Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
File: tDlkbascuAzWConx-qE0bzlSO_o.mft (raw, json)
Hash identifier: yb79VPJeE/xsH3lVr8WpxYtLxLpRfPZgA59itLu384k=
Subject key identifier: 5D:A5:A8:5D:88:D5:20:2D:CE:37:2D:6A:3D:58:3B:E4:71:3A:CA:25
Authority key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
Certificate issuer: /CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Certificate serial: 0199FBEB480E108B5FB25208384E59BCF692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: tDlkbascuAzWConx-qE0bzlSO_o.crl (hash: 4kKzmki+pw2n1gOKNnSSXxJBo9n6zWQy7Gk7qRujRCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:48:0e:10:8b:5f:b2:52:08:38:4e:59:bc:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=5da5a85d88d5202dce372d6a3d583be4713aca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:12:78:3d:59:c8:f3:e1:31:5c:e9:05:26:
b2:f6:49:01:34:f4:e6:fb:8b:7b:67:14:81:2c:ec:
33:b3:fd:5a:16:48:af:c7:88:aa:68:da:18:da:19:
77:7a:6d:20:44:15:32:7b:33:86:d7:53:59:8f:2a:
a1:2a:f2:ca:24:6b:0a:d1:85:94:e6:d4:67:80:17:
d4:cb:6d:17:83:0c:25:33:0e:d0:66:99:ed:f9:64:
2b:a3:8a:47:71:69:d7:45:20:2d:38:f6:45:7e:6d:
28:df:9c:82:06:40:5d:c0:e1:79:80:57:4b:c2:65:
69:cd:44:e1:c8:67:89:29:14:51:92:fc:f5:ba:04:
92:3d:fa:00:53:fb:83:0d:c9:c4:4d:76:c6:84:ec:
de:4a:9c:4d:a7:ff:52:70:ed:ec:6a:5d:4e:1f:47:
6c:07:a6:b3:a5:9c:0a:d3:84:f4:15:77:e8:86:28:
54:a8:df:0b:97:75:e7:6a:c0:c2:16:3d:59:fe:86:
f9:e9:a7:d3:09:6c:b0:b7:39:8a:3d:93:6a:de:66:
c1:59:05:72:71:e4:2c:28:96:75:17:11:6e:40:60:
cf:e7:f6:74:f3:7e:6f:2a:e1:2e:83:42:bc:34:f8:
e0:60:97:68:25:9d:c9:1e:0b:d6:ae:06:54:d9:67:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:A8:5D:88:D5:20:2D:CE:37:2D:6A:3D:58:3B:E4:71:3A:CA:25
X509v3 Authority Key Identifier:
keyid:B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c8:c9:cc:37:42:2e:c5:4f:c6:c5:fa:be:e5:15:b1:61:52:
21:9b:5e:09:86:5f:d2:08:51:45:b3:18:fc:16:dc:a9:dc:1b:
66:ce:d3:ca:e8:18:09:4c:89:96:06:e6:f9:54:7f:0a:e8:4f:
0a:a1:f1:45:19:d6:0a:a3:23:9d:8b:73:20:20:8b:21:c9:2c:
2c:4b:8c:a0:12:92:d1:fc:96:86:56:f6:d3:93:8c:f8:4d:43:
fb:50:fe:01:c6:05:70:bf:bf:d9:c0:94:11:64:2b:f4:83:d0:
39:47:27:2a:e6:68:fb:f0:5a:06:b9:fa:36:1b:11:39:6b:59:
39:ba:b7:b7:c7:42:d6:b8:0e:0c:dd:6d:84:a3:93:b4:ce:74:
a4:8d:b0:88:9a:b6:68:bd:8c:42:d9:56:4c:4a:30:23:70:43:
60:ca:30:ac:f9:b0:f5:3b:a0:81:a1:99:ee:ea:49:f2:bf:bc:
a8:70:7c:fc:02:dd:ac:4c:34:60:a8:6e:52:b2:a3:01:cf:38:
ac:b3:1f:ad:b6:22:1a:4f:ff:f2:b4:c0:a5:84:f1:0d:fe:3f:
7d:76:8d:e1:70:36:f3:aa:2a:8e:b0:88:dc:5e:a9:e4:73:35:
3e:c8:c3:b6:ea:b5:1e:d6:e5:1d:f7:e3:c0:b2:bb:aa:02:b4:
7a:6e:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:59 2025 by rpki-client