Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: bwgs63lr3AXx16C9j+TddW4KKuXpMsHRrig70h/PObU=
Subject key identifier: 68:DF:19:A6:A7:40:3E:0E:6C:1D:0B:5C:E1:66:0A:88:85:45:C0:CE
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0198D5BBD910B30A922EF6E267BF0322F27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 07DF
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: 0AlzNG9d9dEiz7a76c3cOkpwnzf3118bXx1TXLqFGoY=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d9:10:b3:0a:92:2e:f6:e2:67:bf:03:22:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=68df19a6a7403e0e6c1d0b5ce1660a888545c0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:91:45:52:c0:f1:7b:d1:3b:33:75:6d:b3:
62:55:74:3c:76:42:da:12:d4:aa:96:06:b5:c8:37:
24:2a:09:38:eb:ab:4b:b3:ee:1b:20:ea:95:92:9f:
ae:0a:67:a6:f5:2c:f1:72:f8:be:91:42:d1:56:57:
f3:28:e1:41:15:97:c5:a4:be:c0:ca:73:76:2b:69:
1b:da:a8:9a:83:e8:d0:62:61:24:ec:da:15:f8:c9:
5f:2b:d6:c7:ce:a3:90:3c:61:1d:a3:8f:1c:c4:8a:
49:86:e6:a2:bf:65:13:19:34:8b:4c:8a:9b:e9:df:
71:9e:86:a6:63:5a:2d:9d:9a:83:0b:10:91:22:e7:
81:05:45:a0:ee:33:c7:cd:bb:e7:cf:ba:33:98:98:
2f:8a:eb:2e:03:d0:40:5a:0f:6f:c7:4a:b4:19:35:
53:f3:a7:fc:43:75:c9:dd:75:46:26:3b:ec:e2:a2:
43:43:0a:24:db:47:c0:40:4f:4f:68:5e:63:16:e9:
b7:c6:f2:67:c2:c4:d9:7c:e7:91:e4:ef:d2:52:16:
da:89:83:fd:26:c1:00:64:4d:6a:3d:c3:0d:9a:a4:
3d:03:b1:96:b5:57:20:dd:68:c6:c6:50:f3:28:cc:
8f:68:ca:f0:6e:c9:ab:23:82:27:b5:2b:75:cd:7d:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:19:A6:A7:40:3E:0E:6C:1D:0B:5C:E1:66:0A:88:85:45:C0:CE
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:df:14:02:c9:9e:d5:6d:0a:34:67:00:c8:84:74:65:b4:90:
34:0a:e6:95:3e:e2:e4:2b:76:6b:16:9c:8f:2d:5a:0b:ce:3a:
7e:28:c1:9b:9f:6c:24:a9:02:29:c7:db:35:ac:12:c7:8f:14:
fe:7d:10:88:e0:dd:af:11:fc:fa:b5:a5:e4:85:a0:f0:d4:a5:
03:d5:e6:4f:e1:4c:4e:be:2e:9d:c2:e7:7b:6f:75:de:1b:dc:
f3:cd:2b:0b:76:36:3c:f7:ca:00:4c:6a:9c:34:94:a9:9b:86:
6a:0a:61:8e:1d:fc:6f:de:0d:66:3e:d8:96:c6:fb:ea:bf:7e:
fb:50:7f:28:af:96:a4:e4:56:21:19:e5:2a:7c:ca:2d:7c:a4:
f8:10:40:50:b7:85:40:34:82:10:d2:29:e6:7e:5d:84:da:f4:
c3:b1:08:94:ca:65:5a:77:3b:44:a6:12:61:1e:2d:15:ea:e1:
bf:e5:8b:b4:37:b3:26:8c:7b:bb:16:b5:b7:71:e1:55:d1:22:
66:42:a9:66:13:03:9d:1e:9a:aa:0b:3c:59:68:d6:89:ef:d3:
83:ec:be:31:d1:73:e6:c5:97:95:71:84:e1:70:63:3a:4a:b0:
59:be:18:01:20:3d:08:77:43:9b:ed:0a:27:2d:14:44:b1:92:
fa:42:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:15 2025 by rpki-client