Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: qaeCJVesEDmVDHLG7NPnyNcKhe311SHiE/F14bLcOaI=
Subject key identifier: 10:6A:D6:48:2F:25:31:E6:20:52:E8:79:44:39:79:12:89:83:7F:AE
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0199FDDA48287A21EE02F1155CA398C5743A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 04A4
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: ZD4cSxJie7UZVAxs4+hLve68soN+sUH3+SHMzODIaK0=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:48:28:7a:21:ee:02:f1:15:5c:a3:98:c5:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=106ad6482f2531e62052e8794439791289837fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:57:bd:46:0a:fb:3d:4a:7d:5b:b4:b9:f9:
4d:d5:a5:3f:02:a8:89:55:13:03:1d:a5:bf:d4:82:
4b:03:01:78:81:14:33:43:62:a9:57:82:dd:36:f6:
3a:18:50:f2:ad:3b:99:c4:57:fb:d1:78:3e:dc:75:
be:72:7f:01:aa:94:b0:dc:e4:3f:55:84:ce:d6:09:
db:2f:55:55:72:ed:26:e0:f0:33:a5:65:ee:f3:f3:
58:0a:83:d3:33:74:b1:0c:1e:f6:1b:e3:87:a7:c0:
b6:f9:bf:52:c8:42:a9:4d:73:21:d5:4d:23:25:10:
1d:3c:d5:d5:9f:5d:36:95:4c:de:35:8d:b2:10:36:
45:6a:46:da:af:17:eb:01:0e:03:86:29:67:5d:da:
95:e7:cc:21:4e:5f:1f:de:e1:c4:26:08:15:67:21:
0d:30:2c:6d:83:08:49:99:d4:d7:a1:69:b4:d4:55:
ba:bc:fa:3d:45:2b:53:9c:63:f8:a8:22:ee:68:0c:
0e:27:6e:9d:3f:5d:3d:11:9b:c0:ed:64:e4:85:42:
b6:12:bc:8b:c8:47:fb:68:ac:56:9b:6a:3d:bb:d6:
6b:ce:8d:e5:51:00:28:fd:23:45:7d:67:a1:ea:aa:
24:f9:b4:bf:f2:df:3a:2a:a9:e0:41:26:08:12:46:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:D6:48:2F:25:31:E6:20:52:E8:79:44:39:79:12:89:83:7F:AE
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:a9:3d:1f:8a:26:75:a8:2b:ab:5e:52:bc:f1:81:2c:be:
c0:a1:7c:75:eb:80:fd:79:4f:2f:31:cf:e3:9a:bc:52:dc:de:
91:d8:99:55:95:28:d9:18:e5:52:19:cd:1d:63:fd:b1:57:5f:
79:e4:37:0b:83:37:d3:23:fd:af:15:10:6d:ba:e0:39:85:ec:
2c:76:2e:bb:53:ff:7b:ea:b2:6e:30:73:6f:78:82:92:6b:09:
b6:3f:e8:16:55:3b:b8:9a:2c:f5:37:0c:10:e3:c9:b3:91:35:
87:44:c7:ed:15:bc:34:0f:ce:59:9c:e3:90:b4:e8:fc:67:79:
6b:01:a2:78:19:be:e0:ea:6b:80:cc:f8:51:5c:e4:b6:15:30:
2b:7f:b0:a2:7c:d8:e8:91:ec:d2:24:2f:64:29:83:22:e9:cd:
3e:8d:45:4b:fe:0a:95:67:eb:74:78:87:ca:1d:e2:f3:1e:01:
32:35:1e:f2:78:07:a8:e7:69:e0:f0:0d:a9:0e:5f:06:cb:5c:
ff:8c:e7:f4:c3:61:9b:1b:db:6e:2a:08:ad:14:4b:a8:1a:52:
00:54:ba:fd:64:44:08:5c:2c:ce:c8:a9:69:32:d8:77:6c:be:
87:59:02:ac:b2:a0:a3:df:b5:fd:45:c1:88:aa:1a:c5:e1:22:
d0:b1:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:46 2025 by rpki-client