Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: +C9FjB2nSqck96eyp7QCdtE9ifXEwWEAzG/gvLHZLVc=
Subject key identifier: C6:F2:7F:80:32:82:81:AA:B9:9D:BC:34:DC:CE:4E:69:2F:7F:1B:6C
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01976C98F51AA7165D0FE6A5A8008D32C820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0724
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: RR4Na4pULubhnW6V9BRukDOHL/4rp+6CAsTbhTM4W/0=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f5:1a:a7:16:5d:0f:e6:a5:a8:00:8d:32:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=c6f27f80328281aab99dbc34dcce4e692f7f1b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:52:7c:31:86:fc:4f:56:65:2c:62:16:45:
0e:fd:c8:d3:f9:41:a6:ad:91:d1:79:2e:57:77:a6:
48:2d:46:fa:0b:2c:39:49:aa:66:5a:2e:ee:ce:b6:
93:2d:44:21:91:92:02:05:dc:f5:55:92:00:f3:53:
30:17:1f:7c:04:ec:3c:38:f2:01:71:18:de:bc:fc:
f8:e1:eb:71:b7:57:44:71:ff:dd:51:d3:fd:da:30:
d0:90:e6:6c:f5:3a:84:e9:5a:92:6f:86:61:ad:d4:
d1:27:61:c4:f6:ef:51:a0:a4:4e:b7:70:d4:55:84:
af:42:e3:66:db:a5:62:17:d4:98:d7:5e:68:67:61:
81:cb:ad:e9:41:ba:c6:31:be:4f:d9:1e:3d:32:b6:
49:6e:c9:18:b3:97:c5:59:3c:43:9f:46:b7:b0:57:
0b:6e:9c:70:73:59:8b:34:04:a3:a9:7c:6f:48:ee:
1b:ad:1e:25:8f:d3:c6:d6:8e:da:be:fc:9c:ef:ed:
84:bc:c2:a0:88:9e:29:28:62:65:ad:d9:3a:e6:3c:
82:ff:61:b1:c8:db:24:5c:1e:b9:e9:b9:62:e6:37:
84:f3:bf:31:2e:b1:f7:74:d5:d3:bc:36:5f:f5:7c:
d0:14:bc:bd:c5:47:9f:50:63:1d:d2:70:c8:bb:5f:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:7F:80:32:82:81:AA:B9:9D:BC:34:DC:CE:4E:69:2F:7F:1B:6C
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a7:5a:a5:9c:02:43:be:19:cd:86:17:d3:5f:c6:9a:c7:2c:
8c:77:fa:11:a6:02:9c:34:fc:8c:6d:15:91:a7:80:f1:14:33:
c3:2c:9b:a6:52:b9:00:e1:5d:02:11:d9:1d:49:dc:4b:29:25:
94:86:38:2a:24:d9:2c:ed:98:e4:3a:78:c3:fe:d1:28:50:9f:
ce:3a:96:a9:56:44:bb:54:20:71:40:d1:3a:82:db:ca:13:1d:
fd:30:dd:35:2d:96:81:a3:7b:10:e6:61:9f:da:03:2f:47:6c:
a3:ea:40:d1:ed:c7:73:5d:26:14:05:bd:1a:62:72:94:b5:75:
9b:f1:20:7a:2a:37:cc:07:f7:81:69:1e:1b:44:86:cc:9a:4c:
c5:da:27:3b:e1:e1:51:3d:32:fb:b4:99:6e:ea:38:30:e1:b2:
bc:e3:d0:07:e1:bb:7e:23:cd:a0:b0:35:e0:8d:48:dc:da:50:
38:26:51:ca:e4:33:4e:6b:41:b6:13:df:57:05:c0:40:90:d6:
f8:e3:b6:7e:d4:fc:a4:95:cf:2b:c2:79:59:42:c2:ee:9e:5e:
63:3a:6f:ea:a2:62:c9:6a:d0:41:db:af:ac:03:6a:9f:39:bc:
6d:fe:2b:ec:a5:a5:a4:ea:d4:19:6d:b1:75:f4:42:bb:9f:9d:
72:8f:6c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPUapxZdD+alqACNMsggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi
YmQ4MzgwHhcNMjUwNjE0MDQwMDUyWhcNMjUwNjE1MDQwMDUyWjAzMTEwLwYDVQQD
EyhjNmYyN2Y4MDMyODI4MWFhYjk5ZGJjMzRkY2NlNGU2OTJmN2YxYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjFSfDGG/E9WZSxiFkUO/cjT+UGm
rZHReS5Xd6ZILUb6Cyw5SapmWi7uzraTLUQhkZICBdz1VZIA81MwFx98BOw8OPIB
cRjevPz44etxt1dEcf/dUdP92jDQkOZs9TqE6VqSb4ZhrdTRJ2HE9u9RoKROt3DU
VYSvQuNm26ViF9SY115oZ2GBy63pQbrGMb5P2R49MrZJbskYs5fFWTxDn0a3sFcL
bpxwc1mLNASjqXxvSO4brR4lj9PG1o7avvyc7+2EvMKgiJ4pKGJlrdk65jyC/2Gx
yNskXB656bli5jeE878xLrH3dNXTvDZf9XzQFLy9xUefUGMd0nDIu18dPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbyf4AygoGquZ28NNzOTmkvfxtsMB8GA1UdIwQY
MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt
NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx
LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKdapZwC
Q74ZzYYX01/GmscsjHf6EaYCnDT8jG0VkaeA8RQzwyybplK5AOFdAhHZHUncSykl
lIY4KiTZLO2Y5Dp4w/7RKFCfzjqWqVZEu1QgcUDROoLbyhMd/TDdNS2WgaN7EOZh
n9oDL0dso+pA0e3Hc10mFAW9GmJylLV1m/Egeio3zAf3gWkeG0SGzJpMxdonO+Hh
UT0y+7SZbuo4MOGyvOPQB+G7fiPNoLA14I1I3NpQOCZRyuQzTmtBthPfVwXAQJDW
+OO2ftT8pJXPK8J5WULC7p5eYzpv6qJiyWrQQduvrANqnzm8bf4r7KWlpOrUGW2x
dfRCu5+dco9sEA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:00 2025 by rpki-client