Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: GxjYyKPqIh1Cl0Rr+C2R4XDHuka5RyEfZqF/A+F9O/0=
Subject key identifier: 7A:6D:40:71:73:4C:F3:8F:3C:93:43:D4:86:64:CD:F4:55:08:74:66
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019896A574204A354C6A3BEFC413F89553E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0A4F
Signing time: Mon 11 Aug 2025 01:01:22 +0000
Manifest this update: Mon 11 Aug 2025 01:01:22 +0000
Manifest next update: Tue 12 Aug 2025 01:01:22 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 3DC7Zv0MU1PSfkhjlt3QNn4tOBd5TYvE/Si5pJoi370=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:74:20:4a:35:4c:6a:3b:ef:c4:13:f8:95:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Aug 11 01:01:22 2025 GMT
Not After : Aug 12 01:01:22 2025 GMT
Subject: CN=7a6d4071734cf38f3c9343d48664cdf455087466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:02:9e:f6:3b:c3:bf:f7:cb:a0:73:ff:19:
51:7b:da:79:3c:02:51:49:2b:e0:a9:67:d8:2a:dd:
7c:09:d8:49:fc:e8:be:bc:14:98:f0:e8:46:54:11:
c3:a9:48:71:36:98:4f:47:84:09:49:e1:6d:76:02:
a7:f6:d2:83:78:e4:e5:24:ea:db:b0:6c:31:30:6e:
9c:3d:91:ca:de:58:85:e6:38:52:7d:0c:81:23:63:
d7:0a:0e:54:68:f5:5f:b7:70:e2:2e:f0:90:eb:e4:
4b:07:2c:2c:6d:5e:6c:7c:91:ef:47:49:50:5f:28:
22:36:cc:b3:93:52:00:25:13:d7:a9:48:11:a1:94:
06:c1:ad:67:ef:5e:66:d0:c9:f5:a1:1d:b2:0c:ef:
8a:04:d2:ae:7d:52:12:30:9b:9d:f0:ce:17:70:99:
6c:36:b1:e6:01:42:5e:6e:0c:13:86:78:18:f8:11:
4a:24:4b:3e:8d:87:04:9b:43:7f:35:7e:55:78:9b:
1b:61:94:28:dd:17:03:e3:66:27:8e:61:6c:2c:c3:
79:57:fb:a3:df:0f:54:c8:17:28:21:42:45:67:06:
c3:5f:9b:c1:ab:74:9e:eb:5a:b5:94:9e:04:13:7d:
f7:23:3b:26:d4:c1:95:58:f8:3a:f1:1f:ee:9d:e0:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:40:71:73:4C:F3:8F:3C:93:43:D4:86:64:CD:F4:55:08:74:66
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e0:da:db:3e:4a:5f:73:a1:9b:2f:af:02:cf:93:ec:6f:e3:
90:e6:39:48:8d:c0:a7:ea:cf:a7:40:ea:95:c3:67:5a:7c:67:
fa:84:c2:fd:52:97:6f:6f:06:61:24:7c:dc:52:c4:d5:eb:c9:
c5:64:d7:2a:9a:9a:6f:af:f8:11:dd:4c:5d:e8:f5:85:86:e1:
67:83:70:3c:7c:28:8a:5b:91:78:1a:1e:70:c2:20:44:82:e3:
f5:a3:64:ae:09:44:e0:33:4b:e7:27:88:4b:61:77:ac:70:f7:
f5:f9:4b:06:d7:df:96:4c:0e:4c:90:f1:21:84:df:d9:2f:f2:
ac:d7:77:c4:a9:a2:e7:5b:b0:0e:5a:47:91:4f:57:03:e3:89:
1c:a4:72:5f:2d:fd:1f:ab:69:4c:87:3d:ee:9c:d7:82:b3:78:
22:87:b5:c2:70:f2:ba:40:71:3d:6d:7d:54:3b:0f:71:67:ca:
78:73:f7:2a:b7:ba:29:76:d1:8a:4d:16:e2:11:ec:31:4e:48:
bb:6c:51:68:24:f9:35:5b:a0:47:e4:fc:63:3c:a7:a8:9c:24:
46:49:54:17:bf:be:e3:eb:62:ec:9b:ae:93:41:7c:91:7d:82:
12:60:5e:60:c1:4c:04:f2:ed:8f:24:ea:ed:23:9c:f6:64:5b:
a3:96:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:40 2025 by rpki-client