Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: OmpPNqx4pzshuVl4xpj+/OC2H+3FWGwJuwcBZ7dDWuk=
Subject key identifier: E9:2C:BA:59:D1:C2:DF:21:9E:65:C7:0E:CE:FC:9A:A8:C0:05:2E:72
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 01977007A2F0460F69EE41AC42BBC089A209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 017F
Signing time: Sat 14 Jun 2025 20:00:38 +0000
Manifest this update: Sat 14 Jun 2025 20:00:38 +0000
Manifest next update: Sun 15 Jun 2025 20:00:38 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: Zn47WERORUY4UDDInbnjotYHx825LD1rfDflzwTjf0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:a2:f0:46:0f:69:ee:41:ac:42:bb:c0:89:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Jun 14 20:00:38 2025 GMT
Not After : Jun 15 20:00:38 2025 GMT
Subject: CN=e92cba59d1c2df219e65c70ecefc9aa8c0052e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:32:13:97:6c:05:c8:30:d9:77:8a:0b:df:
07:01:a7:76:87:2e:f1:9e:27:a4:52:a5:9a:47:88:
23:29:6f:a0:21:38:77:18:8f:5c:b3:03:79:ba:a6:
05:9e:41:7f:ed:8d:4b:6d:8a:b4:77:81:8b:6a:4a:
63:77:cf:31:8b:1e:77:d3:d3:87:93:a4:b3:b5:e5:
83:71:48:3c:03:66:59:74:64:3b:9a:ca:b8:52:07:
1d:33:bc:dd:f0:1d:9b:53:58:31:2f:36:85:f3:bd:
e8:cd:bc:29:28:9c:13:ba:a0:ac:a7:b9:a5:15:29:
31:c9:35:22:98:19:48:a5:cb:63:1a:9c:38:93:f9:
4d:b4:6c:b2:33:7b:ae:b7:be:06:03:56:f0:42:55:
15:ff:b4:aa:a7:79:2d:1e:42:b4:53:93:67:f0:8e:
28:90:1a:1b:3c:6d:62:f6:53:12:4c:bc:7a:e5:2b:
ff:54:6a:cd:e1:5f:32:d4:ab:44:e6:08:d0:b5:57:
63:16:cd:7f:27:17:f3:6a:fc:e8:e4:52:ee:05:39:
44:d6:70:fc:99:61:d2:e5:2e:7a:bb:98:19:b2:c6:
ca:85:b5:74:92:a0:ca:88:e3:93:d0:56:02:8c:3e:
d9:9a:94:f0:6f:46:1f:bf:1d:97:38:43:44:3f:be:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:BA:59:D1:C2:DF:21:9E:65:C7:0E:CE:FC:9A:A8:C0:05:2E:72
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:c1:11:c5:18:e5:8d:b2:f6:5f:3a:7b:5c:61:f3:e2:c0:
d1:fb:88:38:3f:43:75:af:d4:df:35:cd:35:82:2a:6e:80:dc:
a9:2c:49:55:73:15:a4:42:f3:ff:8e:0d:d1:8f:c1:aa:1b:a0:
44:81:9c:8d:67:cc:e7:37:7f:c9:03:c4:8e:d4:05:5c:92:7b:
77:4f:7f:aa:8f:c2:ca:2e:57:2d:49:b1:c0:34:9a:ba:43:43:
a0:86:2d:37:a7:4b:4d:90:7f:ea:8a:b5:05:00:94:12:d7:a6:
d5:b6:61:16:84:74:06:04:0c:55:ba:7e:98:55:c2:4b:2e:2e:
0f:f5:9c:ba:21:23:5f:b4:a3:71:9d:83:37:ac:2c:3b:56:aa:
5c:a3:f0:2c:67:0c:25:4a:8c:00:57:a8:04:ff:ee:05:73:0a:
32:52:68:52:fc:a3:82:18:ce:d9:5b:78:be:a2:ae:34:03:60:
34:1e:2b:4a:e9:fe:15:18:4e:13:b6:03:68:65:a6:66:89:f9:
04:91:91:81:0b:ec:3c:45:99:42:6f:1b:a8:85:cd:ab:d2:d5:
b1:21:14:a2:f0:45:28:cf:86:a6:df:c4:84:5b:71:a9:04:b4:
b2:e0:d7:69:7d:c9:d9:72:fe:3c:27:05:08:36:bd:12:7e:80:
db:f6:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:44:13 2025 by rpki-client