Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: gxLvUxIbphFWSlO78s+I4BoCgIIzTJj5nXi7ng10k7E=
Subject key identifier: D1:7A:38:B2:E5:BF:5D:5A:52:B7:7C:8A:FA:B5:5C:8A:24:3C:00:47
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0197493154150D01FB4E74E8F67CEB898389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 0478
Signing time: Sat 07 Jun 2025 07:00:58 +0000
Manifest this update: Sat 07 Jun 2025 07:00:58 +0000
Manifest next update: Sun 08 Jun 2025 07:00:58 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: Ua8Vr0emVTZSD0nGFprzXEskBwt4ucBVMnhsBlHY/ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:54:15:0d:01:fb:4e:74:e8:f6:7c:eb:89:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Jun 7 07:00:58 2025 GMT
Not After : Jun 8 07:00:58 2025 GMT
Subject: CN=d17a38b2e5bf5d5a52b77c8afab55c8a243c0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:6d:a9:60:f5:1b:37:09:3d:bc:af:6b:00:
40:bf:7e:b4:d5:22:ca:76:f9:c1:e3:4b:87:a8:fd:
43:e9:36:9c:b0:b8:28:1f:4c:7f:2e:80:57:ba:c8:
3b:a7:65:07:61:2b:de:04:09:6d:8b:14:af:f5:01:
1c:29:02:e4:4d:d5:ea:c2:83:3e:ba:3e:70:57:19:
b2:0f:1b:43:60:d3:e8:69:83:94:c3:59:c8:4f:92:
fd:1b:54:fc:5f:ac:84:2e:00:08:f1:39:9a:57:40:
bf:0f:53:7c:f4:ca:9e:3d:08:bb:39:6c:a7:85:fa:
f9:68:f0:16:15:35:ca:c6:a7:8a:15:8d:43:bb:bf:
69:24:d5:19:79:6c:f3:82:a5:a8:cd:8d:ed:76:72:
b1:2c:5f:2a:bf:b1:23:ed:d3:94:2a:56:23:05:7d:
c3:a1:a7:5e:4a:49:d2:e5:57:65:fb:af:6f:f0:bd:
0c:e7:c6:4e:3c:57:54:7e:20:d7:a9:d4:2b:de:51:
f4:ee:fb:31:58:94:ec:a4:39:13:ec:52:ad:0b:96:
51:6a:35:eb:44:4c:4f:b0:99:84:3b:11:cd:98:52:
ad:5e:37:66:5c:3d:35:a5:63:22:aa:ca:8b:27:b7:
e4:ce:30:bb:91:87:e8:af:96:49:d0:58:e8:87:71:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:38:B2:E5:BF:5D:5A:52:B7:7C:8A:FA:B5:5C:8A:24:3C:00:47
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:e3:7e:43:e2:57:04:75:ae:23:c3:97:cc:02:7b:84:22:
19:0e:00:7b:09:45:e3:03:3c:c4:5e:09:ae:70:07:a4:da:23:
75:9f:dc:12:c3:66:16:7f:4e:af:d9:d8:eb:79:df:9f:ad:d0:
3b:49:61:f5:e0:6d:82:b7:6a:55:9b:3b:22:3f:1b:82:60:a1:
7b:8d:66:c4:77:9b:6e:4d:0f:af:2f:f5:83:75:51:82:d8:fd:
71:36:e1:95:48:29:66:db:bd:24:2c:f1:34:1c:cb:f6:ce:2b:
80:c5:4d:bc:84:d5:2e:b5:58:e0:d0:62:32:20:34:fd:a4:44:
7d:e8:08:0a:86:a2:00:d1:03:5f:8f:6c:f6:35:8a:b3:e2:a0:
9f:3a:b4:1b:2d:1b:51:07:53:6f:92:a0:26:a5:33:9f:26:a6:
4e:4d:57:f2:2f:9d:45:5f:8e:05:ca:d1:b6:22:80:07:18:b3:
c1:2b:80:3c:08:43:5c:b8:e2:f1:bb:5d:9b:73:c1:f6:f4:6c:
b4:ef:65:08:f3:06:a8:f5:1b:39:43:53:52:0b:30:26:df:8f:
a3:c7:5b:40:c8:4b:1f:3d:60:75:ac:16:65:69:40:8a:53:4b:
42:a3:a7:a8:75:b6:4a:42:72:4b:43:44:52:81:0f:e7:d3:64:
de:66:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:37 2025 by rpki-client