Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: SAoj8Z+P/ihnviXZxB/FTuSXWjXJACQQ7DzmmuCRLEc=
Subject key identifier: 72:F9:0B:1D:D7:F7:0D:81:FE:33:D2:CD:4C:D7:8C:FB:EC:1C:47:55
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0196C5DE83DA794DD89ED514C9A43E23F310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0C94
Signing time: Mon 12 May 2025 19:00:16 +0000
Manifest this update: Mon 12 May 2025 19:00:16 +0000
Manifest next update: Tue 13 May 2025 19:00:16 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: r5NbFW0/HfG5H94xlBqi4X7yRhQQx3RL2PfjoZsKzRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:83:da:79:4d:d8:9e:d5:14:c9:a4:3e:23:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: May 12 19:00:16 2025 GMT
Not After : May 13 19:00:16 2025 GMT
Subject: CN=72f90b1dd7f70d81fe33d2cd4cd78cfbec1c4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:c9:77:ab:57:66:6e:9f:42:c6:08:b8:4b:
51:6f:01:f6:69:f3:11:44:cc:20:9e:9a:cd:0b:61:
d4:02:7a:de:7c:df:56:5b:a2:25:e1:96:0c:ea:1b:
3d:59:67:22:80:73:34:46:12:f6:2c:e3:7c:74:c7:
9e:d0:13:33:2b:cf:13:4f:1c:f9:eb:25:dc:49:7f:
7e:f8:ed:6c:66:ac:b4:b4:c7:e6:67:cd:b8:04:e7:
a1:da:f9:1a:7b:cc:3d:11:14:a9:1d:eb:63:64:fc:
de:7f:ae:c7:73:c0:d4:6e:dc:94:c8:28:6d:e8:9e:
a6:9a:e9:3b:d1:7f:1a:af:42:fc:10:27:22:2d:08:
02:aa:25:4f:b4:a8:27:8d:23:1c:41:41:80:80:97:
c5:50:ba:7d:38:73:d1:7f:5e:50:a5:13:ff:3d:df:
52:1e:01:a1:2d:00:82:c7:3a:b6:50:93:a5:a3:9b:
e9:3c:f7:01:13:a2:f5:d3:24:f7:da:17:f4:b2:d0:
56:70:6b:7f:e6:c8:5a:81:62:61:96:21:db:d9:1a:
1b:8d:85:c9:a5:e1:8b:13:1a:ba:fe:86:86:a7:78:
d8:77:55:b2:f5:7c:32:41:00:e9:27:d4:9f:48:47:
0c:75:c6:b2:b8:14:db:e7:78:0a:26:46:9d:43:07:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:0B:1D:D7:F7:0D:81:FE:33:D2:CD:4C:D7:8C:FB:EC:1C:47:55
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:07:c4:3d:c7:11:a1:1d:80:27:68:a7:b5:f1:f7:23:44:
1e:37:fd:4a:0e:77:be:da:1e:a5:78:06:cb:94:bc:5c:2f:91:
4f:52:5e:6e:6c:c7:66:fe:b4:d6:28:a3:92:97:28:98:77:9a:
93:c4:a0:36:a4:ae:2b:80:40:d4:ae:b5:25:43:15:e6:90:73:
2f:9b:5d:81:c5:55:33:ad:0a:54:e7:4c:be:06:13:3c:f9:8d:
d3:bb:6c:f8:18:f6:e4:29:bb:ce:a4:d1:37:d0:a2:32:f5:93:
87:59:1f:3f:92:1c:61:b2:74:43:99:62:c7:b8:a7:1b:d4:c6:
22:a9:4e:a8:2f:2e:4d:7e:19:29:ac:18:68:79:85:9d:8f:07:
eb:3e:79:9c:c2:0d:30:c9:0d:fa:39:eb:06:e8:2c:d9:b0:f3:
4d:b4:6e:12:35:3e:06:6b:45:9f:2d:50:17:dd:51:5e:22:49:
1a:e0:d6:7e:00:5e:e6:3d:e5:2f:e9:42:96:cf:3c:a4:16:38:
a8:48:56:d0:a9:c2:1e:d6:3b:a8:27:9b:7a:3f:12:aa:07:87:
31:d8:db:d5:2a:fa:bd:70:d4:03:14:4b:db:c9:f8:46:cb:57:
64:76:8c:6a:1f:fc:a6:ef:51:ec:07:e3:ee:ff:1e:cc:ed:8e:
b1:66:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:32:49 2025 by rpki-client