Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: L/pYmJ6lhtRKlSrAfdUEhvkyoHI8VUKDNvBaTEtF5Ok=
Subject key identifier: 67:A8:35:14:67:D3:D2:A7:18:58:D4:08:03:38:A0:3A:18:60:8C:85
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019A54BFC8F0FAC79B3440A2BD534DD42E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 04D1
Signing time: Wed 05 Nov 2025 16:00:46 +0000
Manifest this update: Wed 05 Nov 2025 16:00:46 +0000
Manifest next update: Thu 06 Nov 2025 16:00:46 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: J8YD4054KFks/3lAfk4+s84jxeSRB7Ki6tJ3407CegU=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:c8:f0:fa:c7:9b:34:40:a2:bd:53:4d:d4:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Nov 5 16:00:46 2025 GMT
Not After : Nov 6 16:00:46 2025 GMT
Subject: CN=67a8351467d3d2a71858d4080338a03a18608c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:22:2b:8a:bd:d9:d0:8a:d6:ed:f5:9f:c8:
83:0a:3e:61:bb:36:bf:51:99:a2:33:15:b9:c0:82:
7f:92:aa:59:b4:c7:d0:0e:07:e5:61:e0:90:f4:93:
eb:e3:f8:12:cc:33:89:03:38:47:65:13:6b:3c:d4:
8b:42:3a:4d:e4:9f:5c:c8:65:fd:16:43:6d:6b:7e:
63:64:fd:55:1b:1b:af:91:e9:ea:b6:6c:ac:bc:d3:
ad:b5:d2:8b:52:52:d4:70:a6:8c:22:69:2d:0c:b5:
52:fd:db:6f:20:07:b0:df:b3:59:1b:4c:93:6e:56:
17:39:0e:02:36:81:1b:0e:76:7e:e3:8c:fa:ec:71:
eb:29:fb:47:00:a9:ae:23:ab:b6:de:a6:cc:cb:97:
53:8e:f0:db:f5:5f:7a:8f:52:02:a8:59:13:b1:59:
5d:37:bf:41:df:26:fa:d0:18:bb:dc:84:b8:94:35:
e4:7c:4c:b3:23:27:ad:18:ac:c6:96:47:99:20:94:
7f:c3:84:9d:13:1d:be:c8:e9:5b:db:83:4e:e1:7b:
25:b3:a9:4d:32:ed:8f:4e:65:6f:00:07:50:4d:0a:
24:87:b9:99:9f:cd:19:ad:1c:fe:cb:25:ed:22:99:
70:4e:41:94:39:37:5c:ac:9a:7a:67:e0:4b:92:dd:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:35:14:67:D3:D2:A7:18:58:D4:08:03:38:A0:3A:18:60:8C:85
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:95:ab:3e:a9:01:85:ee:27:79:c5:e2:e5:f9:a3:cc:74:46:
c3:2c:11:9f:38:c2:ff:79:df:53:59:93:2a:a1:09:65:c2:1b:
c3:43:4e:b6:59:2e:4a:0a:f2:69:5d:f2:db:71:73:c6:1a:19:
ca:5f:b9:7d:24:f3:63:b1:5a:63:5e:38:31:78:b9:d7:20:e9:
e1:b6:e4:b4:39:f8:d6:2c:15:06:74:06:a7:86:7b:ad:83:38:
7c:e2:4e:f7:b7:d0:90:5c:e2:80:ba:5d:a3:9a:d7:3a:e9:65:
e2:42:a2:f0:13:55:16:22:a9:69:f7:fe:f8:34:4a:77:85:2b:
34:1c:07:4f:fb:e4:7c:6b:01:fc:66:1a:eb:91:76:9c:92:67:
e2:0d:93:3d:5c:f6:a5:85:a9:0a:97:df:46:27:b1:a5:c8:07:
e1:dd:af:d1:37:50:4c:5a:74:3c:9b:a3:3d:f7:52:b2:82:a8:
49:e2:73:18:f2:6c:f2:45:22:50:6c:eb:0b:f1:67:7b:bb:4e:
27:14:7e:bb:af:90:6c:2e:54:b7:53:a3:03:1b:b0:e2:75:2a:
86:01:01:0b:c2:34:c0:52:8a:fa:13:73:2e:09:08:2e:b6:2f:
d7:30:cc:51:30:46:75:46:d8:9b:90:56:9d:03:52:0b:5b:78:
4f:03:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:22 2025 by rpki-client