Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: FWPD9cIhJtzKfiwVBaEsXprLvbV8CaLeLkVUC/QLORw=
Subject key identifier: 5D:2B:E1:DE:E1:F0:09:E0:A5:0F:4E:CC:42:AA:0F:7F:B3:09:FA:CB
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 0198D4E00834CDD0EBDBD1FF28DBB8CDA76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 125A
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: mTpyhpqFKFvlHZ/5cC35YejfH/4J3mQAFP0t9vML/7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:34:cd:d0:eb:db:d1:ff:28:db:b8:cd:a7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=5d2be1dee1f009e0a50f4ecc42aa0f7fb309facb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:fc:5e:be:93:a9:34:0b:2b:89:37:4d:7d:
80:2f:82:37:ec:73:a6:70:ea:ac:99:4e:a9:94:43:
47:01:8d:5f:60:d3:9a:36:5f:93:cd:1d:88:c4:95:
35:de:7c:07:06:0b:f6:da:e1:6c:4e:72:1f:28:57:
e6:c0:30:ce:e1:c9:e6:60:ff:d4:fb:fe:23:3c:a4:
b9:3c:48:de:b1:de:dd:e0:bf:da:22:e1:41:88:8d:
81:12:ad:67:4d:00:a4:a3:52:7c:ce:aa:ba:31:61:
d9:ff:ba:8d:10:cb:5e:e7:85:b0:6f:a3:05:69:87:
e7:7f:98:e0:cf:90:32:5a:af:f5:b2:13:89:49:f4:
38:13:f7:a0:5d:e2:32:ec:16:6a:d8:73:9f:cb:56:
2e:d6:81:a8:c1:7b:19:49:fe:d0:c8:fe:92:cc:85:
d8:40:0c:b3:0b:6f:f1:60:0f:ee:bf:f9:90:03:76:
67:bf:5c:c9:76:cf:20:c9:04:08:e1:be:56:8f:9c:
56:e5:a7:bd:74:e3:1d:f3:15:29:62:79:76:f6:1c:
7b:35:34:72:f5:e9:78:98:4e:7e:a3:d9:91:5f:41:
20:08:6e:be:53:b4:13:b4:a6:d9:e9:63:f5:c0:09:
3c:ea:a3:cd:65:09:b7:c2:f1:30:29:c0:3a:e2:92:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:E1:DE:E1:F0:09:E0:A5:0F:4E:CC:42:AA:0F:7F:B3:09:FA:CB
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:94:48:ab:3e:9a:f8:ec:e1:b2:dd:26:a1:de:70:63:18:
74:86:03:c3:b9:24:c8:c8:5a:25:5b:3d:66:c4:cb:05:35:e4:
d1:97:8d:a4:c7:fa:1f:0a:0d:36:be:82:8e:55:c3:31:df:cf:
71:7c:1c:5f:6e:58:53:82:e6:68:8c:f5:b3:c1:06:11:f9:4d:
3d:cf:da:41:ad:32:78:8b:0e:8e:ab:ea:b0:9c:c1:39:11:82:
f8:2d:c6:16:fb:a0:12:c3:0a:4d:df:75:1b:1a:90:8b:82:a4:
d6:e5:6c:2e:48:16:2d:dd:2e:09:50:3a:22:54:03:25:21:e3:
f1:f6:11:25:04:bd:70:eb:41:57:c2:cb:60:d0:66:34:41:ba:
2a:4a:e8:c0:9d:01:e4:18:89:20:32:52:d1:73:73:6c:33:94:
c7:b3:d7:51:98:81:38:01:e4:93:41:4c:4a:d6:2f:3e:2e:f5:
48:48:8c:27:2d:60:b7:31:12:00:6e:4f:e3:f3:6a:6b:5b:67:
81:65:85:c2:03:2e:f9:e8:04:66:d6:bf:f0:0c:21:09:c6:36:
ab:05:99:5b:d9:26:ff:a4:69:d6:e0:c1:b7:0b:2f:64:a2:2c:
2b:4a:c7:84:6b:2c:25:79:e2:64:bf:d4:e8:62:41:fb:1b:03:
fd:b8:a0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Ag0zdDr29H/KNu4zadtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjUwODIzMDMwMTQ4WhcNMjUwODI0MDMwMTQ4WjAzMTEwLwYDVQQD
Eyg1ZDJiZTFkZWUxZjAwOWUwYTUwZjRlY2M0MmFhMGY3ZmIzMDlmYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLr8Xr6TqTQLK4k3TX2AL4I37HOm
cOqsmU6plENHAY1fYNOaNl+TzR2IxJU13nwHBgv22uFsTnIfKFfmwDDO4cnmYP/U
+/4jPKS5PEjesd7d4L/aIuFBiI2BEq1nTQCko1J8zqq6MWHZ/7qNEMte54Wwb6MF
aYfnf5jgz5AyWq/1shOJSfQ4E/egXeIy7BZq2HOfy1Yu1oGowXsZSf7QyP6SzIXY
QAyzC2/xYA/uv/mQA3Znv1zJds8gyQQI4b5Wj5xW5ae9dOMd8xUpYnl29hx7NTRy
9el4mE5+o9mRX0EgCG6+U7QTtKbZ6WP1wAk86qPNZQm3wvEwKcA64pJZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0r4d7h8AngpQ9OzEKqD3+zCfrLMB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIaUSKs+
mvjs4bLdJqHecGMYdIYDw7kkyMhaJVs9ZsTLBTXk0ZeNpMf6HwoNNr6CjlXDMd/P
cXwcX25YU4LmaIz1s8EGEflNPc/aQa0yeIsOjqvqsJzBORGC+C3GFvugEsMKTd91
GxqQi4Kk1uVsLkgWLd0uCVA6IlQDJSHj8fYRJQS9cOtBV8LLYNBmNEG6KkrowJ0B
5BiJIDJS0XNzbDOUx7PXUZiBOAHkk0FMStYvPi71SEiMJy1gtzESAG5P4/Nqa1tn
gWWFwgMu+egEZta/8AwhCcY2qwWZW9km/6Rp1uDBtwsvZKIsK0rHhGssJXniZL/U
6GJB+xsD/bigmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:52 2025 by rpki-client