Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: XwwuWmJbwDSge3hG2akHY4f9GTuWgpdkhRgt/o9Hb2A=
Subject key identifier: FF:30:C7:FE:D5:1D:4D:AE:06:A8:09:C8:86:84:D9:08:CB:DD:EC:3E
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 019771BFC772E4FF21B621E6467AED29292A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 048D
Signing time: Sun 15 Jun 2025 04:01:23 +0000
Manifest this update: Sun 15 Jun 2025 04:01:23 +0000
Manifest next update: Mon 16 Jun 2025 04:01:23 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: 5g2efhzT+Z9WHn9+uvjOMinrG8bukLBSb7fX0Ie/XoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:c7:72:e4:ff:21:b6:21:e6:46:7a:ed:29:29:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Jun 15 04:01:23 2025 GMT
Not After : Jun 16 04:01:23 2025 GMT
Subject: CN=ff30c7fed51d4dae06a809c88684d908cbddec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:74:d0:76:fd:b4:1c:16:4a:ac:47:31:37:
4a:7d:50:4b:00:d8:69:88:39:b6:44:ae:08:2f:15:
39:c5:4e:c8:da:ae:3b:1d:5b:a3:33:73:a7:09:8e:
1f:48:7e:02:fc:a7:5a:b8:fd:98:92:ce:c7:b0:1f:
b6:a1:77:2e:58:6a:d8:49:8b:f8:e9:1e:50:96:d2:
05:6e:06:ff:cf:7c:05:09:a9:20:72:2f:d0:49:03:
1a:8c:05:76:b0:84:a7:31:48:f4:7d:42:a0:dc:5d:
63:61:67:ec:1c:da:e6:cf:60:34:a9:e0:2a:3c:4e:
e0:37:f0:6f:98:80:e2:9e:27:3f:53:5d:b0:95:2e:
a0:97:2b:04:d3:90:8b:95:80:a2:f5:17:e0:6a:df:
c3:41:af:88:9f:dd:12:13:67:bd:97:53:17:19:7b:
fa:12:ad:87:69:71:e3:eb:26:96:4e:16:8d:af:c8:
3a:b3:56:b1:d8:d2:00:f4:3d:9a:35:92:7b:2e:f1:
ee:31:5c:74:71:84:38:40:e6:e7:46:36:92:f5:c6:
71:5a:0f:3e:20:2a:f6:28:e2:d5:52:e0:a4:b9:4c:
18:4c:33:1f:25:d8:3f:4b:c0:cc:85:5e:15:62:6e:
90:10:ba:e7:4b:8f:cb:34:12:2c:26:c5:a2:30:a9:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:C7:FE:D5:1D:4D:AE:06:A8:09:C8:86:84:D9:08:CB:DD:EC:3E
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:70:18:fd:a8:c8:c8:76:07:22:b6:0a:64:56:9e:9a:cb:
12:82:f0:4b:72:08:b1:f1:de:d3:08:5a:6a:3a:64:64:63:0f:
d8:e1:bf:37:74:0a:d4:7a:ef:67:ad:f0:1b:19:46:21:0e:e0:
4f:ea:3a:7e:af:7a:4a:64:08:48:09:ef:b9:2a:69:f5:ce:41:
a8:84:1a:0e:d7:4b:c5:71:fd:95:ca:bb:3d:ea:5a:7f:70:1e:
a2:db:f6:27:0c:62:21:22:c2:a7:32:d0:05:ab:3f:08:aa:f2:
c3:cd:14:de:cd:81:a1:93:68:c1:44:d7:65:e4:77:83:bd:16:
52:59:b9:42:14:2c:37:7d:d3:ef:f8:d1:91:b9:31:39:51:fa:
f9:2e:34:6f:db:a7:a4:e6:51:25:16:39:bf:fd:8a:2d:1f:ac:
94:f1:bf:59:91:69:87:9e:4c:37:fd:6a:18:ed:ca:58:57:08:
16:8c:c0:28:1a:e4:0f:bd:77:d2:4d:d8:34:07:0f:fc:e9:39:
36:2b:6c:40:76:49:c4:d2:80:7d:d0:66:a8:71:84:78:b5:a6:
d6:d9:b7:47:50:4d:ac:46:29:ea:31:90:d4:6c:ab:0d:e4:f1:
d8:59:9d:51:65:35:53:3d:a6:23:c9:05:17:37:e3:3a:e7:33:
e4:c7:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:19:05 2025 by rpki-client