Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: LnuFXMxWA/gLXbynaVcqA6lLysqmMHAP0R1QGd/Y4DA=
Subject key identifier: D9:05:4C:D5:15:33:F9:FA:D5:56:21:F5:59:71:A8:F6:F4:F7:F7:5F
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 0198D73AE7AC6F6B0BAADFEE15E041DBEC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 0239
Signing time: Sat 23 Aug 2025 14:00:18 +0000
Manifest this update: Sat 23 Aug 2025 14:00:18 +0000
Manifest next update: Sun 24 Aug 2025 14:00:18 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: l0RpYRQTmMVWIqr8+rjaeceRWO7+T4VmRIA8ZKPOvTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e7:ac:6f:6b:0b:aa:df:ee:15:e0:41:db:ec:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Aug 23 14:00:18 2025 GMT
Not After : Aug 24 14:00:18 2025 GMT
Subject: CN=d9054cd51533f9fad55621f55971a8f6f4f7f75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:3a:48:89:4a:23:bc:20:94:c5:b9:70:4f:
f3:fc:ae:13:83:0d:a2:e2:80:a9:97:8e:47:e6:78:
90:46:59:53:d3:33:24:2e:34:bb:25:c6:53:ca:7d:
2f:85:69:6a:05:04:23:1d:96:36:69:e8:23:a4:13:
71:4e:84:31:55:5d:fc:c2:28:90:18:e1:96:c7:3a:
b1:58:56:21:10:41:c9:b3:ab:e8:86:b8:1a:a3:08:
5c:45:69:9b:53:e5:b7:b3:e5:34:dc:a3:cb:b9:b9:
78:0c:a9:56:c1:18:84:1f:6b:17:e7:4b:86:82:46:
cc:fa:1d:9c:ea:20:6a:72:9a:46:5d:3e:6a:ca:9f:
fc:60:f0:67:9d:64:27:c2:2c:22:e1:b0:1b:b8:01:
74:ba:e9:7b:9d:91:ac:8e:97:73:ba:40:32:af:3d:
48:6a:cb:59:2e:4e:b2:c2:b0:23:48:bb:fb:c0:9c:
47:7d:9d:cb:d3:e8:7a:0e:2b:1e:74:d9:c2:79:78:
08:ce:a4:72:6c:d8:4b:b0:65:ac:ec:48:09:4b:d7:
ab:10:70:01:2c:1d:6d:b4:8b:4a:9d:4e:b4:81:a7:
aa:26:8d:4d:05:db:77:8d:44:63:6f:7c:ea:1c:4c:
63:87:73:aa:05:4c:a9:f7:e5:6e:f2:de:8d:d9:a9:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:4C:D5:15:33:F9:FA:D5:56:21:F5:59:71:A8:F6:F4:F7:F7:5F
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:2f:7d:4a:3f:c7:ef:60:ae:61:0b:9b:33:66:80:30:15:
fe:0a:be:a4:a2:7e:2f:f7:68:bd:d8:60:be:d1:7d:2f:6e:53:
83:e7:a8:a6:9b:14:58:b3:49:37:57:c1:49:95:6b:26:e4:88:
0a:4c:e5:e5:42:32:92:f7:1f:0b:9e:c5:36:fb:6e:18:14:33:
49:cf:91:15:d8:f8:69:53:a0:bc:dd:1f:f4:48:9e:61:32:75:
41:5b:11:e6:d5:34:47:d7:2c:be:38:85:dd:8a:7e:db:fb:f2:
ec:7e:f2:b9:ed:ef:56:2f:c5:5e:8a:d8:af:d7:1c:11:ff:95:
f8:0c:66:f1:0c:4e:c7:9e:b8:df:60:97:d9:61:b7:e1:7a:84:
83:60:7d:d3:a5:ef:d3:2b:75:d5:1c:08:e4:ce:85:8c:f2:67:
48:94:8c:eb:96:72:76:20:ca:52:3f:9d:e2:ba:63:7c:51:27:
a4:b0:9c:14:57:fb:41:ee:a3:68:86:0b:c5:f5:17:26:bc:60:
e2:c5:29:81:5c:44:4d:8e:51:de:2f:84:63:9c:d9:3a:e5:f5:
23:32:81:10:2e:f7:e5:ab:f3:e8:39:df:8e:8c:0e:6b:f0:3e:
93:d6:b6:f2:77:9d:4a:b0:f1:19:1a:b8:33:fa:44:d0:51:99:
88:f8:e6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOuesb2sLqt/uFeBB2+wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTgwNWFlYTg2MDMwYmFjZGQwYmEzZTRlNDI0ZTFiYWVm
MDgyNGQwHhcNMjUwODIzMTQwMDE4WhcNMjUwODI0MTQwMDE4WjAzMTEwLwYDVQQD
EyhkOTA1NGNkNTE1MzNmOWZhZDU1NjIxZjU1OTcxYThmNmY0ZjdmNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArig6SIlKI7wglMW5cE/z/K4Tgw2i
4oCpl45H5niQRllT0zMkLjS7JcZTyn0vhWlqBQQjHZY2aegjpBNxToQxVV38wiiQ
GOGWxzqxWFYhEEHJs6vohrgaowhcRWmbU+W3s+U03KPLubl4DKlWwRiEH2sX50uG
gkbM+h2c6iBqcppGXT5qyp/8YPBnnWQnwiwi4bAbuAF0uul7nZGsjpdzukAyrz1I
astZLk6ywrAjSLv7wJxHfZ3L0+h6DisedNnCeXgIzqRybNhLsGWs7EgJS9erEHAB
LB1ttItKnU60gaeqJo1NBdt3jURjb3zqHExjh3OqBUyp9+Vu8t6N2an0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkFTNUVM/n61VYh9VlxqPb09/dfMB8GA1UdIwQY
MBaAFE6oBa6oYDC6zdC6Pk5CThuu8IJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTBhYzktNTM2Ny00MjMyLWIxMzct
Nzc4ODczYTI3MjZjLzEvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mOTBhYzktNTM2Ny00MjMyLWIxMzctNzc4ODczYTI3MjZj
LzEvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/MvfUo/
x+9grmELmzNmgDAV/gq+pKJ+L/dovdhgvtF9L25Tg+eoppsUWLNJN1fBSZVrJuSI
Ckzl5UIykvcfC57FNvtuGBQzSc+RFdj4aVOgvN0f9EieYTJ1QVsR5tU0R9csvjiF
3Yp+2/vy7H7yue3vVi/FXorYr9ccEf+V+Axm8QxOx56432CX2WG34XqEg2B906Xv
0yt11RwI5M6FjPJnSJSM65ZydiDKUj+d4rpjfFEnpLCcFFf7Qe6jaIYLxfUXJrxg
4sUpgVxETY5R3i+EY5zZOuX1IzKBEC735avz6DnfjowOa/A+k9a28nedSrDxGRq4
M/pE0FGZiPjmKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:14 2025 by rpki-client