Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: Z6X00RDKYJrbN5m4/iGMZIvOFjwCwPAV9+NBX0JYrkI=
Subject key identifier: 78:EB:D6:51:5B:A2:11:1C:F6:69:D6:70:C6:7B:C4:89:D3:07:6D:C0
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0197B6A1D29B660E1BA0930F9A9650261FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0376
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: RzfymOiIzjCyTOwAt703f0oi/TkNgplQQfdSp9IQb0Y=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d2:9b:66:0e:1b:a0:93:0f:9a:96:50:26:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=78ebd6515ba2111cf669d670c67bc489d3076dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:68:08:c6:ad:57:44:6a:02:03:a7:6b:e7:
bb:f1:d2:b2:81:77:15:01:b5:6f:93:98:cd:14:e6:
7c:79:45:fa:3e:7e:b4:e0:aa:0d:d2:71:ba:7d:b3:
35:17:82:b7:cc:f0:e5:ce:e2:90:7b:ff:51:06:9f:
7a:3a:c1:14:b4:e0:cc:aa:c3:e9:67:e9:11:68:91:
d5:f6:68:d4:fe:28:73:5c:aa:36:72:cb:07:e0:32:
3e:c1:71:bf:9e:91:c4:fa:2c:4e:34:b3:24:a8:d7:
78:ff:01:0d:c6:cd:18:dd:73:3b:4b:6b:dc:78:2c:
3a:9a:06:31:8d:6b:69:02:3c:5a:a8:8c:ab:08:59:
40:8b:59:e1:2b:dd:f6:21:9f:c4:45:2b:63:62:aa:
eb:b1:2a:69:67:d3:41:86:54:93:cb:3c:07:f7:b1:
99:1f:18:5e:36:14:8a:e5:9c:1d:f5:bd:84:9b:6b:
3e:77:bf:95:95:fa:da:76:72:3e:d0:ae:af:cd:69:
86:b6:3d:eb:49:8d:cf:fe:78:7e:09:48:18:32:8b:
3a:0e:03:d9:46:f7:32:e9:b2:be:6c:34:60:71:de:
10:9c:99:f1:71:34:d4:df:7c:76:9a:c1:c4:33:57:
d5:e6:5a:4a:1e:fa:0f:98:be:d9:2f:f3:2f:93:dc:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:D6:51:5B:A2:11:1C:F6:69:D6:70:C6:7B:C4:89:D3:07:6D:C0
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:86:73:79:05:67:a9:c5:e0:32:03:8f:d9:bf:6f:9b:1d:
e9:53:c8:30:1a:6f:68:39:f9:59:9f:dd:14:38:aa:f2:b8:ee:
da:1d:55:72:b3:c1:d4:21:0a:19:6e:67:ba:1d:c6:74:e9:3f:
73:04:9d:68:eb:3d:77:41:af:9d:ef:85:e7:b5:1b:2d:4d:86:
b2:20:dd:5d:ab:c1:2c:8b:3d:3d:fa:e3:69:f8:ea:d2:4b:f5:
38:70:4e:ea:ce:b9:3a:0f:32:c0:e4:34:57:37:4e:ad:90:1c:
10:1f:f4:35:b3:65:54:b8:91:54:58:2c:6f:e1:e6:b0:55:e5:
be:05:a5:46:9a:8b:54:03:3d:e1:2a:9e:68:20:fb:67:17:a9:
93:b3:a7:21:ad:c0:76:49:54:3a:61:bf:57:b9:db:ca:db:38:
c8:a5:2c:9f:1b:73:ec:1e:ae:c5:61:c1:40:dc:b2:17:a3:d2:
7e:c2:59:08:b5:7a:7f:57:8a:98:0e:aa:08:53:03:b3:50:68:
d1:5f:26:94:af:7e:f7:3d:0a:cc:34:7e:d6:ba:06:28:62:1a:
65:e8:61:50:5d:1d:14:dc:2a:8e:1e:f2:22:f7:cf:94:e2:eb:
5a:aa:b6:95:bd:91:a2:95:53:a4:68:1b:37:93:4e:fa:aa:14:
c9:fe:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:52 2025 by rpki-client