Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: gpTGH+FYNA/wTFQqVrjshn09gdiCRb/Dld3S2rrNwdI=
Subject key identifier: A7:61:33:34:84:6F:62:5B:A5:6B:1C:0C:08:B6:3F:6C:4A:7C:57:8A
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 01976D3D846A06C3FE91E105A55CEBD06924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0801
Signing time: Sat 14 Jun 2025 07:00:37 +0000
Manifest this update: Sat 14 Jun 2025 07:00:37 +0000
Manifest next update: Sun 15 Jun 2025 07:00:37 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: ytGANoNvsdT/BydkZFPUITv+ElTWvG+SjC7NdDP94GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:84:6a:06:c3:fe:91:e1:05:a5:5c:eb:d0:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Jun 14 07:00:37 2025 GMT
Not After : Jun 15 07:00:37 2025 GMT
Subject: CN=a7613334846f625ba56b1c0c08b63f6c4a7c578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:a2:76:f0:0f:1f:a8:93:4a:83:e3:32:4a:
8d:53:5f:e0:99:2e:a7:33:70:35:30:f7:7c:f3:58:
46:5f:2a:5b:57:f7:47:c5:f3:f6:3b:24:1c:44:36:
6c:d7:0e:2f:34:fa:7b:df:aa:95:b6:4c:5c:fe:bf:
29:bb:ba:60:b2:6a:51:ce:0e:ef:c5:b6:6b:90:66:
7c:e7:64:de:74:63:67:be:69:56:3f:24:4c:da:33:
5b:6b:b9:df:61:dd:8d:43:1a:1f:f2:6e:f2:32:24:
f5:6c:fb:1b:f8:c1:c4:2e:c4:0b:2f:9b:1a:c6:6d:
2f:06:cb:c5:a7:52:50:c1:9a:55:4a:32:4d:5b:0a:
59:0f:ac:df:e6:70:bf:dc:70:f0:26:26:d1:d6:38:
43:02:b2:ae:bf:6e:b8:ad:b5:a6:ce:8d:e5:d0:35:
d1:31:6a:22:ee:67:d2:6e:01:9a:62:01:20:31:90:
d0:f1:ac:e9:f8:d4:79:94:30:80:85:5d:b4:a8:c4:
b8:2e:7c:6c:c9:a7:64:b1:4e:d5:98:9d:65:7a:6a:
ad:4b:ca:69:ed:6d:26:f4:47:17:93:db:eb:08:63:
52:69:e6:a1:9e:27:37:84:fc:24:e3:d0:e7:00:3a:
af:f6:67:2e:66:f6:18:42:42:50:b9:4e:ea:58:cf:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:33:34:84:6F:62:5B:A5:6B:1C:0C:08:B6:3F:6C:4A:7C:57:8A
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:20:96:c2:b9:0f:8e:91:2e:a8:04:a4:aa:07:52:7d:35:
f4:06:a1:fb:c5:f3:70:a7:94:38:6b:1c:d7:29:9c:52:32:0d:
8f:e1:69:37:82:c3:46:ee:e0:c5:79:b7:b1:5f:b0:90:ce:bb:
4b:20:78:0d:9e:14:9c:6c:b2:9a:5f:23:3e:b2:fc:80:3d:30:
6a:78:a2:ea:59:e0:d1:70:2b:f6:a2:20:57:46:2f:1d:c2:c8:
8d:06:45:1f:dd:e0:e2:b6:67:52:34:74:39:91:d3:c6:bb:d8:
43:31:7a:f3:0f:5c:e8:d9:05:d9:f3:ac:f3:5b:80:e2:a8:7d:
8f:ff:82:bc:31:31:d7:22:9d:28:85:7f:68:09:9f:aa:3a:de:
5c:dd:1d:07:57:6d:cb:cf:35:b8:ee:82:84:85:b1:de:4b:02:
1b:c9:1c:e1:b8:97:f1:ca:b5:05:69:8c:82:13:c5:51:1c:11:
12:25:7e:b7:1a:cd:01:35:3e:ac:18:00:55:c6:e4:e9:4c:ba:
2c:f5:dd:d3:aa:97:e3:41:e5:ce:60:fa:ae:c1:76:35:11:36:
a3:e7:e7:dd:62:65:cf:78:5c:30:ad:48:03:8d:4c:2f:27:c5:
f9:b9:a3:33:82:39:39:30:2a:d1:05:3d:11:11:4f:09:dd:e1:
81:c5:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:31 2025 by rpki-client