Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: qeLJX3X3Rpo9Eme1Z5k6wzBBrfyL9oLcmvJncSZGjd8=
Subject key identifier: 78:52:4C:88:D5:25:39:20:FB:4A:36:93:0E:C0:F4:06:E0:50:58:61
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 019A4D0644AB829221B05122624F3D0038F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 097E
Signing time: Tue 04 Nov 2025 04:00:47 +0000
Manifest this update: Tue 04 Nov 2025 04:00:47 +0000
Manifest next update: Wed 05 Nov 2025 04:00:47 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: g4xvcDtzOeYx0EVkXqK/yRXgSrAIuZIASJ5hHyA+bkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:44:ab:82:92:21:b0:51:22:62:4f:3d:00:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Nov 4 04:00:47 2025 GMT
Not After : Nov 5 04:00:47 2025 GMT
Subject: CN=78524c88d5253920fb4a36930ec0f406e0505861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:34:d5:3f:34:a6:86:af:20:d5:9a:79:35:
02:71:b5:57:70:15:2d:40:dc:f2:66:dc:00:4e:75:
d8:e0:4e:4c:a8:f8:7a:dc:6e:34:ca:04:78:d3:03:
1c:95:e9:8c:aa:48:08:bd:79:96:07:c8:e2:ef:8a:
95:6a:f5:9f:c3:c9:b9:59:08:1b:cb:fe:76:af:16:
47:13:ba:87:7e:25:f0:57:fc:f7:25:4b:cb:a2:eb:
e6:7c:88:a0:66:0b:35:09:47:70:57:68:49:94:17:
7b:b3:c8:67:d6:48:84:2c:f6:52:0a:e6:c0:8a:2b:
2f:6a:42:84:90:a7:8d:3e:9a:07:ad:ca:05:0b:06:
46:16:3a:85:38:e4:ee:e1:94:79:43:2b:4f:f7:f9:
9e:04:7a:b3:14:02:43:7c:96:80:47:b4:26:aa:2b:
8d:53:b4:84:e4:01:30:18:a3:d9:5a:6a:1c:f2:41:
c1:c4:32:b8:57:9d:5f:27:66:36:11:59:ed:39:43:
79:64:21:93:23:82:ad:34:e4:e7:44:a8:7c:ed:17:
7d:3d:f2:4d:67:ff:1c:77:10:7c:b3:7b:d9:3d:2f:
90:be:91:62:62:33:88:17:6b:97:35:6b:b7:08:b2:
31:76:7e:d7:2e:8b:d2:56:90:db:38:12:b3:70:8f:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:4C:88:D5:25:39:20:FB:4A:36:93:0E:C0:F4:06:E0:50:58:61
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:5e:7c:11:b7:da:e4:fa:b0:be:62:52:b7:f6:ff:e8:02:
49:7b:11:ff:5a:ce:29:d5:d5:0f:9d:8d:4d:b1:96:e2:8a:be:
4b:d7:4d:5b:9d:40:17:35:50:80:a2:de:03:ca:14:e3:a6:41:
e0:19:9d:24:11:f1:18:67:4d:a1:30:c0:70:fb:a0:ad:7b:25:
29:4f:c4:cd:aa:f8:34:6f:1d:2a:e5:b3:49:b8:d1:49:11:0a:
85:7f:78:41:71:5d:67:bb:d0:84:f2:e7:3f:18:39:f4:ba:17:
b7:0c:e0:c4:50:da:2f:b7:de:88:5f:1e:c3:7e:a4:56:fb:43:
69:6e:b0:3a:7b:6c:15:26:2d:c4:07:c0:f5:53:8b:aa:3c:1d:
09:e1:c0:d1:c9:ba:ad:ab:af:75:0f:0b:7f:38:aa:c2:e1:a3:
9a:ae:35:a3:80:ee:eb:fa:c8:47:99:af:98:a0:5e:3d:b9:dd:
26:d5:dc:fc:d0:00:97:a8:23:e7:e8:c4:cc:17:f0:fe:cf:7d:
51:48:7b:05:ab:39:cb:ce:4a:25:20:95:02:0f:86:47:0d:87:
84:ff:e8:9c:09:9d:01:73:a8:54:98:89:24:a0:b6:c7:8a:c3:
c7:0b:8e:bd:04:12:fe:7d:63:42:82:21:fd:53:d9:06:3e:e8:
b4:7a:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:10 2025 by rpki-client