Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: B71qIRoO8owAf+xvP4ayPLR4MUu/S7vRxHMyaeTW4+Y=
Subject key identifier: 39:BA:C2:52:99:EA:68:58:CA:71:C6:D2:D6:33:60:94:89:FE:42:27
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0199FB0EB8E2C87209794C192D9A9C4F522E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0877
Signing time: Sun 19 Oct 2025 06:01:09 +0000
Manifest this update: Sun 19 Oct 2025 06:01:09 +0000
Manifest next update: Mon 20 Oct 2025 06:01:09 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: ttLNhKCxpSj1VzqGL1YGNialY40ipeAM7cGOWC2Bub0=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:b8:e2:c8:72:09:79:4c:19:2d:9a:9c:4f:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Oct 19 06:01:09 2025 GMT
Not After : Oct 20 06:01:09 2025 GMT
Subject: CN=39bac25299ea6858ca71c6d2d633609489fe4227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:08:e9:18:d7:f1:18:a1:6e:95:33:35:07:
f3:85:96:89:f8:be:04:52:04:28:11:a7:4d:3b:69:
e7:16:89:03:79:0c:33:ac:bb:5c:48:54:18:39:59:
3b:fb:d0:f5:c1:a9:72:f3:b9:ca:ec:d5:04:11:98:
dd:3b:95:b9:42:9d:e6:49:aa:ef:a2:66:08:17:34:
2f:d5:90:0c:24:b0:7b:01:7c:00:cf:56:6c:3a:04:
da:1f:fe:af:fc:4b:28:89:a4:21:e9:8d:d0:ef:a5:
a2:0c:f4:fe:48:77:1a:a6:b7:89:e7:69:7d:e4:20:
26:dc:47:60:75:99:50:74:3c:29:3f:33:cb:fa:1d:
bf:24:ec:39:a1:46:af:8c:6e:68:3c:d5:ea:cf:c6:
15:f7:aa:76:fd:bb:92:24:81:f2:ea:47:c2:ae:a2:
e2:56:d6:2b:0e:55:a6:1d:db:2f:f3:36:6c:34:c1:
5b:f1:c7:10:c9:63:96:66:59:4d:ef:52:5f:a9:90:
fd:a1:87:58:61:c4:c1:f8:0d:6d:65:1f:02:d5:f5:
43:e6:48:98:72:74:ec:db:8e:ff:8b:96:5d:be:0e:
68:4f:40:bb:e4:42:3a:9e:bc:0d:37:e4:e2:09:07:
a8:6f:99:75:c6:a7:5e:b7:32:20:39:9a:c8:ac:04:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:C2:52:99:EA:68:58:CA:71:C6:D2:D6:33:60:94:89:FE:42:27
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:4a:9c:e9:f8:5b:5b:4a:73:a4:ae:65:e6:f4:b5:0b:68:
25:71:1e:36:9e:79:99:1a:d8:56:c0:87:fa:86:f5:b6:64:4c:
37:87:3e:a6:81:0d:4a:eb:4c:72:bc:4b:29:16:8f:01:e5:a0:
01:c0:49:90:c2:9b:04:b0:ac:76:c1:bc:24:0d:03:82:ad:f8:
23:d2:f0:f1:56:94:8f:d5:42:49:ba:42:78:ef:05:31:e9:09:
a9:7d:6a:dc:6b:11:59:49:49:95:c3:6e:2c:49:96:18:bd:af:
77:47:2b:1d:f3:e5:9c:46:64:4f:04:c9:b9:c1:48:4b:77:00:
f0:e4:27:6a:8c:d1:62:c8:b7:03:4f:61:f7:70:e2:5e:60:91:
45:86:b8:9b:cc:ac:df:33:40:8d:22:85:b6:11:45:a7:50:b5:
5b:96:01:9d:09:46:3c:be:5f:63:da:5f:02:75:49:94:18:a7:
e4:4c:af:73:0e:62:dc:e3:4b:16:56:e3:17:0d:98:90:4e:30:
05:ac:bb:7e:fe:be:3b:c8:5c:7a:9b:c9:f4:0f:8e:57:64:ac:
31:f7:53:98:b8:14:56:4b:6e:02:c3:5a:5b:2e:21:40:cc:11:
63:fd:2b:2c:db:9b:e4:b9:f8:57:ce:8d:07:06:c3:d0:86:56:
e4:ad:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:31 2025 by rpki-client