Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: SffZ0Toi1EjtTm0vL+EY7SysNJTrJBLU+GpMZeKd6OI=
Subject key identifier: 37:EA:BD:90:82:28:F8:72:DC:0C:8A:70:9B:11:A3:6A:31:78:57:0B
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 0197B77C6C9A1539318849843D0FAA5D325A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 01A4
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: BwALkAgk30jEqjd/sAn0Qih0ssMSr7O1ksuyxpqwJ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6c:9a:15:39:31:88:49:84:3d:0f:aa:5d:32:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=37eabd908228f872dc0c8a709b11a36a3178570b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:18:38:16:52:e5:d6:60:70:be:0f:c2:11:
a2:c6:1d:59:2b:13:c5:f8:1d:95:98:33:9d:ac:ab:
56:e9:70:ad:55:9f:39:c8:3d:d9:44:21:31:48:f2:
dc:85:57:11:8b:d9:a2:25:89:53:20:bb:69:f6:26:
83:69:bf:e0:45:a9:c9:b2:85:39:46:90:ff:47:37:
6f:f5:71:b1:33:0f:b8:92:1a:97:00:ee:25:be:57:
78:fb:2b:ad:8e:dd:57:c5:b1:f2:d3:e8:db:8b:d2:
86:1c:31:f5:11:fd:d7:95:b3:6b:00:dd:53:64:d9:
81:66:18:3b:22:d8:31:3d:83:6a:33:88:65:3b:58:
11:d8:47:d0:91:89:c5:97:88:ee:bf:6b:b0:90:9d:
d0:76:6c:fb:b1:4b:11:6f:ed:97:9e:1b:5a:d7:9c:
ec:bc:26:0a:06:f2:0f:d8:c1:7b:ea:64:f3:ec:14:
50:88:1b:d0:6b:27:f8:43:a9:dc:ee:7c:07:f1:ee:
18:64:88:47:c7:12:01:fc:3a:aa:74:0c:da:62:c7:
5a:28:90:2e:36:12:dd:5c:1e:72:ab:ea:fa:36:45:
14:9d:b3:7a:4d:3a:14:a3:1a:f0:b5:97:15:0e:9f:
f0:df:9d:4b:5f:dd:90:31:63:a2:e5:dd:79:f5:e8:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:BD:90:82:28:F8:72:DC:0C:8A:70:9B:11:A3:6A:31:78:57:0B
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7a:ab:af:14:ad:eb:2a:2d:4f:42:fb:76:3b:7d:0b:3c:e6:
24:7d:d3:31:32:86:60:7a:45:f5:d4:71:3e:bf:cf:e0:1d:1b:
49:dd:5a:8e:ac:50:24:2b:42:2d:f9:18:54:1a:ed:c7:13:13:
25:42:e2:b6:10:62:56:f5:5a:6e:8e:68:a2:11:22:cc:fd:8a:
a3:df:fb:f7:2d:1d:ff:e4:ff:ff:0e:7d:47:11:3c:20:c3:a5:
10:31:0b:36:80:93:90:0c:3d:90:f8:02:09:b0:40:45:54:8a:
14:f9:f7:f8:7d:6c:dd:1e:ef:35:71:01:31:13:b9:9f:1f:3b:
35:f2:c5:b5:39:32:82:8f:05:4e:28:f2:4c:86:92:5e:4c:6c:
80:6b:95:63:fc:fa:8e:b8:95:39:ce:fd:ee:59:b1:29:08:9e:
b8:d9:e4:a3:a7:6c:ac:ab:bf:8e:bd:ce:d5:10:d4:42:ab:f0:
a9:5f:48:9d:97:c6:82:05:c4:15:7d:60:b9:14:8a:48:f3:29:
c2:2a:d2:cf:a7:33:b0:3b:16:e2:ac:39:55:8d:f0:b6:cd:3e:
c4:f4:b0:36:8e:fd:44:31:d1:af:0c:93:e8:7d:6a:28:61:5f:
93:ca:26:6c:28:b2:64:96:6f:01:f6:3c:22:34:b0:8c:54:a3:
d3:aa:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:29 2025 by rpki-client