Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: L0PxPZBVoQBboJ9xut8S3Rxtseb8/hj9UHAlJ5V00CU=
Subject key identifier: 50:9E:3D:D9:5C:2B:05:20:1D:86:E6:3D:98:35:63:9B:0D:BA:97:9B
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019873E35BF905BDB145EEA69757A4782E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0B4D
Signing time: Mon 04 Aug 2025 07:02:16 +0000
Manifest this update: Mon 04 Aug 2025 07:02:16 +0000
Manifest next update: Tue 05 Aug 2025 07:02:16 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: nNQwWERHUM3Jf24oZqgAnnqEVQu2zpoRQ3GVtKQvDg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:5b:f9:05:bd:b1:45:ee:a6:97:57:a4:78:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Aug 4 07:02:16 2025 GMT
Not After : Aug 5 07:02:16 2025 GMT
Subject: CN=509e3dd95c2b05201d86e63d9835639b0dba979b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:f6:10:4a:2e:3a:04:08:30:df:6f:7d:a7:
c4:8a:d6:ae:23:1b:71:f4:7d:a5:ab:9c:cf:cd:e9:
3d:b3:83:88:e9:73:f3:08:97:64:a8:be:ca:ad:86:
18:80:b5:a9:ae:53:b1:60:13:9c:87:e5:fd:b3:41:
f0:0e:7f:e3:e8:8d:ff:a1:c1:8e:fa:5c:94:e0:a6:
a3:3c:d3:13:62:96:c0:16:f1:13:22:aa:e7:c4:e5:
23:13:7d:5b:7b:68:60:6b:9a:b7:1a:b8:44:98:0e:
84:b8:91:9d:a5:ac:5f:3e:dc:f4:68:39:08:aa:e7:
08:0b:84:87:6c:11:53:f3:27:10:39:6f:4f:78:11:
c2:ae:8a:87:5d:46:81:c6:20:7c:f8:09:2a:a3:54:
b7:42:f9:fd:45:ad:15:57:03:97:f0:a6:54:5d:83:
f3:e0:dd:62:ee:30:a5:ec:e3:3b:39:35:2b:6e:fb:
ee:8b:b3:72:3c:54:ae:50:14:55:7e:94:d2:54:0d:
5b:89:d9:b0:a6:62:82:dc:4b:8a:03:5c:48:25:f0:
c8:79:a1:08:8f:51:44:02:65:ba:01:28:17:fb:78:
fe:22:49:d3:e8:ac:5c:80:b8:58:5c:9a:07:c4:b7:
e0:de:aa:55:b4:f5:6e:76:9a:1c:57:62:6d:3b:1a:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:3D:D9:5C:2B:05:20:1D:86:E6:3D:98:35:63:9B:0D:BA:97:9B
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:83:a2:6f:04:c3:b5:aa:04:13:52:ec:66:ba:83:73:49:c4:
6a:20:91:54:4e:d2:b1:02:74:ac:f4:53:ae:9a:85:ea:40:0c:
20:2a:a0:95:42:17:ce:23:2a:06:3b:0e:c5:22:3c:5d:14:7a:
fc:83:58:f5:4e:ac:fd:5f:f6:22:04:b6:cc:db:5c:46:82:aa:
47:42:e4:1a:75:ce:be:3a:1b:2b:8a:84:7e:b2:61:b7:bf:98:
ac:bf:30:5d:fa:3a:ab:e8:20:fd:ca:c0:24:ec:9f:6a:74:25:
c6:00:a0:88:07:6e:54:9f:2a:76:18:d6:a1:aa:13:2a:75:5f:
2d:0e:ed:06:7c:2b:cf:b4:31:7c:6c:3e:bd:62:1e:fc:14:fd:
9b:12:3b:a3:e3:ef:0f:3b:8b:ef:61:70:27:28:b2:84:20:05:
83:77:a4:bc:f3:97:d9:5f:53:e2:97:5d:96:56:10:c7:10:72:
0d:07:1a:06:76:bc:fc:90:1f:a3:6c:58:57:b1:00:69:e0:84:
df:83:98:63:66:d1:50:03:c9:e3:3a:41:8d:d3:c5:6d:32:2f:
2e:48:90:21:11:7c:4b:20:8a:a4:73:fc:cc:de:c0:2d:72:96:
84:94:ee:7c:9b:b2:26:2b:27:55:4c:30:bd:0b:ab:f4:e2:8e:
12:e8:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:31 2025 by rpki-client