Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: YrpDOoySSSPvhkPuBA2ZiYdemLgGNJII9VqDWFjLAKM=
Subject key identifier: 60:8F:F6:3D:26:AB:03:02:35:5D:7B:29:E0:A3:C8:7C:59:BB:8B:91
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 0199FC58DC17FB9774764453D88B60F72036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 12F3
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: A9kRKf/mFylcKd50XUO66xtdZAk29pWS8EtyeBL2ug4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dc:17:fb:97:74:76:44:53:d8:8b:60:f7:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=608ff63d26ab0302355d7b29e0a3c87c59bb8b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:d5:3a:2c:17:0a:5e:00:a7:c8:e4:b9:8e:
b7:0c:ad:5e:2b:35:33:ec:b3:3b:94:55:d0:56:a3:
c1:84:22:72:38:f8:cf:23:b3:87:81:11:62:d6:ed:
8e:65:8d:26:6d:4c:b1:18:70:49:56:0c:04:98:4a:
e8:90:75:c5:51:d8:9e:1d:46:42:53:01:bf:21:8d:
27:48:4d:b0:32:e5:28:19:d6:91:82:29:7e:05:cc:
2f:2f:24:a5:53:e9:8c:8a:1c:84:a7:51:17:56:67:
4f:35:b7:02:ce:1b:69:09:ba:d6:a3:af:61:bc:88:
2c:63:94:04:a9:22:d0:c4:db:79:ec:7f:81:2f:b9:
fe:14:d2:cc:a6:e6:78:9d:b3:df:c9:b7:0e:c8:af:
d4:17:18:f8:5a:57:96:56:37:4a:b7:e6:50:04:a4:
a2:e8:e7:91:42:c9:a9:6e:1d:b8:de:b8:3b:5e:bb:
c3:63:8e:c3:70:b9:28:65:8c:14:ad:5a:75:db:84:
7f:da:e4:3e:03:b9:a5:e2:78:10:cc:5b:1b:62:d5:
aa:67:91:a7:0b:0a:e6:dd:de:f9:04:9b:27:58:80:
03:c0:f9:0c:69:7a:bf:75:37:99:d9:55:16:9c:f9:
65:a6:42:45:66:42:31:03:d7:02:de:bf:4b:e7:3c:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:F6:3D:26:AB:03:02:35:5D:7B:29:E0:A3:C8:7C:59:BB:8B:91
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:24:4c:34:8c:c5:d0:26:7d:a3:e8:38:0f:13:c6:8c:d2:c9:
6a:05:7d:ce:d8:83:fc:f8:33:9d:3a:0e:8f:e8:a3:b1:e6:f0:
31:c2:c8:f9:86:6b:58:1a:43:10:d0:ee:7e:d7:a5:06:16:a7:
79:ad:ed:f0:30:70:c7:f7:99:3c:b4:56:2f:3a:ea:0e:1f:6b:
2b:e2:d8:4e:af:10:13:a4:9e:de:52:e5:cd:b6:b5:30:e2:0f:
90:db:23:27:21:06:e0:0a:35:3e:cf:a5:09:e1:19:95:75:a0:
79:09:ac:8f:32:92:56:30:3f:1b:05:02:24:a9:a3:e0:26:15:
d4:59:18:4f:60:4e:70:63:7f:61:6a:19:1d:2b:eb:57:fa:de:
b6:9d:fc:51:c2:96:df:e0:d3:0f:49:ec:9b:7a:b3:b1:61:48:
f8:06:e1:8f:d3:50:b8:98:00:0f:5f:f7:65:60:ce:a0:b0:43:
23:56:dc:ff:05:e0:f0:f6:9f:46:eb:e0:54:b6:53:2c:25:51:
86:89:f5:f7:47:7b:93:3a:ec:29:47:72:7c:2a:9e:ea:64:23:
63:35:7c:f5:01:4d:eb:d6:09:74:61:9b:33:1b:88:29:89:0d:
9a:29:66:06:54:37:7d:88:f3:1f:d8:9e:34:c7:24:27:4b:06:
b8:91:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:15 2025 by rpki-client