Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: C2n1PMxSfMTGHM/pFDr9e9XylHeChdrGz4GpBhfn1H8=
Subject key identifier: A7:DD:90:D0:B8:28:F0:AE:8B:37:75:6C:24:5B:CD:B5:3D:FC:EF:9D
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 0197B6A0F4BBACE1DA957EF5A49FD906FBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0827
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: YAloILW/FEBRAx2BwvgxZm1w8jLLcKDCgkRXsGTz56c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f4:bb:ac:e1:da:95:7e:f5:a4:9f:d9:06:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=a7dd90d0b828f0ae8b37756c245bcdb53dfcef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:1c:7e:50:e7:3c:bc:9a:af:da:eb:ee:1a:
93:d4:8b:93:29:92:b5:7c:66:44:25:45:f9:37:4f:
61:93:1d:f3:cf:85:da:9f:3b:92:5c:39:07:80:92:
48:84:d8:c1:e4:fb:0c:8e:19:7d:75:34:0c:8b:f8:
d8:78:27:08:7b:75:16:21:e1:cc:70:e7:26:22:6c:
ec:26:4c:c0:01:3c:c6:b5:9a:b8:4c:66:9f:e7:43:
87:8f:88:0b:f3:e8:20:6f:74:9c:89:67:99:85:b7:
87:8c:40:e5:e0:44:60:20:5f:9f:36:57:e9:1f:53:
90:a7:d3:f6:28:d0:a8:d4:0b:4a:43:88:15:9a:c8:
b8:d4:f7:29:b7:d9:d7:a7:e9:5b:68:5b:31:e4:c5:
47:08:24:93:31:bf:05:60:59:e5:a0:b8:be:a4:f0:
ca:13:07:b3:52:b2:25:eb:bf:e1:a6:39:f2:92:62:
ee:92:84:24:60:c8:d5:52:d2:2a:e3:0c:85:01:c4:
80:8b:ce:c8:5b:6d:c5:a0:83:95:9f:6f:78:97:cf:
64:fc:d9:c8:86:7c:40:55:aa:88:12:af:25:a8:d3:
f1:df:d6:c0:cb:65:d0:81:77:76:5b:31:99:a4:2e:
28:1e:55:6d:bc:3a:d9:dd:71:4c:c9:10:e9:eb:e9:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:90:D0:B8:28:F0:AE:8B:37:75:6C:24:5B:CD:B5:3D:FC:EF:9D
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:aa:09:fd:31:b8:0d:a3:1d:f1:21:52:a4:38:3c:04:46:42:
83:c8:0d:d2:c9:37:37:51:92:e8:c3:da:2d:2f:af:7b:7a:a9:
56:3e:8b:c7:1e:dc:d1:7c:87:a0:90:b0:54:80:c1:14:67:cb:
4b:62:fc:e7:4a:e5:10:82:77:72:b9:66:50:50:f6:82:84:ca:
d0:e1:ce:ab:f3:2e:02:53:a3:b2:b9:47:45:b4:9e:35:f3:0b:
dc:10:a9:04:db:89:49:65:ab:b5:84:fd:39:c0:f1:16:f4:87:
1a:da:6f:3d:7e:ef:59:fa:1b:68:c6:33:45:64:c4:01:66:13:
0d:ed:96:10:49:c5:36:c8:d8:31:aa:29:85:40:90:3e:7b:cf:
a7:bc:01:a2:4e:12:eb:4a:d1:e5:be:06:42:a2:03:b5:9f:cb:
19:f8:0d:72:6a:1f:29:97:31:a4:82:60:8d:32:d2:0c:ba:18:
3d:1d:07:09:9f:4f:b6:c4:b3:9b:43:07:2d:de:22:5a:df:44:
2b:80:9c:3a:92:e7:e5:6f:0b:16:41:6c:13:af:04:d8:a0:5a:
8b:bf:40:6c:78:25:0f:16:1a:c6:c3:a0:59:84:04:79:d5:ed:
26:eb:ac:63:17:a2:e2:c4:ca:0e:90:11:91:e0:00:7e:f6:66:
cb:63:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:45 2025 by rpki-client