Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: 74rEb7yyq+XOcimlEXEnvmvPijHQh72kzV6HuJL58VU=
Subject key identifier: 4D:FA:D2:25:2E:4A:63:1E:87:52:07:93:E6:D9:F5:F7:E2:60:0C:A5
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 0198518CA0955802459A954317CF1FBB32DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 08F6
Signing time: Mon 28 Jul 2025 15:00:27 +0000
Manifest this update: Mon 28 Jul 2025 15:00:27 +0000
Manifest next update: Tue 29 Jul 2025 15:00:27 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: gVAeH5ywlCeaKzqWiYJCtvRnpX+T3NaZX0zwlTToaTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:a0:95:58:02:45:9a:95:43:17:cf:1f:bb:32:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Jul 28 15:00:27 2025 GMT
Not After : Jul 29 15:00:27 2025 GMT
Subject: CN=4dfad2252e4a631e87520793e6d9f5f7e2600ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:ab:b7:14:34:aa:fe:62:8d:4b:08:dd:b7:
10:49:a5:7f:df:bd:ae:e4:0f:71:89:f4:bf:65:8f:
b7:1b:97:c1:1c:79:6e:f4:63:d4:92:9d:f5:41:d4:
b9:71:09:5b:f0:ff:40:49:6f:03:ae:d3:3e:9e:a2:
14:88:cb:f7:9b:3f:f7:b9:97:22:50:82:5f:cf:2c:
49:0d:de:96:ef:60:bd:87:6f:fd:20:5d:45:b2:5b:
d5:22:4e:35:99:eb:29:3a:01:86:a9:39:5f:ac:7c:
22:91:2a:45:32:52:31:87:82:ea:42:7e:d9:a4:80:
a5:d7:f2:43:c8:78:20:44:47:93:04:6f:cd:fd:0e:
ca:d2:76:f6:42:d1:3b:ee:04:c7:c6:d5:50:c7:55:
1a:9e:10:83:e2:de:b2:6a:52:b4:71:fd:bc:4e:13:
c7:b3:ec:f2:75:6b:62:5d:b5:76:5b:cc:0e:3a:66:
81:c2:e3:4c:12:d5:74:02:4f:94:da:71:51:99:d7:
c6:f6:7a:ce:e8:99:c9:28:08:ce:78:30:ee:e6:01:
50:d5:87:a9:bc:0f:99:15:73:d7:07:96:4f:a5:33:
22:53:35:81:a6:ce:f2:44:66:7d:35:df:c4:8a:08:
18:f0:9f:76:9b:92:25:fd:f4:0d:84:fe:6b:34:4c:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:D2:25:2E:4A:63:1E:87:52:07:93:E6:D9:F5:F7:E2:60:0C:A5
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:04:4d:5c:92:25:22:4f:e2:2a:ae:8c:71:1b:25:9d:5d:eb:
4f:36:62:33:be:e4:60:ea:9e:28:85:cb:3a:4f:68:87:80:46:
f0:60:fd:00:6e:b6:cf:d5:13:b9:7d:e4:1a:72:16:40:3a:af:
7f:03:93:88:c9:5d:68:a7:37:8d:94:4e:81:b2:73:1d:8e:9f:
0c:f8:b0:44:09:b7:fd:d8:5f:20:1c:0a:55:b9:6e:4c:96:12:
c4:f3:ee:62:fb:da:20:56:aa:dc:77:3a:2c:d0:dc:43:3e:27:
72:49:6d:de:76:58:d1:01:89:21:03:b0:b7:60:ea:bc:9e:91:
77:80:57:29:09:f5:8d:8d:ba:74:32:44:5c:ab:9b:1b:1e:23:
fe:1c:32:2e:ce:4e:60:84:65:40:15:c8:63:64:1b:90:ee:38:
17:ee:23:d5:86:52:ab:e4:48:08:50:3e:57:fd:e1:4f:d3:8a:
28:8d:5e:25:87:bf:ef:65:3b:d9:d9:ae:84:76:21:40:d9:01:
3c:b5:81:6b:24:9e:04:b6:81:5c:8b:6e:09:09:06:13:12:76:
0f:e5:b3:ad:71:8d:5a:22:a9:a9:83:3a:0d:6b:a0:92:b2:2b:
17:98:79:c8:99:ec:a5:19:b5:00:7b:bc:2c:6d:81:9d:dc:57:
ac:f3:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:37 2025 by rpki-client