Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: rr6KOl91vVGUBozJQtlotoY4RfuhntOsqJiFc2Z0bn4=
Subject key identifier: BF:4E:27:3D:70:66:6E:F3:EE:20:6B:54:16:A0:C6:6B:E2:2A:8C:71
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 0198744FF810E3257E4E4A7848961FE54A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 0908
Signing time: Mon 04 Aug 2025 09:00:54 +0000
Manifest this update: Mon 04 Aug 2025 09:00:54 +0000
Manifest next update: Tue 05 Aug 2025 09:00:54 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: zhq5blKetqcz2byCnavQnbfnnqIWzcWFbShqvUPdLAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f8:10:e3:25:7e:4e:4a:78:48:96:1f:e5:4a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Aug 4 09:00:54 2025 GMT
Not After : Aug 5 09:00:54 2025 GMT
Subject: CN=bf4e273d70666ef3ee206b5416a0c66be22a8c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:bb:71:b1:89:f9:1f:18:92:89:eb:f5:1d:
71:64:9d:fb:5e:36:4e:1b:4a:a1:d4:32:ec:d0:63:
fc:e1:fa:1f:d5:ea:73:3a:17:fe:77:a8:73:52:28:
31:fc:c5:ee:13:f7:bc:62:ed:b4:9f:b9:00:1a:03:
cf:45:70:60:7a:04:5c:a1:29:e7:2d:ac:59:b3:35:
13:f3:e3:c2:39:54:1e:48:d6:77:e5:32:d1:18:20:
52:3d:8e:10:b1:8b:e2:d6:ba:c2:8a:a3:8e:28:45:
c8:34:ae:54:da:a6:10:8d:cb:94:3c:b1:54:3c:86:
ad:71:a2:ef:41:d2:20:90:22:4c:11:5f:d8:87:22:
77:74:2d:74:26:ec:d7:e5:cd:2f:40:57:11:21:d9:
5c:40:84:c2:86:7f:85:bc:85:c9:19:11:8f:0d:29:
a1:00:02:3a:fe:e2:ab:e1:e4:18:e5:4b:cd:bd:72:
8d:79:ce:68:88:d9:16:9d:a0:a1:1d:0d:0d:6c:50:
5a:b2:a8:bd:25:0a:46:9b:4e:e4:b6:81:49:61:44:
ec:d3:71:80:7b:02:4d:82:1e:b7:cf:26:aa:24:82:
9e:e2:f5:aa:7f:59:56:cf:d8:09:a2:9a:f8:64:2a:
cc:48:23:e2:ea:9f:1d:1e:18:64:c0:9c:8e:82:d3:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:27:3D:70:66:6E:F3:EE:20:6B:54:16:A0:C6:6B:E2:2A:8C:71
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d6:cf:bd:4b:f6:d0:9a:6c:85:69:fb:a1:f5:7a:e4:92:9e:
d7:84:7a:f8:81:84:44:bb:55:72:62:98:b8:90:cb:82:6f:93:
e2:b3:40:e0:e0:6c:af:4b:7b:37:1f:e1:9f:82:51:ee:20:17:
df:09:d6:51:3e:21:d1:c0:46:33:e2:be:10:91:6a:74:3a:72:
39:8f:aa:36:cc:dd:eb:86:36:64:1b:71:42:cb:9d:2c:38:76:
58:b7:99:c0:15:7f:12:21:ff:d6:36:90:c4:47:41:55:78:59:
8b:0b:9f:b3:f2:f0:6d:f6:64:49:be:c3:ef:ce:96:03:20:59:
f8:af:86:d6:82:e5:ef:97:72:14:53:ad:c2:f4:ef:00:ac:cf:
cf:f8:ab:5a:25:8d:b0:44:3a:01:38:5e:09:3d:97:38:e4:f4:
82:84:3a:41:90:4a:1f:f4:c4:22:ac:0d:bb:7d:fe:61:8b:a2:
bb:20:c7:62:11:e9:dc:b9:31:3a:5d:9a:b9:c0:b7:d7:a7:3b:
6a:97:71:dd:09:83:06:1c:ee:ad:9c:ee:92:09:f9:79:7c:08:
2c:a3:ee:ce:ad:d3:c6:8e:03:b0:e6:9d:9a:c5:57:8c:81:b2:
80:45:d2:c7:90:77:e2:3c:2d:06:cf:0a:cb:1c:c9:b3:ac:d1:
d3:51:19:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T/gQ4yV+Tkp4SJYf5UoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg3MjJkMjY3YjRlZmY0NDQ3YTQ5MzMzYTAyNWE4NTIw
MjBhOTgwHhcNMjUwODA0MDkwMDU0WhcNMjUwODA1MDkwMDU0WjAzMTEwLwYDVQQD
EyhiZjRlMjczZDcwNjY2ZWYzZWUyMDZiNTQxNmEwYzY2YmUyMmE4YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJS7cbGJ+R8Ykonr9R1xZJ37XjZO
G0qh1DLs0GP84fof1epzOhf+d6hzUigx/MXuE/e8Yu20n7kAGgPPRXBgegRcoSnn
LaxZszUT8+PCOVQeSNZ35TLRGCBSPY4QsYvi1rrCiqOOKEXINK5U2qYQjcuUPLFU
PIatcaLvQdIgkCJMEV/YhyJ3dC10JuzX5c0vQFcRIdlcQITChn+FvIXJGRGPDSmh
AAI6/uKr4eQY5UvNvXKNec5oiNkWnaChHQ0NbFBasqi9JQpGm07ktoFJYUTs03GA
ewJNgh63zyaqJIKe4vWqf1lWz9gJopr4ZCrMSCPi6p8dHhhkwJyOgtMucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9OJz1wZm7z7iBrVBagxmviKoxxMB8GA1UdIwQY
MBaAFA4Ici0me07/REekkzOgJahSAgqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoeUxTWjdUdjlFUjZTVE02QWxxRklDQ3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNTY5YWMtMDI4Zi00Mzk3LThiNjYt
OTkzM2JmZjNkYzRkLzEvRGdoeUxTWjdUdjlFUjZTVE02QWxxRklDQ3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNTY5YWMtMDI4Zi00Mzk3LThiNjYtOTkzM2JmZjNkYzRk
LzEvRGdoeUxTWjdUdjlFUjZTVE02QWxxRklDQ3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNbPvUv2
0JpshWn7ofV65JKe14R6+IGERLtVcmKYuJDLgm+T4rNA4OBsr0t7Nx/hn4JR7iAX
3wnWUT4h0cBGM+K+EJFqdDpyOY+qNszd64Y2ZBtxQsudLDh2WLeZwBV/EiH/1jaQ
xEdBVXhZiwufs/LwbfZkSb7D786WAyBZ+K+G1oLl75dyFFOtwvTvAKzPz/irWiWN
sEQ6ATheCT2XOOT0goQ6QZBKH/TEIqwNu33+YYuiuyDHYhHp3LkxOl2aucC316c7
apdx3QmDBhzurZzukgn5eXwILKPuzq3Txo4DsOadmsVXjIGygEXSx5B34jwtBs8K
yxzJs6zR01EZJg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:23 2025 by rpki-client