Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
File: dGMPFkhbT5M4X5So7HEArUjF_FA.mft (raw, json)
Hash identifier: Q9hClvyeJtK12u9weCuseoKPq8wK7OeBhAjkzu4pIYM=
Subject key identifier: 50:A3:04:16:82:39:3E:F6:71:51:33:01:EA:DB:B4:4A:28:C0:79:64
Authority key identifier: 74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
Certificate issuer: /CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Certificate serial: 01984965E22037ED207DFF50124B24E380FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
Manifest number: 0D39
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: dGMPFkhbT5M4X5So7HEArUjF_FA.crl (hash: ga3+31qmMZ+Ltt2IgFXEDNMIJwLygSCQn9bOanxybuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e2:20:37:ed:20:7d:ff:50:12:4b:24:e3:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=50a3041682393ef671513301eadbb44a28c07964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:23:5f:6c:45:07:0e:5b:33:55:bc:33:a3:
4b:0d:f7:87:ad:f6:1f:03:d5:c3:c1:24:1b:b6:45:
ef:ad:53:82:4d:25:0b:69:43:63:46:aa:eb:b3:0a:
c8:07:4b:ca:31:fe:fc:d1:7a:b4:79:c6:47:36:b7:
71:a4:49:c9:94:ec:40:d9:9b:6d:85:54:cc:87:cc:
fa:dc:e1:21:41:17:3d:b6:60:5e:4b:4f:04:bd:b2:
7c:3d:22:29:42:56:51:e4:a3:12:81:81:3d:0a:26:
62:5d:90:ac:33:b1:b2:7a:58:10:b9:45:13:db:69:
1a:76:a1:70:6c:77:fd:94:a8:91:4d:55:7a:89:34:
f5:ee:b7:a4:a4:c0:4e:c5:4c:91:0b:86:12:3a:23:
e3:a5:ba:40:37:82:a5:49:dc:f9:c8:df:a9:95:f0:
6c:f5:70:cb:22:2e:2a:a2:f0:68:41:3e:cc:1e:07:
55:8b:b3:cf:7d:cb:f6:4d:48:6f:73:ca:b8:34:79:
2b:66:4e:9e:71:89:e9:33:2f:3b:de:c7:00:35:d4:
69:74:49:e6:7a:53:fe:ac:ea:77:5f:ec:77:9e:15:
f9:69:82:c0:82:5f:e0:27:8f:28:e1:be:57:50:5d:
3e:51:ba:38:3b:4e:31:01:81:3d:0d:3b:2f:c1:67:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:04:16:82:39:3E:F6:71:51:33:01:EA:DB:B4:4A:28:C0:79:64
X509v3 Authority Key Identifier:
keyid:74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e6:21:c5:61:f2:33:b9:65:8b:7a:1a:37:4f:8b:09:46:e1:
90:9c:de:ac:25:de:d0:ff:34:d7:01:9c:40:f0:5e:b0:18:56:
af:31:9b:03:d6:d5:12:bb:a6:8b:39:62:46:c6:ae:49:ed:a7:
c7:1a:eb:c9:a8:7c:25:8f:7f:78:93:68:0b:25:26:ea:fb:d9:
14:b8:6b:a5:4b:d9:3e:cd:03:06:f9:9c:c4:a8:44:74:65:dd:
16:b6:a9:fb:9f:62:4c:9e:bd:51:85:11:f3:2d:4b:07:c8:e7:
26:87:d1:6a:f9:b3:99:7f:59:35:6f:6f:ce:07:a4:1d:ad:56:
e4:fd:ed:a4:a1:fe:ac:d3:ab:68:c0:fd:a5:04:bb:9e:c7:c5:
f3:be:6b:a8:7a:61:5c:13:de:fa:83:f9:84:52:2c:3c:3f:ec:
b9:38:6c:55:7c:1f:14:bc:b7:45:0d:71:60:ca:ae:c1:1e:1a:
67:07:93:98:81:ae:d8:9d:5f:74:46:28:da:f9:07:1d:30:1e:
3e:a5:df:dc:83:01:98:92:be:29:9d:29:98:3d:74:22:2e:0c:
68:49:df:ef:6f:5f:83:35:4f:7f:bc:56:4d:af:58:1c:db:ce:
0f:43:c9:2d:fb:f3:42:c4:c6:5f:7a:54:65:fc:d1:8b:e8:7e:
f7:28:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:16 2025 by rpki-client