Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: GqQZHjSgZ9s9SVYCgPT6lTw+Cv2y280dCYR47ktheEs=
Subject key identifier: A3:7F:31:B1:F9:01:4C:D0:0A:5C:D0:75:5B:40:97:1B:60:62:47:72
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 0198D47399D9CF4B7644309021FD19CFAF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 1041
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: ZebTjPQe/s1wJX2LftHxhspVzsnDBGL7KydWtFBr5bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:99:d9:cf:4b:76:44:30:90:21:fd:19:cf:af:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=a37f31b1f9014cd00a5cd0755b40971b60624772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:6f:f3:79:59:f1:52:a8:e4:b0:a0:50:25:
f0:cf:7b:fb:18:52:c5:da:dd:08:d9:8d:e4:be:ec:
e2:0f:28:d6:87:d5:80:3f:28:64:8e:c0:17:f2:91:
ee:04:56:fb:82:f2:aa:26:29:70:e9:eb:75:95:78:
10:aa:d9:86:27:0a:89:34:e5:fe:65:83:45:a5:19:
df:71:8d:fc:c8:eb:23:49:cd:4d:1f:fc:a1:68:3c:
5e:cd:6d:46:33:f9:3c:19:1d:e9:79:30:63:29:ca:
1c:40:f3:5c:50:f3:34:19:d6:c0:02:31:b4:58:8c:
e6:da:cb:09:55:51:a6:89:e7:62:62:59:bf:58:bc:
28:0b:0d:f9:c5:ee:61:7d:a6:32:53:5a:3d:0a:64:
fa:eb:eb:22:19:f9:ed:93:f6:c1:a9:78:1d:c6:d4:
7d:5a:50:e0:9a:0f:e2:ea:6e:0b:24:da:58:55:38:
47:16:f6:3d:a9:a6:b7:ad:aa:af:6c:fa:94:46:69:
7f:91:d6:ee:32:78:a3:f8:e1:f5:f5:33:d2:ca:74:
5e:bc:02:99:47:f7:5d:e1:1f:86:81:25:b7:56:b6:
1f:26:37:17:72:17:ba:e1:56:e7:53:5f:3b:9a:67:
d3:d2:c1:f9:1d:79:b5:e5:59:f3:70:cd:59:52:71:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:31:B1:F9:01:4C:D0:0A:5C:D0:75:5B:40:97:1B:60:62:47:72
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c7:76:dc:0d:ec:31:3f:35:be:4d:95:ca:9d:07:93:58:0f:
a0:dd:b3:39:79:d5:b6:0e:2a:be:1e:ab:9e:60:7f:2e:2b:e6:
38:ae:81:36:d3:f9:06:d6:cd:1a:58:3a:13:7b:51:7d:bf:4a:
b9:b5:65:92:b0:84:88:3d:c9:90:6e:42:43:b0:6d:6d:f6:2a:
06:50:85:ea:8b:1a:69:59:f5:6b:34:dc:8c:f9:66:1a:93:c8:
16:be:83:43:b1:cb:07:ab:76:87:69:25:32:e6:9f:65:c5:e3:
61:d2:ef:9b:88:fc:47:18:ab:52:19:5f:2c:61:52:1a:f8:d2:
9b:bd:d8:2c:23:2f:ae:5c:7b:d8:b9:a9:b2:c0:30:b3:d7:05:
66:a9:c0:6c:e2:c0:2a:46:97:42:1b:b3:1e:68:7f:c4:a5:d9:
94:e4:a2:ce:5c:28:0d:ea:39:19:33:de:af:cf:bf:1d:9a:40:
e0:66:a1:83:a9:f0:41:4a:27:21:7b:fc:6e:be:75:1d:55:ae:
1e:1f:65:81:31:64:6a:c1:d1:5c:8f:93:97:1f:8d:7c:f2:11:
ec:c8:67:08:bb:70:bd:07:c7:bd:e2:1d:bf:b7:e1:91:a4:54:
a2:36:01:de:33:a1:03:ba:db:36:b0:17:1a:d5:36:88:30:ee:
25:e5:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:39 2025 by rpki-client