Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: thCf46CUgoL0Fx0pTS8HCQaUj5mFD0KhZZ37nR/kxJ4=
Subject key identifier: 6C:6D:FA:7B:6D:CB:30:3C:78:85:8A:EA:74:B5:A1:65:5A:F2:57:FD
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01991D2F4EEF5361D8C2BB163B1359819300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0804
Signing time: Sat 06 Sep 2025 04:01:03 +0000
Manifest this update: Sat 06 Sep 2025 04:01:03 +0000
Manifest next update: Sun 07 Sep 2025 04:01:03 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: Hf+QhildxMXHjB/q90Iz0GBy4OsW0E8kI/aAUQGo18U=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:4e:ef:53:61:d8:c2:bb:16:3b:13:59:81:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Sep 6 04:01:03 2025 GMT
Not After : Sep 7 04:01:03 2025 GMT
Subject: CN=6c6dfa7b6dcb303c78858aea74b5a1655af257fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:64:21:76:a0:dd:68:e4:f0:ea:42:1c:77:
9c:7d:54:5b:8d:dc:05:4b:2e:8b:1c:06:0d:8a:f5:
bd:52:dc:17:06:e5:6b:28:70:f2:c9:59:aa:9f:51:
e0:e9:a6:3d:b6:fb:dc:b1:d1:db:26:e2:d2:8c:6f:
6f:40:4a:c6:99:4c:a8:cc:97:8e:f1:60:a6:9e:cf:
26:e3:5e:c9:ad:16:7b:56:30:a7:9d:ed:89:dc:fe:
f0:ac:44:68:0b:55:92:99:46:18:d1:c5:41:62:43:
5e:60:72:81:c1:08:1b:5c:ae:7f:b0:9a:96:8f:5d:
81:1a:87:c2:af:73:c9:dc:63:a8:2d:29:9f:bd:79:
9d:34:61:e5:2a:37:7d:8e:5b:68:a3:6d:21:9a:21:
10:d6:4c:c9:98:a4:01:cf:7b:30:73:4f:58:17:50:
95:69:d2:e9:e2:62:7a:ab:5f:a5:57:26:aa:c8:ec:
77:0f:e0:10:aa:00:5a:85:b2:97:4a:fc:13:69:e9:
86:3b:39:ee:2d:35:ed:01:13:f7:dc:89:a6:0f:50:
bd:e7:1b:8e:b4:39:77:b8:73:4f:d6:1f:c6:1d:bd:
14:a9:9f:90:2d:26:f3:ac:19:8e:35:8a:1b:de:85:
cc:a0:98:9e:ff:89:09:35:96:48:c3:2d:3f:d0:c9:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:FA:7B:6D:CB:30:3C:78:85:8A:EA:74:B5:A1:65:5A:F2:57:FD
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b9:3c:9e:df:aa:a0:93:a7:f5:9b:67:ed:36:7e:41:19:06:
bc:fd:9e:84:ac:2d:74:d4:76:33:e9:62:3a:6f:81:23:78:d3:
f1:07:09:af:44:04:89:36:4e:ee:36:1b:4c:60:bf:a5:b6:ab:
60:c4:45:74:3b:6c:fd:ed:67:fa:06:f3:90:30:3c:42:da:af:
f2:87:1e:a7:55:52:32:c4:d4:f7:22:1d:c2:2e:fa:9c:45:88:
f8:55:03:c9:f7:3e:ac:a4:e3:d2:75:f9:45:63:3d:a1:1a:52:
bf:f4:8e:55:f8:0b:13:00:88:90:48:7e:82:da:9d:4b:0b:19:
50:49:26:d3:62:0f:bd:87:b0:75:8b:ce:f3:c3:a8:fd:4b:f4:
a5:8c:48:05:d7:bd:c9:41:9e:c3:d9:21:12:bc:21:9d:61:30:
57:c6:cf:f9:61:d8:3d:08:69:bd:04:62:a5:4e:f8:4d:c2:80:
b7:a1:24:b6:cd:26:28:28:06:c8:54:3f:3d:d0:03:2c:81:25:
93:f5:bb:ab:c1:77:7a:62:b1:5a:8d:3f:4a:1b:4c:13:b4:99:
b4:c5:ce:9c:68:0e:d2:cf:1a:6f:c2:0e:ce:ec:8a:01:8d:b6:
6b:1e:2a:97:11:62:a4:19:54:9e:8c:25:fe:96:f6:30:c1:11:
2d:bc:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:44:23 2025 by rpki-client