Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: 4WCxWqqgioIS5Y7NuLx+NMCa6xOIcbUpLmuoyRIj1Bo=
Subject key identifier: 9D:81:23:1F:AF:A3:7E:51:DD:05:F5:8E:E8:93:9E:80:33:5B:CC:76
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 01987C40A4F7A8E5B8F46DB6B0A2FD3E84CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 0517
Signing time: Tue 05 Aug 2025 22:01:07 +0000
Manifest this update: Tue 05 Aug 2025 22:01:07 +0000
Manifest next update: Wed 06 Aug 2025 22:01:07 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: ug8MYiK202Z+iBtid0vjGjEMRKwWEz9W7urF9RT12oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:a4:f7:a8:e5:b8:f4:6d:b6:b0:a2:fd:3e:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Aug 5 22:01:07 2025 GMT
Not After : Aug 6 22:01:07 2025 GMT
Subject: CN=9d81231fafa37e51dd05f58ee8939e80335bcc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:67:d3:f5:09:24:b9:eb:66:13:63:6f:6e:
32:68:0b:2e:4f:43:2a:95:9a:00:e7:35:2b:a6:05:
94:5f:dc:61:5e:17:54:59:d0:ee:f6:31:a3:de:8c:
e5:db:98:00:1a:cc:96:97:d1:82:ff:c4:6a:70:e9:
36:95:55:9e:8d:b1:1f:b3:26:8c:b6:65:e1:f0:fa:
30:5b:09:ec:a0:07:e9:3f:1e:1a:1f:c3:e0:18:1e:
24:43:a8:f1:32:99:e6:19:fc:e1:92:e6:8d:36:23:
75:ed:fc:94:da:2b:6c:0e:fb:51:3a:c8:f3:70:6b:
ec:13:db:f4:14:c4:1a:0a:ec:bf:62:10:09:6b:5a:
2a:98:47:f8:b7:b3:71:4e:6f:44:23:32:8c:49:4d:
19:bd:41:fc:ab:05:18:38:fa:cd:2c:6d:be:e7:5d:
28:55:9b:b9:f3:c4:6d:9c:09:a7:da:01:f8:d7:99:
2e:e7:ae:6c:66:69:8d:34:7f:0c:8c:9f:4b:ec:ce:
55:23:b4:b4:d2:32:bd:81:34:dc:fd:d9:17:45:63:
3c:ec:cc:b9:1f:cb:4f:50:af:bd:dd:b5:10:a8:3f:
a1:15:fe:d4:92:a6:d6:1e:c0:c6:e1:ac:9b:20:c5:
e4:ee:a1:b1:dd:ea:d8:6a:0d:fa:f7:f3:5e:d0:15:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:23:1F:AF:A3:7E:51:DD:05:F5:8E:E8:93:9E:80:33:5B:CC:76
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:21:bf:36:35:ba:20:d9:c1:62:70:53:02:6e:ef:0c:c7:6b:
e7:fd:72:8f:dc:3a:85:e6:6f:3c:46:7d:e8:29:23:dd:37:6f:
72:09:ee:88:75:a6:11:a2:43:1b:18:20:5b:00:e2:30:7f:c2:
a7:d0:ca:4a:89:38:8e:c5:c1:f2:fe:d7:c1:e8:bb:9a:27:eb:
d2:83:b2:b3:80:1d:e4:a2:a5:68:25:4d:d8:53:63:10:95:03:
8e:49:81:b6:9e:2f:ea:d2:6c:ad:a9:31:cb:8f:72:14:01:54:
9c:e0:5c:77:d9:96:9b:99:e2:0e:15:a5:5c:fe:1e:63:94:87:
6c:6c:34:b3:ab:c1:fd:d7:ac:1a:b6:1f:fe:97:02:34:df:66:
3e:fc:13:86:c9:91:17:83:dd:20:44:91:92:8f:7f:f8:bc:04:
1c:75:e9:fe:fb:94:e7:72:0b:91:90:b0:05:c2:3a:d6:cd:0e:
05:f8:5a:68:2c:50:93:ae:5f:c6:87:71:ac:51:f1:4c:fa:62:
86:b3:d1:35:e5:8f:2f:98:86:fe:1e:0d:87:7a:b8:81:ab:98:
8b:4e:43:1b:df:12:5d:a1:a9:8a:a2:d3:77:63:54:f3:22:96:
d2:df:bf:81:cf:2d:e1:e1:02:71:76:4e:08:0a:9a:f1:58:f1:
f9:af:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:25 2025 by rpki-client