Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier: Z0yBjceU91qy63eToBnrmns+p5s1aiRHUkWJoNFU/JY=
Subject key identifier: 3C:3A:A2:00:B6:AF:69:8B:D6:2A:0C:66:6A:6D:82:53:62:FB:C0:FD
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer: /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial: 0198A04E2D0BD7B6C346CD2C7CDB6A541F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number: 0459
Signing time: Tue 12 Aug 2025 22:02:14 +0000
Manifest this update: Tue 12 Aug 2025 22:02:14 +0000
Manifest next update: Wed 13 Aug 2025 22:02:14 +0000
Files and hashes: 1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: TUCc3Gevd+wi57QQhIbA+eiH6lLlE/4SaplGzmV0XNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:2d:0b:d7:b6:c3:46:cd:2c:7c:db:6a:54:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Validity
Not Before: Aug 12 22:02:14 2025 GMT
Not After : Aug 13 22:02:14 2025 GMT
Subject: CN=3c3aa200b6af698bd62a0c666a6d825362fbc0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:a5:6d:62:b6:17:fc:7b:60:ef:67:bb:95:
11:44:a9:47:72:c2:ab:19:7f:2d:df:82:82:6b:56:
a3:3e:14:52:89:9c:19:9f:7b:9b:33:be:4b:83:c0:
4e:0c:96:6a:58:52:2b:03:82:d9:c9:85:d5:4b:91:
03:08:e8:d7:ba:27:67:0a:7a:47:5d:ab:c5:ec:aa:
06:3c:88:2e:60:8e:42:cf:7b:78:57:2b:50:b5:10:
bd:f2:7f:68:57:ec:33:af:0f:fa:35:77:7c:13:f8:
95:e8:37:d4:a1:d2:e1:e3:6e:37:52:a4:ca:66:fa:
a8:3d:05:c7:8c:98:0a:f5:eb:79:ff:6d:8d:bd:9c:
29:fa:27:a3:be:f0:40:ed:46:15:64:73:41:7f:13:
b9:fb:1b:69:89:77:84:f9:57:69:31:7a:f8:52:9a:
48:55:86:e1:8e:c4:a8:fc:46:47:f9:28:22:10:3d:
0d:48:4d:16:51:e1:2a:25:14:c2:83:80:c3:56:9d:
b3:d2:42:50:43:b4:c7:0e:10:77:35:77:4e:77:42:
a9:18:b3:6b:a2:68:3f:f5:ab:6e:d1:3e:b6:18:ed:
f4:2b:1d:a7:03:3a:bb:9f:e4:43:8b:bb:3b:7c:52:
4c:0c:1b:25:ae:e9:f1:32:a6:0a:12:8a:2b:36:b6:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:A2:00:B6:AF:69:8B:D6:2A:0C:66:6A:6D:82:53:62:FB:C0:FD
X509v3 Authority Key Identifier:
keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:1b:fb:d2:89:53:e8:cd:58:b7:cc:4b:75:13:11:72:9a:
d4:c5:8f:04:d2:07:60:e1:60:18:39:79:67:db:da:6f:c0:ae:
af:06:6f:ac:b1:6b:f7:14:b2:a3:52:df:a1:17:5f:2c:06:8b:
a5:3e:b4:e6:ff:e1:ac:0c:e5:70:37:96:8b:48:2f:b1:c3:d2:
81:e5:3c:4a:41:da:98:f7:2e:89:d3:fb:d9:4e:76:8c:17:d1:
64:16:65:5e:fc:7b:58:a5:5c:3b:d3:10:4d:e2:d8:e5:f4:c0:
f3:41:7d:f1:39:05:dd:a7:6a:1c:76:66:41:58:65:41:98:10:
06:87:b9:45:89:e0:ce:15:0c:36:48:9b:2d:b1:99:c4:98:44:
66:96:fd:53:c2:20:c3:32:96:d1:a5:f0:52:6e:d0:3a:7d:3c:
f3:53:c4:cb:c7:d3:90:6a:c7:1c:e0:99:9b:4a:df:6d:41:d6:
67:ca:d0:2f:48:dd:8e:52:5e:7b:26:98:02:92:b8:37:31:6f:
28:d0:a7:ed:01:a3:1d:71:e4:70:73:8c:60:af:b2:b8:8c:ce:
f0:10:1e:a5:66:3b:6d:a8:23:73:c9:8c:40:49:17:a6:d0:0a:
f8:78:21:72:96:b2:30:6c:5b:32:65:b1:f1:61:7d:0d:34:ac:
1a:ea:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:00 2025 by rpki-client