Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: qpKuzVx6QoSXDULgjkNoQQlQSftLp2bWRJBr3A106A0=
Subject key identifier: 62:A9:CA:40:FC:F1:22:14:58:0F:FD:62:B4:5D:1F:CE:CC:D6:83:4A
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019872CF6633ADB4865C22432F7D95215F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: A4
Signing time: Mon 04 Aug 2025 02:00:51 +0000
Manifest this update: Mon 04 Aug 2025 02:00:51 +0000
Manifest next update: Tue 05 Aug 2025 02:00:51 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: ukgh64GnHpUFMt+PpZxvKMM/cMkmjRYBp10RbgjHqt0=)
2: Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa (hash: QWuXRLwV44VOALcmRW0lf+RWKmWiNgLwuGDWKDY/d3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:66:33:ad:b4:86:5c:22:43:2f:7d:95:21:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Aug 4 02:00:51 2025 GMT
Not After : Aug 5 02:00:51 2025 GMT
Subject: CN=62a9ca40fcf12214580ffd62b45d1fceccd6834a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:35:94:3c:4f:56:06:15:a4:75:2d:d6:f3:
c6:12:f4:24:b3:c7:84:5f:18:77:93:65:55:a7:5f:
59:8f:4c:65:c9:50:b8:57:ca:40:09:99:c1:ef:e3:
dd:d5:b9:ee:5c:e6:25:14:ae:05:7f:06:d4:4c:93:
82:db:73:3d:61:f2:93:ec:20:ee:51:d1:a1:e3:2d:
a5:eb:9a:9d:f3:d2:dd:70:9b:47:a2:d8:73:17:84:
75:43:e4:31:5a:86:f2:a8:94:c6:a9:a8:c6:2a:8a:
cc:b3:5d:29:26:ba:4e:ae:df:9b:18:a5:79:b3:9d:
92:76:a8:75:ea:e4:76:2c:96:5b:af:31:95:3c:f3:
15:15:13:3e:de:dd:96:af:b4:9d:1a:da:95:4c:1c:
54:55:87:44:98:96:2c:b6:ce:eb:6d:cc:15:e0:84:
f4:c2:b1:97:30:ff:71:71:22:38:4f:6e:70:15:76:
b3:ce:ba:02:fb:dc:8f:06:b2:58:d3:4b:cf:1b:2c:
75:23:72:53:e2:8a:43:2f:e2:78:7e:31:54:3a:1f:
a1:92:1e:e3:63:8d:85:dc:27:56:e8:1c:46:63:f8:
e5:67:8c:b1:53:c1:a7:7e:b2:3b:fb:75:67:63:d7:
3e:41:45:3d:5e:23:5a:61:58:af:c4:9e:63:f1:e8:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:CA:40:FC:F1:22:14:58:0F:FD:62:B4:5D:1F:CE:CC:D6:83:4A
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fd:eb:29:5b:8c:3d:2e:87:3a:c8:53:6d:a6:fd:da:d3:ae:
1a:98:8d:85:eb:52:6e:30:7b:66:3a:61:5b:7a:1f:ce:ff:59:
00:c4:1e:f1:1e:51:c0:7c:94:8e:0a:a7:5d:bd:27:a7:06:1b:
c8:0d:76:21:e5:95:c2:95:91:ee:92:ce:9d:c5:20:87:75:82:
2c:32:b5:93:60:a3:1d:67:37:fb:c2:8c:b8:01:7b:0a:f2:69:
b3:6c:17:3c:da:8b:5d:7d:ae:7d:fd:f1:d5:75:fc:aa:d7:78:
e0:3f:b8:8e:34:15:d9:bc:0b:ab:a4:56:ce:62:65:89:fe:4a:
84:ea:18:30:74:8a:8d:3d:d7:bd:ec:ab:93:78:ce:e7:c7:4c:
b0:1d:c9:2b:d9:bc:9b:76:78:0e:de:12:3f:bf:00:b3:48:f2:
03:20:1f:f3:c7:da:12:e3:18:56:2c:f5:dc:21:3f:8c:20:7c:
8e:41:e9:d9:6d:22:7c:ed:b1:21:32:bb:8d:99:4d:ff:a9:46:
29:df:89:55:a8:12:6a:b8:a5:63:f7:be:90:96:96:08:19:4e:
a7:72:15:f7:ff:d5:b9:ed:b3:26:b9:4f:8b:49:3b:90:e1:d1:
f9:5c:d0:b5:43:2c:23:7b:01:bc:d6:a7:43:f5:82:1b:94:69:
5a:76:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:31 2025 by rpki-client