Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: QDHT9FNFzSM7Rd2SAu/OBuiITetXlumbNfSP5XnJiM4=
Subject key identifier: 63:71:19:98:47:8A:A5:78:2A:E9:3E:D2:86:30:2E:E0:39:7E:D3:20
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 01976F62AEBBBF9FF7A764DBBD6D93C4A0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0D5A
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: 1CpuTEGsTp6RuuutNiaCyCvwfBnAg8R9/Ehglr1+X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ae:bb:bf:9f:f7:a7:64:db:bd:6d:93:c4:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=63711998478aa5782ae93ed286302ee0397ed320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:d4:ab:02:87:22:20:f3:cc:9b:03:14:27:
ae:45:08:ea:07:06:a7:84:ed:3b:c0:53:33:e2:83:
0f:62:ea:da:6b:72:fd:e3:0e:d7:af:80:4e:47:52:
ed:3c:06:2c:d7:ac:8e:db:0e:4c:2b:af:33:8c:b4:
59:7c:db:3f:3c:28:05:78:cd:ab:eb:ff:56:7a:48:
f5:e0:de:d4:d2:27:be:37:88:ea:9b:f8:21:9e:45:
c0:2b:d6:8a:17:d5:fe:b1:fd:d6:6e:d0:15:d3:f8:
24:c2:0c:cd:08:0f:a6:59:0b:72:c3:37:6a:b3:eb:
97:3a:63:53:99:06:47:bc:ee:9b:41:0c:b9:7d:fa:
f2:b5:b6:2c:62:44:e0:9e:77:df:91:85:cd:2f:bf:
49:64:4d:53:ad:6e:c9:43:24:0f:d7:7f:31:ca:30:
46:66:8a:89:8e:9e:86:be:d2:e8:e1:d4:e3:9c:8d:
92:ce:2c:b9:ca:fc:3a:a3:a0:39:87:6f:a2:bf:a4:
32:7a:df:87:fb:ac:1d:80:b3:4a:63:29:83:43:da:
43:72:65:d0:8d:47:37:60:54:a0:eb:26:63:66:bf:
98:70:d0:1c:ec:d3:f5:42:38:27:8b:ac:d1:51:c3:
4b:b4:15:aa:63:b4:1e:9b:3b:b9:2c:b5:9a:50:15:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:19:98:47:8A:A5:78:2A:E9:3E:D2:86:30:2E:E0:39:7E:D3:20
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:39:0e:2c:17:f6:b0:a4:5b:95:85:08:d9:4f:ab:b9:a7:
0e:1e:9e:64:d3:ca:75:2b:66:28:0b:88:14:0c:72:45:91:f1:
12:4a:5f:68:5b:e5:01:f8:11:41:9d:5e:a4:7b:23:a1:1d:a8:
f9:45:83:47:26:6e:92:b9:0f:05:8b:b3:9b:57:bd:07:a7:28:
95:07:e8:9f:ba:db:6a:48:c5:19:95:dd:ad:ef:38:ca:7b:51:
6f:d7:1e:36:04:51:be:c5:20:c8:d3:6d:7e:ad:f1:46:eb:23:
fd:fc:89:8d:90:aa:d2:b4:b6:8f:eb:76:16:c4:23:0e:50:50:
3f:de:c3:a6:8e:df:e5:2f:54:ea:00:40:ce:18:09:de:89:5d:
91:83:4e:b6:9b:1c:91:47:78:8a:22:b5:df:f9:e1:70:c4:6e:
6c:36:10:3a:0c:08:64:f9:ad:a4:78:a4:57:bb:85:c6:34:3f:
20:f4:de:cd:aa:17:fb:b2:b7:8c:28:99:8b:11:39:b8:09:d5:
89:6a:54:7a:15:33:46:00:f4:dc:59:4c:8f:99:96:fe:0e:e3:
36:ba:b5:68:15:2d:31:0f:6f:b2:61:f0:5e:93:ca:3b:52:e4:
da:63:27:01:f3:d1:e1:d1:8e:ce:91:dc:b0:26:c9:87:60:07:
7f:06:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:17:32 2025 by rpki-client