Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier: 9NkJiR8fV0Er9k/y1tWqpraMCJtw554Q27bGnMmnrGs=
Subject key identifier: D2:F1:DB:FA:77:E8:FA:41:AD:E9:8A:8A:A5:51:AA:40:42:F5:22:2B
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 019874BDC15326085118FEFC56A65205A202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number: 034B
Signing time: Mon 04 Aug 2025 11:00:49 +0000
Manifest this update: Mon 04 Aug 2025 11:00:49 +0000
Manifest next update: Tue 05 Aug 2025 11:00:49 +0000
Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: V7tDr6ylI+eufTxdU8PvqnpQNZUYrKc52mrAaWmjHFQ=)
2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:c1:53:26:08:51:18:fe:fc:56:a6:52:05:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: Aug 4 11:00:49 2025 GMT
Not After : Aug 5 11:00:49 2025 GMT
Subject: CN=d2f1dbfa77e8fa41ade98a8aa551aa4042f5222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:ae:2c:77:69:6c:b1:96:04:7c:44:b1:ec:
dd:bb:75:52:30:0b:42:c7:d2:6e:6a:99:9f:58:0d:
f3:fc:9a:5d:e7:db:6c:ef:21:b6:42:f0:53:0b:eb:
9c:00:f9:c0:c6:cc:77:83:88:0b:ef:7b:b6:96:c5:
65:9f:a5:34:2b:de:a2:b0:40:87:6f:ec:37:d7:26:
9d:89:af:d5:df:38:6a:63:a1:72:c2:9b:5d:53:0f:
f9:70:cf:71:4c:77:9b:71:55:61:43:9b:35:cd:df:
00:4e:cc:a9:4f:84:f3:f5:ee:2f:ed:f3:af:2f:6a:
f7:58:1d:d6:82:a6:56:6d:e6:fb:63:e3:b2:41:dd:
83:f7:80:00:ff:2f:2c:93:38:07:99:38:42:fd:01:
7b:59:d4:b1:01:a9:97:c7:cb:41:f6:1e:b8:59:06:
07:5b:61:b6:b8:68:f8:31:8e:73:5c:1e:39:51:d6:
ad:35:bc:af:bd:ea:a2:c1:e4:25:32:ee:77:ec:4f:
6d:a1:72:dd:6f:32:32:e0:57:cd:7d:2c:ae:a0:0c:
f1:fc:ec:c2:4c:68:b8:9f:e5:98:ad:fe:e5:cc:3a:
f7:d8:86:a5:b3:f5:ba:80:b0:96:ae:bb:33:13:80:
31:81:0b:30:c2:a5:77:cb:18:aa:80:40:ac:07:fe:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:DB:FA:77:E8:FA:41:AD:E9:8A:8A:A5:51:AA:40:42:F5:22:2B
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:93:5c:6d:3c:b7:ca:a4:30:7b:5c:3b:44:b0:e6:9f:f8:
f5:13:68:d2:a4:22:89:03:ad:c2:9d:40:12:40:db:30:6a:fd:
72:d7:97:ba:60:f4:e5:1e:71:a7:a6:1c:cd:6b:b2:0b:b9:15:
28:6c:57:3c:d4:0a:10:8b:21:da:cc:8e:b6:5f:d4:48:2e:38:
20:18:42:f6:70:d1:81:6a:66:a4:1f:76:6f:9d:17:b8:cd:2e:
1f:0c:a4:17:4f:52:82:cb:68:ac:dd:cb:f2:e7:55:4b:4b:15:
1c:38:bd:66:24:ff:8f:1c:da:46:5d:0d:3e:c8:2a:f1:e1:62:
e5:17:07:7b:18:1f:81:e9:ef:ae:67:ad:ca:c2:89:e0:ce:31:
83:80:8d:3b:d3:40:1c:1f:61:4f:df:63:77:0b:40:fe:95:b3:
5f:72:dd:b6:79:1d:5f:a7:7c:a4:af:5e:29:d4:be:aa:b4:97:
be:1c:df:d5:c1:2c:06:5a:f5:3a:9c:3a:41:c5:41:8a:ac:af:
64:cc:e7:fe:48:8e:e1:77:39:54:f1:25:cf:ed:97:7b:7b:4d:
9e:35:a0:e0:38:29:76:49:f4:bc:c8:62:56:9f:0e:cc:69:0c:
4c:e2:8c:ff:10:1d:46:8e:fe:31:b1:dd:75:7c:63:16:79:41:
a4:fb:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:07 2025 by rpki-client