Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
File: tDlkbascuAzWConx-qE0bzlSO_o.mft (raw, json)
Hash identifier: CJ6XPy9v1PcU70RE9NDmTUlDsCeaIv2PSgw3sCIZCYU=
Subject key identifier: 26:2B:05:A7:8C:33:FE:AA:46:E9:09:02:2F:39:14:A6:94:9F:C1:89
Authority key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
Certificate issuer: /CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Certificate serial: 0198D660F6C0B476254B81A203D989929FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: tDlkbascuAzWConx-qE0bzlSO_o.crl (hash: kvJvNlbGIsAjgZd5a3UENK+MV3IFFu3mBQidlUr82iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f6:c0:b4:76:25:4b:81:a2:03:d9:89:92:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=262b05a78c33feaa46e909022f3914a6949fc189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:47:ef:9e:fb:2f:dc:0d:ab:ad:e5:0a:76:
19:6b:09:59:6c:45:b1:c4:1d:54:80:8e:d5:67:53:
f5:e5:cb:3d:19:6c:90:ac:25:39:d6:c9:fd:57:18:
9e:47:9d:19:bc:2e:bc:3f:90:3c:30:c2:12:eb:1a:
eb:6f:77:6c:3b:d7:3e:ee:5d:c5:73:c1:c6:61:b3:
bb:a5:85:43:4f:a7:a5:40:3d:c6:d9:37:56:14:dd:
31:b0:99:30:47:5e:bb:3e:96:df:ae:e3:d5:43:aa:
ca:b0:41:cb:cf:29:ad:f2:1e:88:bd:82:83:ff:8f:
a5:c3:1a:fa:cc:e9:4c:ce:4e:22:56:16:75:b6:24:
d7:86:0e:88:2a:80:4a:96:4f:f0:0e:8a:ef:90:cf:
ff:3e:5a:8e:e6:52:45:21:be:9b:5f:ee:a6:7b:d4:
52:fa:6d:86:6a:02:70:cc:29:a0:38:d7:64:90:a8:
33:dd:23:98:17:c6:b3:43:3c:95:28:02:cd:18:da:
eb:e5:55:bf:08:e7:5c:53:c0:f8:6c:fb:fe:26:3b:
ae:30:3e:27:fa:ce:5f:f1:9d:80:b4:20:45:e8:6f:
c6:f5:53:89:47:8c:08:a8:1c:ca:b1:43:e8:26:b3:
28:8e:de:61:42:ee:87:ef:11:2d:62:06:9c:46:32:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:05:A7:8C:33:FE:AA:46:E9:09:02:2F:39:14:A6:94:9F:C1:89
X509v3 Authority Key Identifier:
keyid:B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:00:59:23:98:1f:ed:72:6b:e2:f3:4b:1e:78:e6:49:ec:
ab:14:0a:ac:24:06:80:bf:ec:5b:76:13:57:74:a8:5e:f5:2b:
0a:39:56:11:0f:79:18:f9:b3:73:d3:fa:05:17:7a:d9:82:ec:
ba:d7:cb:52:4c:6a:99:17:0f:79:41:d3:75:36:85:d3:69:93:
b9:f4:c6:3d:d2:ed:ef:24:ad:ba:c4:a6:91:7d:41:fe:67:70:
28:bb:8f:17:f6:89:8e:d0:2a:ab:e1:7b:d3:c2:83:16:4d:3a:
9a:e8:78:4a:47:8e:42:32:10:0c:70:d0:09:03:87:f7:63:1f:
32:83:59:2b:e1:a3:e6:3e:a7:94:a9:73:2f:9f:9f:5a:a2:3d:
9b:c4:1e:53:b3:73:66:8b:30:d5:c5:ff:5c:83:fa:e0:d7:f4:
7b:73:03:a3:59:4a:c7:29:0a:eb:40:15:0e:7e:b9:9e:d6:a8:
5b:2e:e1:29:93:2c:5b:da:b9:c1:6c:3c:3a:69:df:c6:1b:b8:
32:13:04:44:be:37:6c:65:f5:b1:6e:86:e3:cb:2a:fa:b6:cb:
31:e8:1c:b1:42:4a:4b:26:5f:84:05:6a:6d:ad:2d:b6:dc:97:
a2:ba:7f:ce:27:a1:b8:09:d8:92:df:79:3d:db:e0:2d:82:31:
9d:c4:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:02 2025 by rpki-client