Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: sYxwokmCdzrHnPs7yXNwr6dGvBiVMhStafuKh2BqyN8=
Subject key identifier: 4D:34:EC:16:C6:AF:F5:94:71:E0:42:69:0C:79:3D:07:44:92:17:70
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 01976D3DC26C6B9CA47D8A046A7BDA5D067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 1036
Signing time: Sat 14 Jun 2025 07:00:53 +0000
Manifest this update: Sat 14 Jun 2025 07:00:53 +0000
Manifest next update: Sun 15 Jun 2025 07:00:53 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: /rkd8SEbim27aw1mhM1x6RwF4taE4DQZqp4h10FHFXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c2:6c:6b:9c:a4:7d:8a:04:6a:7b:da:5d:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Jun 14 07:00:53 2025 GMT
Not After : Jun 15 07:00:53 2025 GMT
Subject: CN=4d34ec16c6aff59471e042690c793d0744921770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:e2:97:eb:6c:0f:69:27:17:96:6d:18:55:
07:87:6b:b5:85:76:29:ab:3f:5e:b1:66:dc:36:62:
b0:e4:e0:ec:86:1d:33:41:9c:85:85:4f:ba:36:cf:
35:9b:99:c4:e1:56:10:44:0a:19:b5:e0:5d:f0:14:
ff:e5:81:66:fc:88:fe:11:d8:e4:02:2d:1f:f6:f7:
e0:02:ee:37:c7:ed:80:43:2c:35:df:a2:62:e9:49:
4d:e4:86:de:65:ac:a8:5b:f0:4a:22:82:a5:bf:de:
fd:bf:54:cd:cd:6b:08:1d:f0:17:04:95:af:05:69:
ba:52:1e:cf:35:7d:3e:de:fc:69:8e:df:ed:2e:81:
4e:26:22:a5:e7:e4:67:71:23:3a:0d:21:50:53:f6:
52:0d:fd:bf:97:04:04:06:21:b5:ed:c1:50:d8:d2:
3d:5c:97:4c:b2:2d:a3:85:89:cb:54:d7:83:0d:e7:
b4:23:3b:fd:d6:87:bd:16:04:b4:a9:a1:6a:ba:d2:
88:5b:00:38:2e:b6:36:26:4b:e3:71:c7:4e:d7:b9:
f8:17:33:b3:c7:89:b4:b4:5a:23:7a:ac:b5:82:28:
6d:b2:fa:44:f1:76:24:b7:75:2c:d4:d1:5f:1d:92:
df:0e:32:de:7e:ed:b7:60:fe:6c:db:02:c0:d7:29:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:EC:16:C6:AF:F5:94:71:E0:42:69:0C:79:3D:07:44:92:17:70
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:46:54:d9:68:07:9a:79:62:3d:8d:9b:08:41:43:50:42:
2d:28:5d:54:ec:4f:68:77:92:bb:58:66:50:73:30:6a:11:f8:
29:1a:cb:14:9f:93:bf:1f:c5:c9:62:ff:6b:78:3b:cd:5f:5c:
66:81:67:86:81:20:d8:16:ba:86:13:70:8d:53:71:0f:6b:21:
b5:a8:70:d3:be:9a:43:df:7f:61:ec:71:f4:5e:d8:c2:67:7f:
4b:a7:8f:ae:f2:a8:c2:c0:65:05:6d:cf:2a:f6:bc:ff:60:93:
b3:9a:e7:0e:ed:56:ae:a4:f3:3c:4c:e9:72:1e:d0:f8:4e:90:
4f:0b:43:40:2f:33:5c:5b:8c:86:27:2d:52:b8:b1:56:af:88:
d2:30:45:c0:3d:48:33:9f:0a:7c:e4:76:0b:f5:e1:a6:48:fd:
e3:cb:4a:45:9b:9d:24:71:68:fe:38:5e:e6:f2:2e:b6:08:b7:
f5:f3:bb:36:2e:3a:0f:2a:4c:63:36:1e:3e:b7:67:88:5a:5c:
c4:d9:fd:c4:cd:0d:b7:e0:42:16:5f:95:31:ad:07:11:c9:f5:
47:35:b1:ff:f2:0a:0a:c4:96:0f:4a:ad:55:17:6e:d7:61:1a:
a7:6c:7e:64:29:2d:fd:07:1c:51:99:57:b0:dc:06:96:3d:ef:
4b:aa:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:12 2025 by rpki-client