
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: PpZEA3ordlhn8QYLXFeOdtOcemlUumweOZxpPIehtmM=
Subject key identifier: 3E:B0:1D:76:E8:D9:C1:31:0A:95:A1:D4:82:7C:B2:7A:A9:85:1A:56
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 01988B0F5E38AF9148D0C09A1FEE884F82E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 10CA
Signing time: Fri 08 Aug 2025 19:01:36 +0000
Manifest this update: Fri 08 Aug 2025 19:01:36 +0000
Manifest next update: Sat 09 Aug 2025 19:01:36 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: cIpTpA8e1pCOZ7rjFeju9pCYqsNBOiVX8jzN3TfDSmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:5e:38:af:91:48:d0:c0:9a:1f:ee:88:4f:82:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Aug 8 19:01:36 2025 GMT
Not After : Aug 9 19:01:36 2025 GMT
Subject: CN=3eb01d76e8d9c1310a95a1d4827cb27aa9851a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:e1:88:83:fa:0b:be:c4:d9:45:ee:68:df:
77:dd:62:aa:93:94:a9:72:f0:8d:db:e5:3e:bb:1b:
0c:e9:80:9a:ac:c7:66:c6:93:32:19:9a:64:54:2e:
da:a9:cc:6c:e2:83:f5:20:0b:39:53:48:7d:17:be:
c7:f1:bd:46:0f:a4:c0:21:c6:35:eb:b6:f8:c5:55:
f6:bf:6f:8e:ec:f0:fa:91:7a:12:77:68:5b:bc:4f:
0b:17:7d:82:7f:9a:e7:57:b2:d6:79:5b:7d:15:33:
8a:c3:fd:9f:1e:ce:ea:17:85:9e:8d:0c:ee:39:42:
2f:b1:aa:6c:63:bb:f0:09:52:71:3b:c8:23:94:b9:
a1:3e:9b:03:f9:04:e2:72:93:93:96:79:45:e4:23:
6e:1d:b7:4b:40:6e:44:e5:8f:64:e5:d9:d8:33:ad:
9f:6f:0d:d5:99:02:5a:37:40:99:e6:58:1c:37:9c:
42:8a:17:c6:8d:8b:69:ed:1c:80:1c:a4:1c:ad:25:
4e:43:b2:a0:b2:e7:47:c7:2c:26:b7:9d:c2:d3:96:
04:a9:44:cc:98:0a:a5:c5:a2:23:ec:df:a0:e5:59:
49:19:e2:3c:9e:36:09:5c:bd:54:18:d9:14:eb:3f:
59:36:d4:cc:a2:25:37:e2:28:46:af:4d:24:ad:b3:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:1D:76:E8:D9:C1:31:0A:95:A1:D4:82:7C:B2:7A:A9:85:1A:56
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:b5:97:9e:60:4d:ef:33:62:d7:fd:89:58:ad:46:27:36:
b3:a3:39:5b:d5:eb:7d:ef:ef:16:1c:56:df:20:84:18:a9:b3:
3b:e4:7b:19:b5:f6:46:58:65:7d:b8:ac:7a:22:19:a0:bf:dd:
20:46:db:f7:42:b5:f4:04:aa:12:d8:17:73:32:b7:97:99:7a:
e5:91:59:1f:83:0d:77:b6:71:46:dc:7e:ae:b7:48:cb:01:7e:
19:97:c6:86:c6:a2:61:dd:2c:28:95:02:59:77:9a:d6:a4:c7:
d1:8e:00:b5:6b:95:76:13:5e:59:2b:91:2e:32:c0:12:72:22:
38:e5:c7:38:90:7b:3d:cf:dc:32:d1:51:20:ee:ff:af:76:85:
c8:a0:f2:09:e4:35:d2:db:2c:ab:74:a2:d8:f5:7b:47:2d:2a:
27:d7:ce:75:81:ae:e4:52:11:6f:78:ad:7c:e8:b8:cd:2f:99:
e4:f3:e4:6d:29:88:47:b0:09:c5:e6:fa:3e:a3:c2:e2:87:38:
74:ec:26:59:58:86:c0:92:5b:68:51:a1:92:7d:e2:b3:d8:58:
fb:81:e6:8c:21:3b:97:ca:9f:13:9c:76:84:78:ff:64:94:dc:
92:a7:60:d8:91:44:62:e7:1c:41:b7:2a:40:30:62:0e:f3:80:
f5:f5:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:46 2025 by rpki-client