Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
File: dGMPFkhbT5M4X5So7HEArUjF_FA.mft (raw, json)
Hash identifier: gNr0XCqh5bPL2xqf6IpvaoHxD3XrGY3CBlLTGqHODS4=
Subject key identifier: 1D:B0:13:8D:D5:52:03:66:E0:62:1D:01:4D:5C:8A:38:39:58:9B:25
Authority key identifier: 74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
Certificate issuer: /CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Certificate serial: 019873E1B95CCC691D92DA151A298BA25AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
Manifest number: 0D4F
Signing time: Mon 04 Aug 2025 07:00:29 +0000
Manifest this update: Mon 04 Aug 2025 07:00:29 +0000
Manifest next update: Tue 05 Aug 2025 07:00:29 +0000
Files and hashes: 1: dGMPFkhbT5M4X5So7HEArUjF_FA.crl (hash: rW7jNN3LTzxg3JfYIZPj3ATjRgpEP1gfAOFLPnphFOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:b9:5c:cc:69:1d:92:da:15:1a:29:8b:a2:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Validity
Not Before: Aug 4 07:00:29 2025 GMT
Not After : Aug 5 07:00:29 2025 GMT
Subject: CN=1db0138dd5520366e0621d014d5c8a3839589b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:46:c2:38:49:2a:df:fe:5c:07:09:c7:72:
ba:3d:c7:de:da:62:5a:42:02:1a:37:17:14:b8:03:
d0:88:00:17:ca:ad:6d:f7:b2:43:4f:3a:98:b5:c1:
a2:c4:11:fb:fb:93:fa:5e:78:3e:5f:9c:00:7b:cb:
1e:05:17:56:11:9f:e3:24:5a:8d:f0:12:98:1f:a8:
15:88:e0:e7:6d:a6:76:2c:42:fb:df:02:a7:99:4e:
27:50:5a:28:d1:54:83:79:25:09:83:c1:45:48:da:
a4:e7:0c:2e:e7:75:59:84:2d:83:14:64:19:b6:12:
4e:bf:d2:87:95:7f:35:02:16:a7:c5:9d:cb:cc:b1:
8b:8b:34:19:f7:e1:c8:0b:5a:a1:96:81:99:98:53:
cd:8a:c5:b8:b2:d0:06:bc:df:b0:04:6a:1b:eb:64:
b1:50:b0:69:44:e1:08:b2:c8:e3:cc:13:64:a8:9f:
fd:e7:4c:38:ca:7f:d7:3c:a7:ee:7b:61:c5:35:ae:
58:f1:7a:d7:a7:25:76:b6:d3:31:8a:f0:2f:f0:58:
a3:c2:f2:bd:79:4b:24:a7:79:24:4b:2b:71:da:d7:
01:fe:52:2a:30:fa:72:81:c3:a3:c7:fa:b6:50:0e:
da:da:05:54:47:73:53:7d:28:88:e4:3b:d4:64:1b:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:13:8D:D5:52:03:66:E0:62:1D:01:4D:5C:8A:38:39:58:9B:25
X509v3 Authority Key Identifier:
keyid:74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f5:4b:d4:8a:08:9d:9e:af:dc:b8:5f:22:e2:27:de:67:90:
a7:17:e5:3d:64:39:38:3e:ba:c2:9d:19:8f:cf:08:07:c5:d6:
6b:7c:d8:b5:9b:0f:68:99:a7:22:5f:5a:38:0c:51:bd:2f:2b:
e4:2d:a1:de:e0:5f:5d:4f:d2:c8:99:69:53:4d:aa:04:c6:12:
cd:12:7a:37:8c:7d:47:95:45:4a:b1:6d:e1:4a:e5:b4:11:a2:
d2:bf:00:be:42:46:e5:c3:4d:75:2c:a2:9b:36:12:74:cd:2c:
21:c7:84:f6:41:f5:30:89:45:35:ec:e9:b0:a9:da:88:60:46:
75:88:4e:75:76:10:6f:4f:d6:c5:0f:86:81:0b:6f:73:c5:c4:
22:54:a7:af:18:03:8e:3f:17:f7:be:4d:32:f2:f8:c9:c4:da:
5c:78:27:82:5e:81:c5:47:cb:2a:37:ea:55:d2:75:75:57:84:
0a:85:81:22:c6:ea:0a:88:bf:fe:a0:38:5c:a6:6b:b7:7d:02:
3d:f7:f4:12:88:42:4e:03:69:0f:79:5e:96:79:68:0d:9b:9d:
c7:1c:27:25:ef:8f:2c:95:b5:61:97:b6:38:c3:04:23:42:c1:
8a:15:e1:ff:78:d6:27:2e:72:4f:ec:75:ac:f6:b0:6a:cd:bd:
ec:bd:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:50 2025 by rpki-client