Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: 7rm2dXDeWFqGIGydWne19sW49KooGrgPZ31MBV6pqYc=
Subject key identifier: D5:6D:38:19:D1:8E:0E:B9:88:F4:62:BB:F7:53:19:BD:CB:44:15:16
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 0198D4DFE752FDB5B8FD2CC9F34CADDBC453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 12F7
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: mASVTbFnzO7q5n5XF1Q8+SH/DK7Y9RMd/7FB2M7v4bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e7:52:fd:b5:b8:fd:2c:c9:f3:4c:ad:db:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=d56d3819d18e0eb988f462bbf75319bdcb441516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:f8:32:d4:e3:a6:9c:c3:da:bd:57:55:dc:
42:53:33:4c:5c:c7:43:e5:64:6e:29:6a:0f:f6:6f:
95:32:05:c3:2b:23:97:9b:bd:b4:aa:38:b2:83:f6:
b4:de:a8:e9:84:38:96:81:99:b7:fd:19:72:b0:3d:
9f:e2:dd:7a:ad:fe:24:07:b9:65:8f:dc:51:c9:b5:
9e:1f:0d:79:f7:53:51:93:99:c4:3c:ce:f1:5b:a5:
55:3c:a3:b5:7e:c1:db:d2:30:26:d0:35:f9:2b:92:
d1:a0:b3:8c:8c:90:05:97:7c:07:51:88:5f:87:d6:
ea:c4:0b:20:86:de:97:df:51:83:e6:4a:0d:13:e9:
48:f9:04:54:fb:2d:c3:bd:24:7e:4f:c6:78:9c:53:
43:10:0e:ee:ca:5d:60:ba:b2:a1:b3:42:2a:9e:1d:
46:ed:62:f1:f6:fb:59:66:32:c7:6d:f4:36:97:54:
1c:85:d8:26:69:6a:ff:ca:86:26:b1:9d:09:f3:8c:
50:01:c5:f0:9e:6c:e4:e2:00:0e:d6:a1:61:60:96:
a1:6d:b3:72:ad:02:76:a2:e6:5e:db:6a:e9:01:45:
50:38:02:c2:e2:99:21:13:34:89:fc:0d:f5:ae:47:
a9:01:97:01:9b:5c:ad:ea:c5:f9:cd:28:99:75:15:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:38:19:D1:8E:0E:B9:88:F4:62:BB:F7:53:19:BD:CB:44:15:16
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5a:2c:ae:84:17:43:5a:db:01:28:c5:37:47:e5:52:47:82:
ce:09:43:be:49:a6:8f:50:13:3e:97:01:62:d7:fe:9a:c1:91:
a4:31:0a:d4:af:aa:93:c5:34:bb:22:86:18:63:33:49:e5:15:
1e:53:c8:d2:7a:25:c3:3b:7b:01:bf:78:30:bf:89:b3:8c:e4:
4a:a9:94:75:8c:5c:af:ca:77:0f:26:5c:08:fd:2f:07:93:cd:
6f:d6:18:c6:61:12:84:f9:6d:8b:df:e6:f0:7a:85:16:1f:66:
db:3e:62:73:55:8e:77:29:55:45:ea:c4:2c:87:92:68:21:82:
f0:6c:fd:da:80:f8:b8:50:83:8b:f0:25:f4:ae:fe:01:48:a2:
33:62:0c:39:1b:a4:18:72:a5:7f:19:e9:b7:ad:52:55:cb:ba:
f2:ac:cc:48:b0:61:49:f4:a9:21:aa:47:3f:67:af:1a:1b:9c:
30:b4:36:6d:53:2e:28:c0:0b:ee:c0:17:ec:5c:4b:a3:89:da:
4c:5d:08:58:50:2d:3f:b0:5e:42:50:9e:28:7a:b1:71:1a:5d:
1c:23:dd:22:98:16:42:95:a6:43:5e:ff:10:af:9e:f3:1d:3d:
f7:23:b3:98:68:f1:18:1b:82:6f:ed:fd:3f:e6:e4:9d:09:ef:
20:2c:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:34 2025 by rpki-client