Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: 2hfkWfaenQvTzXDKRJk5/K4YoAR7XCNOR6Nl+L/CXPU=
Subject key identifier: D3:C1:C4:01:FD:82:1C:8E:E4:66:FF:89:F1:AE:D1:86:3E:80:1A:0B
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0197789D29E5F698CE07C5AA0CD81449ACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0356
Signing time: Mon 16 Jun 2025 12:00:55 +0000
Manifest this update: Mon 16 Jun 2025 12:00:55 +0000
Manifest next update: Tue 17 Jun 2025 12:00:55 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: 5H+pT/QnhhzDKp+BMYzYEyvDDglMRdnt3dqo1K6VV9s=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:29:e5:f6:98:ce:07:c5:aa:0c:d8:14:49:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Jun 16 12:00:55 2025 GMT
Not After : Jun 17 12:00:55 2025 GMT
Subject: CN=d3c1c401fd821c8ee466ff89f1aed1863e801a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:e8:53:80:84:55:bc:db:ca:02:cb:b7:3f:
df:b2:4e:e4:df:20:8a:14:33:22:22:d3:be:c0:02:
ba:2c:70:86:dc:14:0f:80:e4:17:f4:01:e5:fb:a7:
3b:8e:f9:99:ab:62:6a:c1:25:9a:f3:c6:71:f5:e5:
6b:6e:82:68:e7:43:8f:47:bc:df:c4:65:7e:d3:0d:
df:ca:d3:08:90:fb:c4:8d:69:6c:6a:f1:0a:d9:11:
2c:26:1e:e2:a3:b6:ea:a2:74:40:56:f5:5b:84:e6:
9a:1e:5a:41:6b:bc:6a:9e:a1:ef:39:2a:2d:55:30:
fa:87:34:c6:18:80:af:0b:f1:b5:c5:f9:0c:f7:f3:
6f:3e:5a:04:09:ed:c1:5e:ad:fe:81:2d:1f:ad:5d:
e4:7a:1f:38:b7:c7:3e:98:03:30:47:db:2e:b2:3b:
d9:f2:2b:85:95:3a:89:82:c9:60:44:c3:32:fc:63:
ef:4c:76:68:fe:f6:23:3b:f3:bd:5d:31:0a:10:bd:
df:fc:7b:41:85:59:b5:9d:1d:49:1e:f5:47:6b:62:
d3:ca:d6:bf:0a:66:b8:f0:54:87:f4:9c:87:d1:8c:
46:49:89:fa:39:c5:21:01:d9:df:c0:16:60:86:3e:
2b:e5:41:b4:f5:d0:15:3f:b6:29:a7:90:c5:45:f6:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C1:C4:01:FD:82:1C:8E:E4:66:FF:89:F1:AE:D1:86:3E:80:1A:0B
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a2:c1:d9:84:1d:da:86:ec:7f:8e:75:82:90:79:b3:8a:72:
50:92:60:20:1f:62:9a:4b:79:36:39:49:3a:75:03:74:7e:b4:
f5:2f:0d:2a:92:50:e0:e9:ec:b5:14:cc:3f:87:a6:01:75:e4:
ce:e8:08:f2:72:d8:63:3a:2b:3c:1c:ea:ab:22:b3:2c:6d:1a:
5e:fd:89:b5:9c:c1:28:3e:78:1c:b9:22:d3:c2:8f:a5:db:2e:
e1:c0:56:f8:a2:d6:ca:64:40:1d:8e:fc:92:6d:eb:99:27:3b:
ac:4d:30:86:ab:d6:4c:e8:f0:8e:19:b5:9c:02:36:17:95:fc:
83:8f:49:ab:59:82:19:e9:0c:4b:79:7a:d3:13:47:20:69:a8:
16:56:24:33:98:6e:32:9a:c7:15:d4:f4:bc:7f:c7:ec:3f:4b:
ee:5b:e4:3a:5b:86:38:76:98:6a:03:e6:ac:3f:98:f0:07:95:
21:3e:79:bc:44:4f:62:74:39:64:b3:f7:62:6f:20:68:14:f3:
fb:ae:22:b0:1f:62:3f:8e:b0:99:f0:6f:9d:46:88:8c:02:51:
ac:03:4f:4e:af:39:d8:d2:48:c9:1a:20:7e:3d:e3:e7:fb:52:
9b:7d:3b:05:81:18:5e:c8:fb:5d:3f:a1:19:de:a9:da:b1:3e:
ae:8f:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:29 2025 by rpki-client