Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: //TqYSjn3y5a7BlsugmphLCFT7JpotrBK2OvMfqxdRc=
Subject key identifier: 35:AF:ED:F5:3A:5C:F5:26:C1:7E:5D:33:D6:B4:2A:04:1C:2A:50:D0
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0198D5157B50512729FA98624EE7D232CD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0DA5
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: mrFtZ5abE0P9qehduDDibksVEHdQvFq/uBKu9dUuMKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7b:50:51:27:29:fa:98:62:4e:e7:d2:32:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=35afedf53a5cf526c17e5d33d6b42a041c2a50d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:c0:b0:af:37:6a:cd:b0:f2:c8:45:fb:00:
aa:45:2f:e5:63:9b:93:32:f9:00:f4:1b:ab:26:c9:
78:40:ee:e3:03:e8:13:4c:3f:fe:ac:cc:51:eb:57:
17:a5:48:12:5d:ff:60:17:a1:47:e4:df:42:38:5a:
ed:dc:f2:42:bf:a7:55:50:21:ee:21:6d:f6:c1:52:
64:fb:c6:eb:81:b7:b1:0c:89:27:ed:b0:be:9e:98:
13:15:8a:8e:ac:2e:c7:c2:e0:24:e3:8b:b9:4a:a9:
31:74:13:60:0e:02:5a:0a:49:0c:8d:3c:80:a5:80:
70:c8:eb:87:85:c3:f0:de:6a:f5:23:2d:5c:25:8b:
ad:5d:74:b0:e0:1e:9e:80:8e:14:11:97:02:05:bd:
1f:43:3e:18:ea:6b:82:86:9f:32:b4:9b:1f:83:53:
9e:e2:df:10:ea:e5:69:75:83:df:6c:ac:e8:f2:bc:
34:64:99:db:0f:87:3c:40:42:ab:aa:37:2b:a9:9c:
ee:7a:90:8f:b2:ad:fb:85:56:2e:c1:00:a1:6a:48:
de:cd:e2:4e:b8:76:fc:b6:b0:d9:84:01:0f:02:cf:
80:e7:fe:4a:29:b5:fd:eb:34:f7:e4:d4:66:b2:bd:
b6:f2:a2:ee:55:9f:28:e5:e2:7b:f3:b4:35:31:a7:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:ED:F5:3A:5C:F5:26:C1:7E:5D:33:D6:B4:2A:04:1C:2A:50:D0
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:a6:28:a3:63:3e:c8:aa:77:27:65:09:3c:37:53:5a:92:
9e:f9:c4:9b:73:44:e4:73:a2:b0:6d:e6:e6:c8:41:b3:d8:cd:
4a:47:28:4b:f9:a1:ad:5f:82:de:61:6b:ab:f5:69:50:aa:81:
bd:d9:33:49:e9:66:30:83:e1:3c:30:44:8c:08:41:d1:be:13:
5e:53:ad:35:75:84:fd:76:23:bb:ff:fc:74:6c:35:15:1a:26:
2d:9a:ff:7f:23:2e:04:99:e7:0b:ce:fd:93:62:fc:18:a9:31:
50:40:dd:ea:c5:57:87:ef:4c:c8:27:34:54:d4:8e:49:7e:f9:
47:9a:1a:4c:df:01:23:e4:d4:ee:0f:1d:18:9e:b0:fb:c1:b0:
40:2d:f8:9a:5e:32:d0:50:48:56:f0:2e:bc:23:62:74:72:41:
fd:1f:d5:1d:60:ea:12:0b:8c:c9:87:47:34:59:03:2f:b5:17:
8c:f3:b5:74:54:e6:05:b6:1f:48:95:2e:a3:7a:68:c1:a2:0c:
76:ab:cd:f7:a3:58:17:80:e0:0f:bf:a6:83:55:f0:d3:7f:bc:
4b:2d:d5:47:3c:ea:4a:a9:14:4c:48:24:98:9f:09:4c:0e:10:
60:1f:57:a4:de:de:63:c2:5b:a2:64:23:34:d7:d4:1e:17:69:
b5:43:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:21 2025 by rpki-client