Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: s4h378rLtLFsqe6najsLLk9MsMDDmq8LC8x7ENDb254=
Subject key identifier: 3F:8F:B5:03:DB:B4:4B:FA:74:9F:00:FC:34:41:4E:16:B5:CD:1C:07
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 01987F78DCA38D67806928FFE69031C30296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 03DE
Signing time: Wed 06 Aug 2025 13:01:23 +0000
Manifest this update: Wed 06 Aug 2025 13:01:23 +0000
Manifest next update: Thu 07 Aug 2025 13:01:23 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: QaJjp5hVMoldfgYeQFYne9H3FAEV4CaiOdeD/uRTIcU=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:dc:a3:8d:67:80:69:28:ff:e6:90:31:c3:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Aug 6 13:01:23 2025 GMT
Not After : Aug 7 13:01:23 2025 GMT
Subject: CN=3f8fb503dbb44bfa749f00fc34414e16b5cd1c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:1e:ec:bd:06:be:96:e5:e8:39:aa:18:63:
17:c9:41:98:fe:db:2e:92:0d:90:21:98:09:f2:85:
ad:16:c5:32:07:f6:9a:e0:9f:1f:21:4c:40:17:b0:
62:56:f8:d9:b6:5a:ee:01:12:d5:28:63:1f:2f:49:
32:7f:ff:de:b3:9e:92:5d:b9:3b:62:18:81:51:99:
a3:70:f4:0c:70:a3:1c:95:5c:9e:f2:75:1e:98:a2:
bd:b2:de:23:2a:18:2d:5e:d4:be:17:17:f4:da:f0:
e2:c9:31:43:2b:3c:11:1c:6d:d5:08:0f:bf:ca:a4:
e7:84:11:19:2f:ba:40:72:bf:8a:17:81:c3:8e:cc:
93:12:75:0d:a2:b9:17:44:b8:67:3e:a1:53:99:9a:
98:ff:19:99:61:04:86:31:21:50:22:d8:6d:49:9f:
94:c1:06:c4:c3:a4:0a:84:a8:22:c6:2a:c7:13:66:
9c:4c:9d:bb:ca:b3:71:6b:99:3a:be:94:82:2e:ff:
8d:5d:4c:73:cf:2f:05:9b:c9:7b:94:d4:02:f9:45:
34:1c:e0:42:3a:12:3a:59:8f:af:f7:1e:3a:d8:ef:
1b:94:d6:19:b6:2e:5b:d5:f2:53:e8:bb:7a:f5:90:
90:67:0b:85:e2:2f:de:dd:89:3d:94:eb:55:c8:f5:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:B5:03:DB:B4:4B:FA:74:9F:00:FC:34:41:4E:16:B5:CD:1C:07
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4c:fb:5a:c0:87:3b:88:a3:c5:df:3c:42:3b:62:38:a3:83:
86:7e:af:53:2d:fa:66:d1:f5:c2:45:1b:86:8d:7b:40:93:55:
18:8b:4e:1d:93:b3:cb:b9:fd:18:36:e1:02:54:0b:40:e5:89:
f7:66:62:9f:fc:7f:75:39:79:e9:1a:e3:55:53:c0:1a:92:10:
e6:98:80:4e:e9:b5:ab:4a:83:70:32:25:01:af:fc:3f:6f:6b:
a3:4d:2d:d8:2a:97:b5:1c:e4:98:0c:55:39:ad:44:fa:3e:be:
d9:b5:b1:25:5f:63:40:ca:9c:d8:5c:fc:13:fe:65:a9:be:e8:
d2:2c:c2:e8:fe:8e:30:c6:7f:f7:7d:4f:87:33:aa:b9:3b:70:
28:f9:d2:38:6c:21:82:35:f2:34:4e:7f:f0:31:cc:ec:f3:0f:
ce:29:94:cd:54:a7:0f:ef:83:e4:07:90:5c:ee:f8:b3:b3:04:
64:50:30:98:b8:8b:33:70:4b:2a:f9:4c:93:c6:7a:9d:ca:85:
af:87:d8:39:58:2b:9f:bb:a3:96:ee:26:f8:fa:6e:dc:a6:f6:
5c:00:07:22:81:8a:7b:06:71:83:75:2f:6c:ee:f1:3b:f5:33:
43:c3:ea:2b:54:a9:b0:d6:84:1f:d7:7a:84:df:79:18:46:da:
fd:51:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:30 2025 by rpki-client