Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: 0AN6dciqtdCAcqhLGa7XUjl8tgxFy/g+Rh7z9SVLltw=
Subject key identifier: 4D:A7:96:F8:2A:66:FD:CC:DC:21:23:31:29:C8:CD:9D:6F:63:53:B1
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 0197B8FCF4086DECFF111E1FEACA5DB23E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 0762
Signing time: Sun 29 Jun 2025 00:01:14 +0000
Manifest this update: Sun 29 Jun 2025 00:01:14 +0000
Manifest next update: Mon 30 Jun 2025 00:01:14 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: wT7tXm6KPj19WwLsAUxJG4wYnO6i4j29VLFC//YHcOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:f4:08:6d:ec:ff:11:1e:1f:ea:ca:5d:b2:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jun 29 00:01:14 2025 GMT
Not After : Jun 30 00:01:14 2025 GMT
Subject: CN=4da796f82a66fdccdc21233129c8cd9d6f6353b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:84:11:55:d7:d6:86:a8:5b:99:21:dc:da:
d3:c9:5b:35:9f:ce:8a:8a:22:34:fa:dd:64:fe:ae:
ee:c5:70:d0:09:4b:96:aa:a2:f7:1e:7b:03:59:d6:
e1:df:dd:50:da:09:04:4c:4f:6e:9b:f6:d2:ef:c9:
ce:15:5c:7e:f8:57:18:3c:3f:7f:6a:0a:7f:e8:79:
27:ad:bd:31:94:55:ba:8f:b5:8f:ba:33:11:49:7e:
77:45:94:62:2a:b6:63:65:58:1a:a8:4f:ad:0c:5d:
8e:c1:b5:02:dc:5a:b0:94:1f:2f:53:8a:2f:b8:b1:
1a:61:7c:36:c3:e8:1f:f4:1a:06:85:06:74:21:39:
11:16:e4:11:87:27:e7:97:2c:0c:e3:83:6a:48:c5:
fa:eb:ee:c3:65:14:c6:4f:1d:1b:87:93:26:6f:4a:
d3:b1:aa:15:fd:a1:e6:f9:af:11:4b:14:b4:fd:cb:
3c:10:51:b3:7f:5a:76:75:5f:f7:0d:9c:30:24:20:
fa:7d:2f:fc:93:4d:b9:7d:01:59:94:47:91:12:c9:
e9:86:e3:84:9e:fd:85:0e:b6:52:ea:03:6e:55:dc:
31:18:2a:0a:c9:a2:a5:7f:20:37:ca:c7:1d:a2:1a:
61:f8:a9:4f:81:68:4c:22:6c:71:b6:35:4b:49:88:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:96:F8:2A:66:FD:CC:DC:21:23:31:29:C8:CD:9D:6F:63:53:B1
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ec:1f:46:35:c4:2c:76:78:c1:b7:f6:9c:13:d9:6c:95:52:
33:45:e8:7a:84:1c:46:6b:db:6b:09:65:26:4b:0b:87:ee:56:
fa:6e:ad:21:58:6b:95:93:8c:ed:57:79:28:2b:14:32:d5:30:
01:1b:4a:3f:96:a2:c6:4b:c1:dc:4f:60:86:17:79:4b:76:75:
ce:cb:a2:0a:6f:f8:89:81:79:85:37:8c:fc:b5:f4:a6:a5:90:
be:0b:bc:61:9f:ff:11:b6:47:f6:da:cf:72:5f:79:dc:be:57:
7a:a0:76:dc:3a:c5:f6:ec:ee:28:7c:c6:aa:52:43:a9:89:05:
2e:bd:75:ec:71:b6:00:06:2e:b6:01:39:8e:10:50:90:8d:cf:
71:5a:b2:37:fb:61:d0:e8:0f:35:c5:89:8a:77:da:1d:d2:ba:
86:d3:39:99:1a:a7:c9:62:79:c8:ba:6b:ad:da:c6:bc:09:ca:
67:c4:64:cc:93:96:53:79:57:e1:ed:a8:53:9d:b4:dd:47:61:
42:67:87:05:c4:c9:37:09:9e:88:ce:52:3d:0d:75:de:15:7c:
2c:e0:d9:d1:23:91:e1:ba:e0:dd:ce:d8:e9:00:45:a4:50:b2:
bf:84:13:ec:47:06:fc:0f:1b:8b:12:b8:57:6a:c6:bf:0c:bf:
23:af:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:56 2025 by rpki-client