Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: Hog52R5LKI4RXB1zdWzUp/sIBvvPb/5ALk5tw8fatDI=
Subject key identifier: 19:DA:15:0C:AF:F6:17:A0:1C:C7:AE:AA:BB:45:75:39:CE:C1:F9:5A
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0198D515BC8661E00A08FA40D1065447CDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 0545
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: cqZiVj6o94k/7TpDsUVT0qa8elLfkr9RQyPwcYoRBhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bc:86:61:e0:0a:08:fa:40:d1:06:54:47:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=19da150caff617a01cc7aeaabb457539cec1f95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:d6:9e:14:03:52:9d:7d:57:54:e5:56:92:
2c:d0:fa:41:8f:70:20:09:82:c8:86:bd:cf:19:19:
f8:d8:75:63:b9:fe:8b:6f:38:95:b5:da:e0:17:7c:
74:0c:9a:79:a6:0e:a0:3d:a4:bf:6c:cb:16:04:ab:
0c:cc:91:71:8b:73:12:0d:40:9f:56:51:0d:6b:fc:
58:d3:fe:f5:e2:f3:ec:e3:d4:e5:38:a2:43:b8:d4:
20:57:a8:69:e2:6a:4f:b8:85:2f:d3:71:db:e4:6c:
10:19:1f:7f:6c:30:d3:76:61:f1:b8:31:44:b3:fa:
33:a5:6a:cb:47:ec:f0:16:18:eb:e3:1c:22:96:b0:
69:9e:5d:09:d4:8a:e1:48:87:2f:31:6a:aa:5f:ca:
a8:80:30:68:67:0e:5c:3f:a6:0c:ec:8c:46:8d:09:
b9:62:26:47:c0:d9:70:ac:dd:78:3e:2a:dc:c4:d0:
b1:00:8b:a8:8c:4b:ce:78:5e:ae:5c:0c:c2:4e:56:
7a:53:10:01:18:13:bb:1c:41:96:04:34:43:a4:3d:
a3:2a:c2:b2:b1:40:2b:ae:6c:0f:9d:2a:43:15:dc:
c3:e9:3e:e5:72:97:0d:19:3c:7b:36:47:a2:d7:d9:
0e:7a:3a:83:5e:56:a6:f1:dd:9a:f7:4c:6d:69:26:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:15:0C:AF:F6:17:A0:1C:C7:AE:AA:BB:45:75:39:CE:C1:F9:5A
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:10:d3:8d:38:1b:8f:2f:80:d0:f4:e5:11:f0:ef:75:0d:
64:4e:91:eb:39:1b:b6:af:e2:78:55:72:03:97:22:cb:a7:b9:
b7:7a:5d:e7:2e:08:c3:38:8a:40:8d:19:ae:29:d9:77:ef:57:
20:2f:df:fb:d1:30:e8:cc:98:3f:52:7e:34:ab:e2:90:f6:9f:
2f:7f:42:46:9f:8d:e5:58:d1:52:6d:bc:2a:e3:84:66:65:d3:
f8:5a:d0:6c:f1:b9:65:b2:5c:dc:d5:46:6a:ae:bc:c6:96:40:
71:3b:bf:b6:b2:f2:83:1f:69:41:76:b8:8f:c1:e6:69:d0:b2:
2b:19:45:13:c9:ea:34:4b:90:fc:e1:bc:4b:65:39:99:10:be:
ef:e2:66:d7:26:7a:69:1c:52:e1:da:e2:0b:63:22:03:b0:2d:
0c:52:86:2d:71:dd:bd:60:ac:ea:3e:83:5f:b6:ea:c9:06:4b:
8f:a7:d7:fa:58:87:70:53:68:a5:2b:ef:6c:f4:df:ba:0a:b6:
03:1b:ce:48:18:5a:fc:ee:8e:44:b0:a2:1a:cd:68:3c:4c:94:
5e:48:8e:98:4d:7a:57:0a:96:3f:08:5c:3b:ac:8c:5a:a0:5d:
96:ac:8c:d6:92:85:ae:14:07:e0:cb:4a:6c:6d:1d:b6:54:0c:
a6:8e:db:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbyGYeAKCPpA0QZUR823MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzE4MDJhZGY4MmI5YzZjNWYwODZhMGJjZjYwYmFmZDMy
N2M4NjUwHhcNMjUwODIzMDQwMDI4WhcNMjUwODI0MDQwMDI4WjAzMTEwLwYDVQQD
EygxOWRhMTUwY2FmZjYxN2EwMWNjN2FlYWFiYjQ1NzUzOWNlYzFmOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu/WnhQDUp19V1TlVpIs0PpBj3Ag
CYLIhr3PGRn42HVjuf6LbziVtdrgF3x0DJp5pg6gPaS/bMsWBKsMzJFxi3MSDUCf
VlENa/xY0/714vPs49TlOKJDuNQgV6hp4mpPuIUv03Hb5GwQGR9/bDDTdmHxuDFE
s/ozpWrLR+zwFhjr4xwilrBpnl0J1IrhSIcvMWqqX8qogDBoZw5cP6YM7IxGjQm5
YiZHwNlwrN14PircxNCxAIuojEvOeF6uXAzCTlZ6UxABGBO7HEGWBDRDpD2jKsKy
sUArrmwPnSpDFdzD6T7lcpcNGTx7Nkei19kOejqDXlam8d2a90xtaSYLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnaFQyv9hegHMeuqrtFdTnOwflaMB8GA1UdIwQY
MBaAFLQxgCrfgrnGxfCGoLz2C6/TJ8hlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEt
YzkxMTU2OGM4YzY0LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEtYzkxMTU2OGM4YzY0
LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdsQ0404
G48vgND05RHw73UNZE6R6zkbtq/ieFVyA5ciy6e5t3pd5y4IwziKQI0ZrinZd+9X
IC/f+9Ew6MyYP1J+NKvikPafL39CRp+N5VjRUm28KuOEZmXT+FrQbPG5ZbJc3NVG
aq68xpZAcTu/trLygx9pQXa4j8HmadCyKxlFE8nqNEuQ/OG8S2U5mRC+7+Jm1yZ6
aRxS4driC2MiA7AtDFKGLXHdvWCs6j6DX7bqyQZLj6fX+liHcFNopSvvbPTfugq2
AxvOSBha/O6ORLCiGs1oPEyUXkiOmE16VwqWPwhcO6yMWqBdlqyM1pKFrhQH4MtK
bG0dtlQMpo7bow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client