Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: WOZH2rryPj6OJNt+NHC0JrNJPPLfzTrldd+msr9CNSU=
Subject key identifier: F9:5D:A1:30:2D:54:38:13:19:A8:C3:BE:E9:26:F2:7E:E1:B9:BB:E9
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0197CC83C75F2D4A8299166071E1D193BB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0D1C
Signing time: Wed 02 Jul 2025 19:01:17 +0000
Manifest this update: Wed 02 Jul 2025 19:01:17 +0000
Manifest next update: Thu 03 Jul 2025 19:01:17 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: cery/wl7VFNsrGh4RPMQLMNxqRBo+Iqr0hAkJvGyXc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:c7:5f:2d:4a:82:99:16:60:71:e1:d1:93:bb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jul 2 19:01:17 2025 GMT
Not After : Jul 3 19:01:17 2025 GMT
Subject: CN=f95da1302d54381319a8c3bee926f27ee1b9bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:08:c5:bf:79:71:61:28:ce:b9:b9:ab:93:
bc:2b:3f:ea:c9:a9:05:06:2d:fc:6c:fa:75:60:63:
78:52:67:22:1d:a7:42:e6:07:7d:36:09:2c:ad:f3:
57:e2:9d:ba:f9:2e:40:ee:3c:6e:52:31:7a:2b:dd:
f4:ba:c8:44:84:8c:fe:54:59:53:1a:b9:93:c7:8e:
a4:50:fc:f9:03:34:4d:8f:57:d0:a0:43:e6:1c:28:
6a:77:3d:55:16:10:e0:da:52:37:f7:ea:5a:f8:76:
47:11:c7:03:5a:d8:16:6d:b6:2c:69:05:78:6e:32:
cc:20:cc:1b:59:f6:87:6d:2a:1b:39:92:76:e4:1a:
2a:ca:c2:cc:c2:e9:ae:cf:64:58:3c:37:28:84:60:
20:9a:27:61:7f:7d:c3:6f:6b:60:31:66:38:54:53:
15:ad:9e:76:da:98:bb:09:21:60:f4:2f:72:d3:f7:
4f:2e:75:24:fc:80:3f:91:1a:1b:5f:c0:59:93:87:
be:94:0a:1a:3a:0e:d9:6b:b9:a2:1c:83:4f:2c:bb:
6d:24:06:b0:58:8c:c2:d5:7f:45:be:bf:9a:e6:3d:
d7:c8:5d:6b:dc:29:56:03:1e:0d:ac:74:df:0d:70:
c3:76:d0:2a:74:29:f4:53:13:46:5c:ea:9e:c7:37:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:A1:30:2D:54:38:13:19:A8:C3:BE:E9:26:F2:7E:E1:B9:BB:E9
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:26:50:c1:f8:94:0d:f5:d2:5b:eb:8c:7b:7e:95:c8:c8:a9:
59:84:a2:46:d5:6d:09:f5:ec:63:5d:eb:6e:d5:39:45:e9:d8:
37:07:54:0e:71:36:44:d6:62:82:77:1c:ed:0c:fd:b2:99:d7:
d6:6d:63:94:82:1e:3f:d4:fc:fd:e1:97:3f:9c:0d:23:87:71:
7e:e9:d8:e3:a9:19:b4:10:9f:20:a7:e6:db:80:c3:72:ec:aa:
e9:23:c9:3b:0c:29:72:4e:e3:9d:7c:70:58:92:35:f3:f0:46:
23:5f:86:9e:90:ca:11:e4:af:65:df:dc:26:f4:ea:76:2e:c1:
ba:19:d8:30:2b:63:a3:24:3e:e3:49:85:9a:d5:f6:c7:4f:d9:
24:62:ff:f2:5f:fc:76:43:0f:af:8a:4f:b4:50:52:bf:a9:60:
50:ea:42:38:6a:d4:d2:05:3c:73:36:ea:6c:07:87:d6:28:bc:
fd:89:32:ac:c8:0d:dd:75:84:f3:bb:3f:02:3c:14:7b:d0:22:
49:52:d2:39:3a:ed:81:6c:0c:c9:25:96:a5:1b:aa:6b:7d:38:
d1:b1:bc:5c:13:a4:32:9a:9c:ba:ba:98:02:ae:e4:52:b2:1a:
86:b2:17:4d:16:cc:21:89:e2:44:c4:07:40:ec:06:ad:4b:48:
15:a0:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:56:50 2025 by rpki-client