Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: RXWs5F4ITBnshDdpbv/ZcyXZkfVbGrH8NMuLjHb4pC0=
Subject key identifier: C5:F2:20:E3:E2:12:42:FD:81:DF:3E:34:95:B6:4C:7C:FC:F1:A3:D4
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 0197B70E9A9BF1883368BAB55E7830CAF8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 08A6
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: 3SJlsb1+PaYPuF75pEKuhrpYOYYsRbBOMVL6ALGCkNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9a:9b:f1:88:33:68:ba:b5:5e:78:30:ca:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=c5f220e3e21242fd81df3e3495b64c7cfcf1a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:3f:f8:f7:cc:01:ea:e9:36:10:4e:fb:26:
4f:3b:88:48:2f:59:31:ed:8b:1e:3b:02:09:21:b4:
1b:d1:89:19:95:46:3e:5b:87:cd:e8:0b:d7:b3:bf:
75:6a:8d:33:e0:0d:0a:9c:8f:07:de:06:04:d5:01:
0f:65:88:53:57:9a:9a:95:2e:75:38:53:5f:81:1a:
fa:9e:b5:c1:0c:dd:ed:cf:c9:78:e5:48:c9:0a:ce:
9d:a3:d4:90:29:53:7c:dc:42:f5:7f:70:c8:db:72:
c3:07:9c:f1:96:a6:5f:aa:44:27:3f:5a:25:4b:cd:
a6:c3:91:42:2c:d6:3b:1e:93:79:7e:68:30:27:7b:
f6:da:f1:b2:35:f1:04:c3:6d:ab:4c:82:ed:6c:cb:
c4:b2:0f:3a:02:58:82:0f:51:c2:3b:e0:f3:84:f8:
55:39:28:1a:6b:f3:00:eb:52:b6:c9:d2:bc:90:ab:
2e:2c:08:ff:d2:9b:59:05:b9:a1:26:73:56:13:ab:
80:65:0e:46:9f:51:e5:1c:f3:ab:f9:dc:e4:7d:4f:
92:16:53:76:32:a1:81:3d:05:38:7b:ab:aa:db:bc:
97:89:3a:43:2c:ea:25:36:c4:74:df:94:f2:9c:e0:
7e:75:4d:39:dd:88:2e:f6:7f:73:5b:7c:5a:48:ec:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:20:E3:E2:12:42:FD:81:DF:3E:34:95:B6:4C:7C:FC:F1:A3:D4
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d4:a1:bb:d6:32:fc:80:55:66:08:c7:bc:75:ff:48:8b:fd:
76:11:92:75:c2:ac:4d:89:d6:bd:02:cc:05:e6:66:f1:f9:a3:
c1:4c:72:04:50:7b:92:64:59:aa:54:e0:e6:75:29:54:5c:f4:
54:ef:1b:78:3f:c1:a8:84:36:62:6d:c1:55:8c:97:57:24:2c:
2e:a1:17:ed:c4:1a:14:9c:8e:87:1f:72:ce:02:e7:5c:4d:eb:
1a:99:f0:66:1d:46:bb:ad:a8:ef:73:7e:00:61:15:1a:bb:00:
80:c9:f3:98:3b:c6:f3:ab:33:57:31:72:b4:79:a7:0f:c9:53:
48:91:97:1e:3d:6c:f1:55:2b:ed:32:3a:9b:32:66:b0:25:4f:
ae:97:50:0f:5f:19:fd:a4:7b:a2:6e:7f:e1:3c:7b:83:f8:63:
ba:93:c9:4e:53:c2:c2:4b:26:fc:35:58:5a:66:63:76:71:40:
e1:5d:9e:22:39:cb:61:a3:9b:8c:dc:6c:41:0c:b4:b7:0a:f8:
bf:e0:cd:11:5e:d8:98:32:d8:65:ab:ab:ce:e6:93:d2:51:f2:
25:76:d0:93:2c:b6:8b:61:3d:b5:b7:67:38:41:67:3a:a5:4f:
c9:f7:d4:3f:61:c7:f9:a2:c9:b8:07:80:8b:53:bf:b2:8d:a2:
8d:27:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:52 2025 by rpki-client