Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: /RWjmFVAx85UxG1PZVLXJEd5uoWnVOdwJf51ZL/e4PI=
Subject key identifier: EA:3C:80:A5:32:2D:77:15:2A:9C:09:10:D7:4C:41:FA:EB:AD:64:D1
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0199FC8F4192D966C67D2F3126C24E380361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 05DE
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: yslifwkwDir22pc0a8avsYL3kMRS98l4dUSvvezAlME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:92:d9:66:c6:7d:2f:31:26:c2:4e:38:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=ea3c80a5322d77152a9c0910d74c41faebad64d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:26:e5:3a:4d:dd:6b:cf:b7:a4:c3:de:e1:
96:d8:24:b9:bc:2d:9c:2c:30:e3:f3:30:fb:a1:1b:
e6:c2:8e:9c:8f:6e:8a:2d:10:7a:ec:8f:0c:f4:2b:
01:8a:2f:24:f2:d3:9b:cd:6f:43:81:ae:e8:d8:ee:
ba:71:70:a1:f2:47:a2:ca:6a:5e:e2:8f:46:3f:f1:
d2:dd:66:73:6c:ff:b1:83:82:e1:0f:73:60:8c:2e:
fc:14:7f:b2:9f:4c:7d:b2:72:b4:6f:6b:36:94:b4:
dd:d0:76:42:1d:c5:06:a0:78:8c:38:5c:c2:79:69:
57:cc:80:e9:76:15:86:bf:a4:6d:27:44:a9:b0:ac:
57:9d:ae:2b:3d:26:d4:13:64:87:74:3a:6b:3a:61:
99:10:16:dc:03:8f:14:f8:b5:0f:22:67:74:d6:23:
c9:47:93:5a:d9:60:d7:e0:ee:ce:27:75:b4:b1:df:
22:fb:90:03:07:78:62:c8:40:e0:56:75:9f:61:76:
d6:d7:21:6c:9c:d0:fa:55:ec:74:85:46:32:1a:25:
64:c5:49:98:00:96:4b:7e:45:2e:98:e1:69:b6:27:
0b:ad:10:cb:68:f3:ad:b0:8b:16:98:e7:d8:48:2a:
a3:6d:3f:06:46:ea:b7:29:14:50:3b:94:dc:1d:47:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:80:A5:32:2D:77:15:2A:9C:09:10:D7:4C:41:FA:EB:AD:64:D1
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:a0:7c:b5:5c:e4:d3:74:72:f1:37:51:ab:b7:c1:34:22:
ae:e6:66:68:6c:42:c2:12:8f:fc:02:f7:ff:7f:1b:92:58:6a:
94:32:95:70:cb:a0:9d:47:28:42:ea:66:0a:06:b7:44:fd:12:
36:2e:f2:1d:22:78:78:af:95:05:54:57:e4:c8:9c:e9:17:8f:
a0:80:f1:d7:ac:3c:1b:33:17:af:62:63:51:cf:19:6b:f1:f6:
cc:85:4c:18:d2:9f:d6:7a:99:ec:ae:3b:96:fb:5f:54:e8:6c:
30:af:61:b6:5e:da:77:56:36:eb:05:f2:61:d1:62:f8:03:cc:
93:20:09:67:2a:6b:03:fd:b7:3a:f8:50:78:bb:ab:0b:72:4d:
5e:a6:33:55:fc:c2:bb:9e:93:d2:50:0c:00:57:b3:bd:7a:08:
8c:59:a9:9e:e2:25:af:1b:11:b0:05:bf:59:e6:75:76:69:fa:
46:f6:8b:d0:4e:79:6c:a5:d8:a3:f9:56:77:56:ea:48:6f:d3:
f5:12:7f:f3:e7:51:19:9e:b3:13:9f:dc:71:a6:a4:06:18:3e:
7f:71:d9:03:82:0c:a6:85:67:bb:ad:6a:09:2b:3e:f4:60:cc:
b4:b5:96:3a:22:e5:99:82:44:e1:8b:e7:22:f6:fe:57:cf:98:
3b:1b:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:23 2025 by rpki-client