Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: KsIiDQ7Tl3xs+q8AzurChNWFU4bQPvrp+xROAC+95kc=
Subject key identifier: 5F:6C:55:52:B6:31:6D:93:D3:23:84:F4:D0:69:D2:C4:9A:BE:2B:24
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 0198537B314983BA049BDAD68AD0684D5C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 07B2
Signing time: Tue 29 Jul 2025 00:00:39 +0000
Manifest this update: Tue 29 Jul 2025 00:00:39 +0000
Manifest next update: Wed 30 Jul 2025 00:00:39 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: 3/7U87UXnRpUbCqlNDrXplbmmBRq+rpuzkxCJnfyYgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:31:49:83:ba:04:9b:da:d6:8a:d0:68:4d:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jul 29 00:00:39 2025 GMT
Not After : Jul 30 00:00:39 2025 GMT
Subject: CN=5f6c5552b6316d93d32384f4d069d2c49abe2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:e9:a9:32:cf:c5:e0:7c:c8:55:3c:0e:97:
80:f6:89:84:3d:20:7d:6b:6a:0d:d5:f3:9e:2b:9f:
d6:dc:b4:5a:fc:8d:47:fa:ec:d1:12:98:04:1f:15:
78:d9:5b:c9:4c:4b:67:1e:8b:22:f8:36:c2:80:9d:
54:c7:63:ae:5f:74:f6:6a:98:23:8c:49:6b:d3:2e:
7e:18:b6:98:86:3f:52:c8:8b:b7:bc:18:d4:dc:3d:
e4:91:19:dd:f2:48:55:9c:37:a0:90:e4:3a:60:6b:
60:80:d7:71:bd:e7:a1:4c:1e:bc:c9:6f:4f:99:98:
df:1a:63:ac:03:31:d9:cc:f8:47:7d:86:99:f0:cb:
34:84:29:7f:e8:11:52:17:15:00:bd:39:ec:87:fd:
7a:13:db:e9:66:6f:5a:ce:40:ac:35:b4:52:77:77:
10:e1:c1:a2:a1:38:54:69:7e:7c:51:61:af:80:ed:
10:55:dd:df:ae:27:99:e9:bc:ce:f4:9b:94:b6:38:
49:35:1b:60:16:01:ed:67:2b:0d:f6:8d:7f:e6:0f:
79:9e:bd:c2:13:e6:d0:01:51:a0:d1:63:9d:98:0c:
db:d7:b8:91:d0:ed:ac:4f:f2:41:59:dd:a2:9a:64:
c1:53:7f:7e:8f:69:08:df:65:1a:a2:7d:4e:9b:a7:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:55:52:B6:31:6D:93:D3:23:84:F4:D0:69:D2:C4:9A:BE:2B:24
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:ea:47:23:be:21:12:18:77:c7:3b:01:42:3d:0e:f2:83:
51:66:00:52:d4:0e:5e:a9:55:73:ea:5b:72:67:a4:35:f3:ce:
35:19:3c:89:20:23:8e:3c:2f:dc:0b:9d:26:fc:c4:c1:5e:56:
4c:4f:04:09:1c:f2:2b:37:52:b1:44:59:a7:38:04:4c:56:87:
90:e4:55:1b:96:38:be:31:4a:ae:6d:ca:43:24:22:25:bb:94:
7a:38:56:eb:8c:4f:72:e8:c9:3f:48:1b:dc:a4:5c:ba:2c:ec:
43:52:e4:97:ba:ff:9c:11:33:55:29:63:36:16:ae:8f:db:1c:
b1:b3:7e:2b:ca:db:f6:b6:49:c7:8b:fc:04:5b:78:10:83:cf:
2d:48:2a:cc:ee:22:59:26:cc:c1:1e:3f:26:df:07:e1:63:fa:
e2:ed:c5:61:d3:16:9f:ac:37:b1:4d:c5:6f:99:0b:30:26:86:
67:e0:0f:e2:b3:fb:00:5c:99:1b:75:4d:64:77:03:38:30:cf:
e7:5f:e0:48:b0:79:9c:7e:f9:a7:65:6e:6c:61:5a:84:c9:80:
16:fb:48:dc:f6:1a:65:5f:cc:e8:93:b2:97:0b:06:b9:4a:d9:
2d:8d:75:71:e1:04:1b:11:46:78:55:b1:73:5b:78:6f:d9:e0:
41:4e:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:27 2025 by rpki-client