Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: cUdgyBrfR53YUoTf6v5fhkVHRvIC1EI9CIgn33ebIak=
Subject key identifier: 06:17:88:DE:A2:6F:C2:DC:8D:39:43:5D:81:A8:C2:D7:3F:09:F0:0E
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 01992255BCA2507393AD667791DF605C7B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 056D
Signing time: Sun 07 Sep 2025 04:01:08 +0000
Manifest this update: Sun 07 Sep 2025 04:01:08 +0000
Manifest next update: Mon 08 Sep 2025 04:01:08 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: Md6K1qF22rhU9BqweX6oR8wFdyC4PZsQzjizy3PD8TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:bc:a2:50:73:93:ad:66:77:91:df:60:5c:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Sep 7 04:01:08 2025 GMT
Not After : Sep 8 04:01:08 2025 GMT
Subject: CN=061788dea26fc2dc8d39435d81a8c2d73f09f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:76:e1:58:fb:16:25:5f:0c:82:dc:b3:dc:
88:f7:22:13:9f:8d:e5:35:68:24:6e:82:d1:28:6f:
16:31:b6:9b:75:d7:61:ec:65:4a:a0:ea:1d:f5:ef:
35:92:28:32:96:b5:9e:23:dc:51:ed:34:33:d6:0e:
77:ec:c5:49:03:4f:c6:fc:c3:1f:46:19:d1:dd:14:
0a:60:a8:81:67:03:dc:41:2d:a5:3b:0c:8e:c2:35:
d9:91:32:49:de:c6:5b:02:20:7e:20:af:37:42:60:
f0:5f:5c:f8:f7:ea:22:8a:1b:a7:54:18:c8:c3:c3:
40:c1:00:64:e7:fe:65:72:1f:19:2c:1d:55:df:d3:
43:a1:6b:8a:62:bb:3f:6c:47:d3:1c:b0:e0:51:3b:
a9:79:37:9a:a6:de:b7:35:f3:8d:d7:d5:8d:d9:e5:
f5:59:94:c5:f3:5d:0c:95:7d:ca:6d:d2:4c:71:6f:
5f:5b:be:04:13:83:86:2e:4d:a0:25:f8:f2:a4:d6:
c9:34:9f:24:d5:2f:45:8c:a3:8f:7d:ab:cc:2d:ad:
b8:57:51:f2:b2:7b:51:7d:19:94:9c:cc:8f:5c:fb:
d0:5c:44:76:5b:9f:ba:b7:b5:98:8d:38:5c:82:89:
5a:67:02:bd:2d:36:17:a1:88:1e:d9:a1:32:b1:be:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:88:DE:A2:6F:C2:DC:8D:39:43:5D:81:A8:C2:D7:3F:09:F0:0E
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:d4:5e:75:e3:9d:10:c1:9c:e0:77:f8:54:00:61:99:1c:
98:9c:d5:70:ed:2b:08:32:6e:cb:b3:8b:c7:c4:f5:94:aa:8c:
55:f1:fa:51:22:9e:ab:ed:69:84:b6:4d:74:af:83:76:d2:66:
d5:d7:4a:6f:df:6d:81:0a:e8:a2:16:05:07:58:24:16:f4:5a:
b1:e4:43:a8:71:71:6b:76:27:45:43:50:77:c1:85:cd:cb:76:
52:a3:be:97:e8:06:30:97:40:01:82:d0:56:65:c9:c5:ab:74:
8c:33:ad:76:ef:7d:b6:86:64:f6:e4:f4:46:b9:b5:63:81:c1:
19:71:6a:86:d9:99:ed:03:46:ce:c6:2b:65:57:f4:c6:3f:e5:
ac:2c:43:9f:f1:dc:f2:ab:d7:8d:2f:dd:5c:4c:1b:e5:76:b4:
d1:d8:3c:31:8d:65:d5:f9:e9:94:66:79:cc:78:60:f8:9e:cf:
88:71:ce:78:0d:1f:e0:5c:81:61:36:27:6c:53:60:28:9b:c1:
81:81:64:f2:e6:d6:8c:97:01:ec:f7:21:3d:b9:ed:39:f3:1e:
3a:a6:1a:64:95:62:0a:af:1f:88:ad:69:ab:26:c8:fa:3f:f4:
28:3c:90:1d:f1:d5:94:0e:ea:4c:94:de:97:6e:1e:93:ff:ca:
d0:97:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:34 2025 by rpki-client