Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: ArT4GcbIqYYP2fe2w9PXahIu6yUpCC/erM08N/v30WA=
Subject key identifier: 43:ED:AB:97:DC:11:8D:C0:42:4D:4B:B6:82:5D:2E:12:9D:CB:E6:35
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0198D66058747A1916AA6C7C6EDB142074EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 040B
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: VOyWSl8iEPGn2ZUogukt4186CFofO13JdzdtzAW/evo=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:58:74:7a:19:16:aa:6c:7c:6e:db:14:20:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=43edab97dc118dc0424d4bb6825d2e129dcbe635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:69:74:25:42:2d:7c:9e:d5:b1:65:fc:77:
85:a4:e4:28:f3:c5:fb:74:af:f9:8c:13:cf:07:54:
4f:21:51:12:f6:b3:1b:62:4c:7a:9e:c6:d6:80:cc:
ea:44:ff:6b:81:0f:2f:a7:85:13:47:a0:ed:88:16:
44:14:15:95:46:39:d1:f1:72:13:61:8e:a9:29:47:
6b:90:b1:70:ef:c2:7b:39:6b:c8:78:45:6b:9b:f1:
af:b4:92:9e:f0:63:89:82:f6:5c:75:e3:a7:9c:82:
d0:78:34:23:4f:b6:0a:23:c7:5a:e9:8e:56:bb:7d:
c0:0c:ae:3d:28:57:4d:28:ba:a4:db:4c:68:7f:45:
06:6a:76:e3:cd:50:cf:70:63:d0:a1:2d:a8:00:43:
c1:27:fc:ea:b7:38:c8:3c:2f:1a:b8:ff:3f:77:e4:
10:62:75:8a:fb:e7:57:52:86:df:6d:9e:58:15:a2:
c9:4b:27:21:d1:6c:68:f3:36:7f:fe:19:99:f0:6b:
49:82:fa:96:9f:d9:71:b7:4c:a5:98:fc:5f:8a:26:
b7:76:0a:2f:7e:e2:39:93:99:38:67:bf:63:2e:25:
0d:5b:84:94:0a:df:af:c4:a3:33:b6:62:f6:89:2b:
92:66:d2:bf:ae:80:75:f2:81:cb:bc:75:46:ac:22:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:AB:97:DC:11:8D:C0:42:4D:4B:B6:82:5D:2E:12:9D:CB:E6:35
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:ed:0c:4c:a2:0c:3c:d7:8b:58:e7:e2:86:07:c9:30:0e:
5d:34:c8:31:fc:7c:95:a9:21:d8:ce:1d:e6:cd:81:f1:88:42:
13:49:ab:af:01:34:bc:48:fb:60:ec:ce:4f:c9:55:73:4c:76:
39:4f:23:80:9b:fb:2e:0f:10:90:80:8b:12:3d:69:7e:75:e8:
de:95:c5:c3:b1:cf:ea:71:fd:6b:74:c1:64:4a:ea:16:93:0e:
f7:69:fb:d0:29:4f:60:8c:ae:49:30:b1:2c:ba:1e:29:08:fb:
4f:53:e9:75:2e:7b:d3:53:f8:a5:b2:f5:2c:e8:a6:66:87:1f:
e1:52:89:c8:99:71:21:47:3b:b4:9d:d9:0b:05:cb:6d:76:9e:
5f:93:7e:da:8d:04:4d:3f:dc:d2:83:a5:40:ac:d1:f2:21:76:
a5:e0:d1:30:b5:67:35:0b:d2:47:a5:48:0a:3a:cd:b4:c8:f2:
4b:06:95:91:eb:dd:6a:73:69:98:07:a6:ea:76:dd:52:14:b5:
93:4e:38:1c:4e:9d:db:f2:d4:2a:1e:51:00:48:8a:d4:e8:93:
c2:de:64:77:cc:94:45:cd:7b:fb:ee:8a:94:43:89:7f:97:b0:
e1:ff:66:e2:35:f0:89:be:7d:75:33:94:da:86:ca:db:87:01:
6f:e8:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:22 2025 by rpki-client