Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: yTEE/yZcumAwgg9uUfqeDxlwY6gYmXb/6Lp9YRL+DZc=
Subject key identifier: 27:BA:E0:86:F1:5D:0C:BE:91:03:11:BA:2F:2F:4D:24:E5:5F:34:5D
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 0198D6613027D2E916669D23C057EF660ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 08BC
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: IvtviNk36gPi4mtTEhkLuj3qpr3Iu0G6G5NUVcBOlgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:30:27:d2:e9:16:66:9d:23:c0:57:ef:66:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=27bae086f15d0cbe910311ba2f2f4d24e55f345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:7b:15:9e:0d:4c:b4:85:fd:cc:0c:82:ef:
4e:35:76:5b:25:e2:7a:a0:ce:40:5f:f8:43:77:ee:
ab:c5:89:18:cc:a8:57:0e:25:5a:1a:18:07:f2:08:
31:dc:a8:c2:f2:a6:ed:3b:6e:ec:e4:e4:aa:61:6c:
b2:75:86:e6:91:dc:a4:a0:5e:14:44:46:e4:b0:93:
eb:bc:85:71:16:67:21:19:47:0b:49:c8:42:6d:fb:
c0:c1:44:9c:a1:26:04:84:3a:67:dd:11:c4:85:f7:
96:72:15:76:f1:67:3a:ae:83:84:c4:ec:a2:2b:f1:
ff:7f:5e:08:d3:bf:99:b7:a4:d6:82:cd:f6:08:20:
71:1e:b4:e4:63:55:c1:96:83:4d:b2:21:b7:86:dc:
8c:ab:16:29:9d:57:72:2e:76:81:19:99:41:90:c1:
8d:72:18:5e:a8:5f:b5:61:c8:8c:fa:2d:54:38:c4:
47:50:7c:b6:bd:d3:96:db:50:e9:4d:70:a9:48:b8:
c6:6c:ac:6f:bc:23:cc:62:a7:59:0b:a1:58:c2:f3:
f5:87:11:af:65:17:50:e1:00:03:db:e8:0b:93:de:
80:c3:34:cb:2a:53:66:00:e9:ef:f4:c4:4d:ab:27:
81:a8:1b:2a:2e:88:55:26:be:7c:3e:64:9b:a6:fd:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:E0:86:F1:5D:0C:BE:91:03:11:BA:2F:2F:4D:24:E5:5F:34:5D
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6d:9a:73:4a:91:99:be:03:be:56:f4:a3:d4:12:9b:42:27:
d4:13:be:1b:4e:05:55:0e:01:ec:d8:bc:3c:86:86:b2:d3:a5:
d6:0c:00:59:cb:9e:3c:d5:69:cd:92:13:93:59:b7:82:75:33:
35:06:d2:5e:bc:ef:ee:9e:7c:e6:91:52:02:df:ba:ee:6e:ab:
47:6e:70:31:6b:6b:79:da:e6:26:2c:c5:b3:ee:3e:c6:fd:f6:
2d:46:45:82:69:81:c7:03:fd:46:e8:ad:3a:61:c4:63:8a:18:
1b:eb:e8:de:05:5a:b8:78:60:d6:c2:ff:ac:a5:6a:6e:6a:d7:
66:5f:95:b3:7b:92:af:6f:b5:b2:d1:c3:2b:9d:30:45:ee:a2:
ad:02:62:cc:f7:37:8b:81:77:40:3c:34:89:86:52:e3:9b:c3:
19:58:98:ae:56:81:4e:d2:8a:0c:01:99:ca:64:c1:f5:94:51:
0e:2e:de:ae:09:95:c4:00:3a:b2:9b:f2:c2:8b:bb:16:dc:e0:
96:09:f1:2c:59:20:56:8e:84:1e:43:16:7e:07:2c:d4:94:2a:
69:5e:c3:0e:f2:86:26:21:b4:d9:ca:ac:00:77:74:3b:90:8f:
86:f0:49:1e:61:e8:5c:cc:c7:cd:16:9f:c7:52:b2:3a:f5:88:
ae:fc:ba:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:08 2025 by rpki-client