Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: ufL+JV/OAeqYrzcL+cID5o6Lx2KWYEe6pxQc+21pSU8=
Subject key identifier: 85:F0:DB:71:5A:1E:56:7D:97:D2:72:52:BC:26:4E:CC:91:5F:6A:23
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0197C56E8884F8B6ABDE663B65F7469BDBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0752
Signing time: Tue 01 Jul 2025 10:00:44 +0000
Manifest this update: Tue 01 Jul 2025 10:00:44 +0000
Manifest next update: Wed 02 Jul 2025 10:00:44 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: ZeT07XHw48NRNx+7u2mqypRDZSBn2dfCn+ntcTe2zLc=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:88:84:f8:b6:ab:de:66:3b:65:f7:46:9b:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jul 1 10:00:44 2025 GMT
Not After : Jul 2 10:00:44 2025 GMT
Subject: CN=85f0db715a1e567d97d27252bc264ecc915f6a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:d7:4e:6f:ab:32:17:76:6a:b7:21:87:5e:
fe:b7:61:d5:4e:d7:58:27:f3:02:5f:aa:ed:01:cf:
82:cc:d2:8e:95:e7:db:24:61:75:f9:40:65:1c:6a:
b6:64:6a:14:05:ee:ba:bb:b0:22:9d:9b:53:29:a0:
69:99:ef:f8:a4:e6:93:c4:c5:74:8e:79:a3:2f:30:
95:ce:e6:6d:90:da:b5:26:83:50:1e:79:80:6d:b3:
9f:29:c0:de:f3:64:f6:1c:be:fe:df:fe:f2:76:d0:
50:20:db:f1:bb:dc:88:b9:7c:13:4a:51:76:49:7f:
80:65:ed:95:1b:83:3e:75:a9:6c:cf:35:93:43:ae:
dc:41:a9:fe:26:63:42:5b:8f:f8:26:2a:99:05:73:
ab:2e:9f:42:80:2a:c9:97:4c:da:30:90:fa:d9:76:
84:94:32:78:70:a0:e9:a8:ea:22:b1:ce:93:9f:e7:
13:00:37:e5:7c:b1:99:12:14:dc:1e:10:6b:47:99:
bd:b3:cc:93:c6:72:48:ef:11:63:3e:86:6a:8c:13:
ef:98:c0:b1:7c:d6:75:10:83:51:76:08:84:86:63:
c3:5a:25:b4:6d:ae:9f:f4:05:51:e6:46:1a:90:9a:
58:54:c5:86:39:90:91:06:ce:87:15:74:12:6c:84:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:DB:71:5A:1E:56:7D:97:D2:72:52:BC:26:4E:CC:91:5F:6A:23
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:29:5a:4d:e2:ad:00:44:59:29:7c:6b:8e:82:72:fc:59:
7a:9b:cb:b7:d6:26:cb:f0:7b:2a:bc:6c:24:8f:be:b7:c3:e7:
04:19:00:63:5c:bd:bf:dc:35:65:97:f9:0d:dc:e4:83:5d:0b:
12:81:0c:8a:ec:69:ba:de:e7:90:df:5d:41:96:71:5d:25:60:
46:4c:5b:64:1a:3e:12:b5:09:1b:45:93:b1:e3:c9:77:0c:3f:
69:12:2a:df:1a:4e:30:34:09:1a:ba:c8:c0:18:36:a8:53:b3:
b1:3a:04:46:58:93:40:27:77:8c:92:e2:cc:d2:74:36:da:ed:
48:63:33:36:59:fb:0b:03:0e:fc:ec:37:1b:50:64:15:fc:d8:
c2:50:b4:55:67:6b:1f:30:3f:4e:bc:66:e4:af:23:ce:75:4d:
84:1a:11:c5:e5:4e:91:c9:cf:0b:7c:25:e2:50:7b:ca:59:2a:
0b:27:30:e2:8e:75:4e:a5:75:45:5e:29:84:e2:1a:c9:93:af:
68:97:22:74:0c:03:9f:96:35:11:5d:d8:22:76:4e:0a:d9:43:
32:9a:b9:27:07:bd:95:d0:5c:7c:56:b3:e3:d1:aa:09:06:8b:
78:21:65:7f:02:f4:d4:1e:7b:45:60:01:67:4f:d3:73:f4:aa:
6a:7f:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:53:19 2025 by rpki-client