:56:53:7b:86:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:E4:CF:96:36:B3:0D:D0:42:0D:BC:5D:65:A8:32:BC:DA:5A:00
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:bd:48:3a:6a:fb:f7:ff:81:8b:f4:4d:50:40:e3:3a:ab:
32:83:cd:ca:25:a6:d0:61:12:a6:95:d0:42:58:ae:31:1b:15:
ff:b4:68:c3:79:c9:e5:89:7f:43:62:2b:35:c4:71:a9:ac:82:
e7:f6:36:de:0c:17:0c:0f:63:04:bc:df:0c:ba:30:1b:d0:7c:
b4:0c:ba:80:4f:6e:d7:13:f0:fb:df:58:96:8c:e9:14:7c:1d:
b3:e7:b3:2b:89:c8:98:da:96:7f:ed:0c:90:df:49:10:70:42:
57:83:58:e5:07:c0:76:f6:19:6e:4e:00:11:15:e6:fa:0d:1c:
33:45:6f:ed:1e:79:7f:ea:e1:e3:ca:7a:9c:6f:21:63:63:9f:
cd:ae:cc:47:84:bc:50:91:a4:02:17:33:97:8f:9f:35:af:2f:
9d:2a:f2:eb:e7:1b:cb:a3:f8:ea:94:37:7d:c3:88:70:ba:a1:
ab:48:4e:35:43:f5:95:58:35:ef:a9:0b:42:ed:6b:2c:fc:6d:
c7:6b:61:1a:96:ad:7e:e3:a7:c3:a5:99:0a:8f:a5:52:46:c1:
99:c0:79:d5:bf:75:44:0f:84:1f:70:50:93:7c:a1:39:2d:04:
8a:e3:14:a0:14:97:76:59:41:0e:d0:55:77:8b:1f:3f:70:92:
15:f6:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:22 2025 by rpki-client