Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: exbl+0W3+aQCuWx85p4ogrLIW5v+oDOpMf1ZoeEEWHQ=
Subject key identifier: 00:6D:AC:31:2D:F7:B2:1F:95:5E:9B:F3:C8:89:7B:03:A7:BA:D2:B9
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 0198D4A7A28E5802C36886DAAB6DEE407228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0E13
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: UGtKzpXvwDyMFo1WzTfG61hooQfZ6kO21E4k/FoXen4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a2:8e:58:02:c3:68:86:da:ab:6d:ee:40:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=006dac312df7b21f955e9bf3c8897b03a7bad2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:68:9c:30:d0:c2:17:2d:58:2e:05:c1:6e:
d0:52:e1:79:11:a3:6e:59:7a:7e:d5:62:6b:8b:a8:
86:a0:59:dc:ea:bf:b9:16:dd:fa:93:e1:97:2a:16:
cf:90:22:d2:f1:8c:88:fa:05:ff:b6:04:99:6a:c2:
91:81:65:7c:93:08:b3:d9:ac:45:66:15:d2:1e:2c:
c1:af:a7:fb:64:bb:0d:6f:54:5b:f3:2b:9b:d1:15:
15:d7:26:e1:87:95:d1:9a:8a:52:38:e8:91:d8:ee:
36:1b:20:98:50:95:dc:33:a5:20:ee:50:ba:23:54:
62:66:8c:32:90:19:85:a2:88:98:fa:f1:ca:7e:06:
10:de:ee:05:09:9a:ee:38:3b:eb:e6:4e:c6:b1:b2:
b5:0f:1e:36:3e:ae:1e:e9:3f:9f:fe:26:41:79:61:
e5:79:58:0e:78:ba:e0:53:07:a4:12:58:e2:05:52:
82:de:a8:73:a3:16:9a:2c:e8:08:f3:e5:90:25:59:
2c:80:65:35:6f:a0:cf:77:95:96:d2:d8:d4:17:a2:
3f:99:86:dd:53:f9:b7:fb:44:35:d9:e5:bd:6b:e5:
d4:4f:52:ee:46:a0:45:60:48:7b:f8:81:fd:8f:b3:
51:04:48:3c:d9:08:1d:1b:22:c8:09:06:df:3a:fe:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:AC:31:2D:F7:B2:1F:95:5E:9B:F3:C8:89:7B:03:A7:BA:D2:B9
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:4c:17:6c:22:fa:7d:eb:c0:e8:ad:02:d4:bd:73:32:36:
bb:af:24:88:19:db:14:27:18:80:b6:3c:89:de:e8:84:77:25:
01:3d:2e:3b:e2:86:a6:85:04:27:63:bc:dd:6b:14:69:6d:c9:
6b:33:67:f4:77:8b:8a:cb:91:f1:fa:28:22:08:b1:ff:da:a9:
fa:ae:9d:aa:53:8c:a3:20:5b:57:1a:51:28:60:a1:90:aa:1c:
cf:40:6b:31:2f:9a:34:e3:2f:77:7a:8f:24:56:72:3b:9d:64:
86:08:0a:54:14:73:04:f5:d7:71:98:ce:aa:75:6a:14:9f:4b:
0b:df:c5:cf:83:a4:b2:86:f3:99:fd:09:4a:30:88:26:6d:98:
7d:97:36:9f:c8:fd:9f:4a:b5:bc:ac:9d:f9:64:c5:7a:32:61:
90:84:bc:56:cf:90:4f:3f:f3:d5:56:86:7a:2f:66:2b:93:19:
dc:f6:25:60:28:d5:70:c5:f8:31:c1:dd:d8:14:f0:77:eb:ac:
99:55:b9:f7:c0:60:70:69:d5:fa:2f:60:04:c1:1c:8a:53:99:
4d:cf:f2:ef:f8:49:ea:9a:13:09:e6:1c:ed:4f:14:71:de:ba:
4f:6d:84:e8:7d:7c:f1:50:47:0d:d9:a8:23:f4:77:3e:a9:00:
f4:7e:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:45 2025 by rpki-client