Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: h1sRFTakP+OPztYtmGVubuc2/zohlIMdjJ5/lK1rOSk=
Subject key identifier: 98:7F:A2:65:DE:FA:AE:8E:17:2B:E2:71:57:00:20:2D:3E:24:E4:23
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 019873E3D84ACF491049E671D3989E3490CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0889
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: BVTZuKmkOYuzb03eShTi1WvZ63hTyKI6UH7bJg10HxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d8:4a:cf:49:10:49:e6:71:d3:98:9e:34:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=987fa265defaae8e172be2715700202d3e24e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:6b:25:ef:ed:cb:fb:3e:7f:ac:b2:09:ba:
35:04:78:79:e3:c2:33:f1:2c:3a:43:8f:29:04:2a:
f3:37:75:15:b3:95:61:15:a1:ae:58:18:61:35:2c:
7c:5d:42:06:bd:dc:87:e3:0e:0a:21:83:cd:ed:9b:
d0:4d:12:d1:a2:c4:a4:cf:48:e3:33:40:64:51:2c:
5d:9f:59:f3:89:5a:08:68:13:c6:27:01:5c:ac:fe:
94:fd:b8:2e:93:78:66:a2:2e:eb:bc:67:e5:e6:8e:
73:af:29:a5:8b:21:ff:0e:5c:ce:ab:2d:10:f7:46:
ba:0e:14:e4:8f:7c:27:6e:ef:40:7a:65:03:3b:cc:
05:b4:bf:3f:8e:ff:76:97:09:27:85:a2:85:ff:44:
ba:1e:a0:5a:97:d7:63:ac:7c:8d:5b:84:39:d2:d9:
26:6b:50:bb:a4:e1:b0:e1:09:80:ed:79:ae:2c:44:
5b:b8:f5:dd:e5:fb:a7:14:e2:e9:bf:89:b1:a9:31:
20:49:18:6c:2c:2e:88:ec:e6:1b:21:fa:03:a7:49:
bc:d0:66:d8:c0:b9:90:22:5b:e3:4e:fc:74:cf:b1:
d9:45:c0:90:ac:be:25:60:49:4f:16:43:08:fd:06:
77:8d:35:31:5c:9c:3d:04:bf:22:c2:fd:ad:00:9b:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:A2:65:DE:FA:AE:8E:17:2B:E2:71:57:00:20:2D:3E:24:E4:23
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:da:4a:96:64:05:58:9e:f1:7b:52:65:80:24:d3:9d:ca:
33:21:69:28:d5:92:b1:22:db:a2:b4:61:57:26:ee:7d:95:18:
bb:7a:de:43:57:e7:2a:40:f9:9a:3b:d3:3a:35:3d:b0:a0:28:
a2:db:52:ee:0b:03:22:7f:b5:55:77:39:da:f6:3d:76:b1:06:
19:a5:d1:17:16:57:4c:82:ae:58:b9:76:73:d8:5a:d3:99:5f:
e7:7c:5a:7e:d8:cc:59:bf:a6:da:4c:a2:c8:ed:2f:41:19:f3:
3d:c4:2f:8f:b8:e3:3d:61:5d:53:15:0f:5b:ec:b1:50:8a:7e:
4c:0c:13:67:1c:45:af:1d:26:d0:dc:aa:79:12:2f:73:b8:6e:
c3:4b:c5:bf:fe:ce:6b:b7:b6:23:6b:00:1a:87:83:dd:24:b6:
ba:74:33:9a:53:17:69:aa:e9:d9:01:9b:d8:fd:f9:77:bf:75:
e8:a0:4e:e9:02:5d:97:b5:3d:b6:d2:e8:dc:cf:98:7c:af:dd:
6b:53:46:75:55:81:85:a2:30:80:2f:99:53:b3:27:61:a6:af:
91:5d:7e:7a:36:53:5f:15:b8:21:1b:38:69:d2:ff:38:14:1f:
1d:57:4d:17:68:77:cb:cc:df:73:36:76:55:80:3a:27:9a:4d:
d7:5e:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:18 2025 by rpki-client