Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: 4SA9/TVhwJM2fKg46pUO6tVaulCQmSQeyZwdyMXvrJk=
Subject key identifier: 8F:DD:C6:10:11:C7:FC:37:48:F0:15:43:6B:A0:2A:12:56:1A:A6:F2
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 0198914775A7CC972434257D7B3D3DFB42CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 00:00:36 +0000
Manifest this update: Sun 10 Aug 2025 00:00:36 +0000
Manifest next update: Mon 11 Aug 2025 00:00:36 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: rA+qSeGgmMWGN7FXEK26W4QoNlWA2XW5tJxju+3ZX3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:75:a7:cc:97:24:34:25:7d:7b:3d:3d:fb:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Aug 10 00:00:36 2025 GMT
Not After : Aug 11 00:00:36 2025 GMT
Subject: CN=8fddc61011c7fc3748f015436ba02a12561aa6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:ed:31:64:59:3c:82:db:35:e7:8e:cd:6d:
37:8f:e8:2a:5a:5a:2a:6a:e6:89:1c:10:16:f1:8e:
d8:3e:e5:f5:86:68:c9:9f:f9:dd:88:39:96:74:b3:
33:7c:24:89:20:a8:ab:26:c5:47:5a:84:a4:a1:bf:
f4:94:9e:46:28:f9:5b:4b:42:05:23:00:64:70:ed:
d2:ad:97:16:15:82:ff:18:b7:a1:41:3f:ef:27:de:
a1:c4:f2:bc:96:e2:4e:09:ff:c8:16:e3:fd:f9:e7:
a9:55:51:31:f8:18:c1:92:79:e4:f0:5b:c5:90:04:
ab:11:8d:c1:35:d9:da:d6:2a:3c:bb:2e:24:0a:03:
6c:95:66:23:ed:aa:90:17:cd:bd:39:24:88:47:6b:
77:ab:9e:82:8a:6c:3b:74:93:7b:10:37:f1:03:92:
a0:5b:cf:7a:fb:87:1f:55:a4:74:46:f6:ce:b9:4d:
e3:7b:44:b2:6c:32:0b:3d:1a:66:97:7f:29:4f:8f:
e0:eb:75:29:f4:2c:5b:ad:21:78:ca:59:bd:d5:b5:
2b:19:7d:91:4c:40:44:19:ae:87:be:03:91:f4:95:
8b:12:a4:67:40:8d:fb:fb:de:aa:70:ee:a9:cb:fa:
af:2d:07:f1:31:33:29:ed:c3:95:19:62:a3:1a:cd:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:C6:10:11:C7:FC:37:48:F0:15:43:6B:A0:2A:12:56:1A:A6:F2
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:8d:c6:68:91:59:b4:b7:41:ff:7a:61:38:de:d1:01:bb:
ab:38:02:dd:df:f2:33:28:02:79:94:b6:8d:cf:d9:c9:84:83:
9e:03:54:ec:65:09:c4:84:9d:c6:4d:9a:67:a1:80:09:8a:10:
61:a9:1c:a7:12:9d:54:fd:c6:01:08:f5:f1:70:5a:41:10:15:
66:ed:53:e7:06:b5:37:0e:6c:b3:79:40:4f:70:56:37:9e:d8:
fe:2b:5e:6e:ab:10:6b:da:f3:8f:b8:cb:fa:c3:73:7c:58:35:
4b:c0:1a:63:4a:57:7c:11:b9:65:2f:42:32:92:96:fe:6e:8d:
40:08:a2:2d:49:6a:6f:7b:49:d7:a8:bf:e2:10:25:89:da:06:
0b:8e:e2:c9:d7:25:fe:fa:ce:87:c4:98:97:37:39:35:3c:d2:
ee:53:43:77:1f:55:64:45:ab:08:f1:67:67:95:f8:a6:f8:d6:
3f:ce:dd:b5:1a:3e:1a:12:73:b7:24:70:09:08:d5:89:05:92:
4f:34:5b:8f:2d:d8:fd:3d:e4:d2:93:38:4c:f0:fb:44:2e:9c:
66:57:56:c8:2d:6f:17:c5:a7:80:af:8c:a6:7b:74:0e:86:d5:
e0:ad:55:42:8c:2c:06:0f:80:6c:3a:62:79:36:13:e0:1b:93:
b9:ee:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:41 2025 by rpki-client