Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: /jAMcBX2rHl5v/KyaZBRXMIjR1HeBesOSOCEoYdZUoY=
Subject key identifier: 33:D7:D4:42:96:6B:5D:98:E7:9B:F4:74:12:E5:14:C5:20:7C:12:56
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 0197B6D790480E718F2190002502A1867465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0D7F
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: 1Y8YcFYL41vSHL3nYIcj99kTIGDPsFYM2IdzkLh5sw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:90:48:0e:71:8f:21:90:00:25:02:a1:86:74:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=33d7d442966b5d98e79bf47412e514c5207c1256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:a9:d4:d8:0b:9e:a8:c2:39:f9:cb:ab:02:
7b:c0:58:77:34:84:4c:d1:fa:70:e1:77:a2:b3:dc:
58:10:05:fe:89:8d:f8:72:f2:ff:8b:29:4c:36:7b:
15:7e:20:f8:33:b2:05:bf:8f:9b:79:24:7a:01:e0:
4a:c5:ed:c6:2e:40:ee:f7:cd:d4:90:27:5a:d9:4c:
81:1f:9b:6e:d3:a5:d1:66:9c:fe:8b:51:be:8a:a8:
37:14:7d:5e:a1:5a:cb:ed:4a:94:7e:21:d4:f6:77:
f2:e1:3d:ad:00:f0:d8:73:0e:d8:6f:31:a1:b6:4d:
1e:1d:26:32:30:31:77:dc:ae:34:00:e3:ab:9f:7a:
fe:fa:17:7f:76:83:aa:f7:c9:b0:f4:3c:d7:db:b5:
76:57:89:63:e5:4d:c8:df:f6:f0:4b:2a:17:94:7d:
da:54:dd:52:bd:47:82:56:b6:f8:87:8f:24:9d:01:
28:ec:3e:5e:70:9f:8c:b9:97:ed:35:ac:4b:de:45:
9d:f4:42:f7:1d:2b:6f:f7:7d:f4:10:cf:c0:cf:9d:
88:a5:83:c1:c2:84:5f:d1:2a:45:51:44:44:cc:4e:
67:32:90:dd:4e:d1:76:cc:f2:40:89:7c:9c:3c:c6:
af:0f:c3:eb:90:1f:ec:70:4c:1e:7a:81:d8:9d:e0:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:D4:42:96:6B:5D:98:E7:9B:F4:74:12:E5:14:C5:20:7C:12:56
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:83:4e:d4:0a:c6:57:9a:3a:ab:14:c7:be:9f:12:5a:47:
a1:11:2c:9b:0e:2e:4b:dd:75:2a:df:c9:69:f6:c7:fe:08:21:
d5:50:c0:4e:7d:55:3f:6e:03:3c:4c:50:2a:f4:c0:50:15:4c:
9c:3f:15:8f:41:6d:02:dc:f4:af:1e:b9:0f:71:42:7d:7f:58:
7d:96:24:6c:8b:53:80:c8:97:7e:6f:0a:ca:41:dd:7d:be:df:
04:a8:4d:87:dc:7d:b6:68:4b:29:11:9b:74:50:ff:92:8f:f4:
53:ee:b4:de:f4:ec:66:ea:78:7d:c6:0f:16:c1:cb:3c:47:bf:
70:8f:a0:0e:ad:d6:56:88:04:04:a4:8d:e0:1a:df:58:b4:a6:
7c:12:d6:79:a4:0a:18:c3:34:ec:ee:81:b9:4f:3d:fe:da:6d:
ed:99:5a:f2:dc:a5:89:be:1c:f1:85:50:cb:21:71:8c:1a:ee:
41:ea:2c:03:b6:d5:66:39:a6:2d:b5:ca:a0:1d:d9:f1:98:77:
29:16:33:fd:d1:fd:3e:06:ca:c7:4c:48:3e:95:c1:ab:ea:4e:
ca:88:18:5a:f6:13:4f:6c:d0:76:03:0c:fa:0f:41:94:7a:0b:
2a:eb:71:85:6b:6d:26:e4:41:5b:67:87:c5:ad:2f:70:d8:09:
6a:2f:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:20 2025 by rpki-client