Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: B0CmyXV2BwL5NW3DJ3N/LHaTZg8XYTda/ffnevs1lUk=
Subject key identifier: 88:8D:1E:9D:8F:D6:08:46:53:5D:08:F0:C3:6F:79:48:62:CA:EB:CE
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 019750B3A4B13ABBB40D8026D479EB35C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 18:00:39 +0000
Manifest this update: Sun 08 Jun 2025 18:00:39 +0000
Manifest next update: Mon 09 Jun 2025 18:00:39 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: Xj/mRvToP2VXnM7P5q3f3mD42KTQZvwnbu29Htx65dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:a4:b1:3a:bb:b4:0d:80:26:d4:79:eb:35:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Jun 8 18:00:39 2025 GMT
Not After : Jun 9 18:00:39 2025 GMT
Subject: CN=888d1e9d8fd60846535d08f0c36f794862caebce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:b3:92:f2:31:fe:6b:08:ea:f0:19:44:c7:
ea:74:bc:c6:5c:cc:57:5e:b1:2f:f8:47:ae:62:32:
1d:de:25:17:7f:62:54:96:24:d4:33:62:48:3d:f0:
da:0d:c6:4a:de:7e:b6:ec:4f:4a:8a:b3:70:86:dd:
75:82:ed:d8:a5:f5:0d:a4:ae:b5:ef:49:fe:ee:29:
5b:c5:7b:11:ce:05:b6:94:27:3a:28:73:19:5f:e8:
ee:8f:48:7a:97:74:ef:b3:64:58:21:3c:de:63:21:
62:8d:48:4d:8e:25:6e:34:35:e5:d9:fd:83:47:4f:
f8:b3:13:b9:02:79:a0:49:7f:1d:08:68:18:ad:29:
31:a4:c5:75:87:db:92:62:4d:de:12:92:5f:02:ac:
ee:8e:64:ea:3f:13:0c:b5:30:31:ed:7f:65:1d:06:
74:56:7e:7d:55:f6:0f:9c:a3:a7:d5:8b:57:8e:d9:
84:f1:02:0c:5b:75:6b:bc:3a:46:62:f0:3b:5a:72:
71:a2:2a:3d:e8:1d:5d:13:23:6b:56:9e:fe:db:fd:
f8:ac:4a:12:2b:95:f3:ea:67:78:ff:60:f9:03:e6:
d6:ca:8b:52:c5:41:ff:64:7d:79:6d:84:a9:b1:04:
83:40:ce:29:db:40:2c:57:88:c0:67:81:34:18:8f:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:1E:9D:8F:D6:08:46:53:5D:08:F0:C3:6F:79:48:62:CA:EB:CE
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b4:ec:bd:86:7d:01:7a:07:6a:da:b3:7b:35:87:12:30:d3:
8d:e9:5d:b3:98:c7:71:7f:f1:bf:8e:20:b4:64:12:7e:a6:56:
0d:1b:3f:c4:75:c3:00:8e:79:d0:e9:7f:89:c3:e8:97:69:c5:
98:da:ca:06:d7:cd:4e:36:e0:23:d8:f4:ae:22:bc:84:0b:3a:
fd:d6:d9:6a:b8:b6:69:7c:63:9c:d9:75:83:16:22:ef:a4:96:
b3:90:de:cd:2e:1b:dc:da:a7:a5:2d:8f:6e:46:00:45:b1:60:
c7:45:73:b0:73:af:c4:73:dc:77:9e:35:55:55:c5:8f:77:8f:
97:14:c8:c2:9f:75:c0:01:19:5c:11:a8:33:ca:df:7a:05:8d:
aa:26:73:02:5e:f7:ae:e5:59:2a:cd:74:90:e2:f3:6f:4c:5b:
df:47:1d:e0:63:c8:6c:14:e0:f3:91:9c:08:7d:9c:51:24:ad:
f3:b8:c8:e4:ec:af:b7:43:a9:44:21:28:29:d1:b8:0c:3d:66:
c2:6c:e8:30:73:a7:ce:4b:1f:e2:d0:ea:d6:14:85:c0:4b:32:
4f:7b:ad:a4:86:0e:12:d2:16:38:79:e3:74:30:ae:97:84:bc:
2b:2e:97:38:26:39:55:ba:f4:9d:c2:da:24:11:a5:c2:43:63:
c7:2c:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:31:28 2025 by rpki-client