Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: +ZEAbWq0vikm2QVqsKzxaKvzpFwZzbW8d+h9vy8hx2c=
Subject key identifier: B9:63:D7:81:FC:EF:B7:CB:F4:09:DD:63:33:09:CF:2E:7E:BB:BF:B7
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 019845F63BA26ADA8E5AF0D34D3ADE293C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 09:00:21 +0000
Manifest this update: Sat 26 Jul 2025 09:00:21 +0000
Manifest next update: Sun 27 Jul 2025 09:00:21 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: PGVthicNLaOarFvT0LhHAjfbb04OcpDg+yQssEnbK5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:3b:a2:6a:da:8e:5a:f0:d3:4d:3a:de:29:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Jul 26 09:00:21 2025 GMT
Not After : Jul 27 09:00:21 2025 GMT
Subject: CN=b963d781fcefb7cbf409dd633309cf2e7ebbbfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:55:61:b1:9d:32:7a:e9:f3:ae:86:26:c1:
13:3a:33:4c:e0:62:4f:dc:d3:74:b5:5c:84:c0:42:
4d:4b:c6:f7:f2:db:36:9e:b1:62:b1:31:8f:b4:ea:
82:85:a8:5c:6b:35:30:00:f7:f5:49:48:c3:00:b7:
ea:fe:34:f7:e4:f7:ff:71:b2:1b:53:cf:05:3f:3e:
63:82:0e:28:3f:25:f2:cc:f2:13:c5:c9:c1:8a:c4:
32:4c:07:bf:a8:70:28:da:80:16:ec:81:51:e8:04:
2c:1c:bc:60:5a:bf:44:f9:97:f4:1c:51:d6:65:d9:
8e:52:47:36:80:48:fd:dd:97:6e:e0:87:0f:89:70:
8d:7d:f2:23:e6:9b:f2:c7:a4:7b:d1:74:e0:20:3c:
e4:ff:a6:fd:40:4b:27:85:e2:72:2b:c8:3b:0b:63:
b2:5a:9e:ce:d8:b7:19:45:15:a1:e7:42:ac:2c:f1:
ce:ed:33:d9:22:09:18:df:f0:4b:7f:57:cd:9e:a0:
a4:e6:7b:9e:f7:6e:96:1b:70:6e:10:9a:6d:ee:36:
d7:2c:d3:fe:b7:6b:57:b4:9e:00:4b:3c:c3:9f:53:
6b:da:30:77:62:8d:45:78:82:a8:06:26:b5:7c:b5:
a7:d6:d4:5a:91:61:4c:32:f2:51:83:08:c5:d1:9c:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:D7:81:FC:EF:B7:CB:F4:09:DD:63:33:09:CF:2E:7E:BB:BF:B7
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:03:84:d0:ae:69:5d:ec:e7:b1:00:3f:54:90:47:5d:3c:bc:
3d:61:0d:97:41:e8:c0:27:ed:9c:53:b4:61:8b:16:97:06:33:
1e:dc:b4:87:fc:2d:88:bc:16:da:64:3e:ab:e9:89:bf:e0:7e:
4f:e6:45:d6:4c:4d:76:8f:e5:4c:e5:06:2f:fb:5c:28:81:88:
83:57:d8:ed:4d:69:8a:60:5c:1b:2c:ae:ea:0f:4a:94:3d:ec:
63:e7:7c:e2:5b:b3:fb:63:d3:9c:25:a6:a4:3d:8f:2a:c5:0d:
70:9a:75:43:70:af:c4:5b:15:68:fb:63:ee:6d:95:fc:e3:05:
86:08:99:8a:19:8c:35:cf:fc:39:86:f4:2e:d3:4d:8f:0c:1a:
65:be:62:1b:16:d1:31:53:95:22:7c:92:a1:16:b2:70:00:a6:
0d:29:71:b1:dd:b9:c0:df:23:84:f8:90:8c:d6:67:3c:02:b7:
75:99:65:df:a8:3a:e0:71:68:ca:18:b5:d3:25:11:ea:19:69:
a4:25:69:ac:da:d5:6f:35:5d:ee:75:98:6c:54:e8:8c:38:51:
ef:de:a6:41:90:90:20:45:7d:b2:6f:dc:8c:f0:35:3d:c8:a4:
9e:a5:f3:bd:b4:6f:53:52:fd:cc:d1:f8:d1:7d:aa:fa:94:ce:
14:d2:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:21:36 2025 by rpki-client