Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: +Vl+cpTTBaqP8Y6k1Ge5Tn96UDW9q0K6TOdrrUlcKP8=
Subject key identifier: 13:F0:26:10:BB:16:94:BB:D7:4D:20:18:B0:DD:1C:8B:4F:86:4A:30
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019A0A811D197BBF81FA5DB9115CBFDC1B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 087F
Signing time: Wed 22 Oct 2025 06:00:25 +0000
Manifest this update: Wed 22 Oct 2025 06:00:25 +0000
Manifest next update: Thu 23 Oct 2025 06:00:25 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: qdg7iiGcxeq1XLGupiBPbvzlF28qdL2T99KaURrVpLA=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:1d:19:7b:bf:81:fa:5d:b9:11:5c:bf:dc:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Oct 22 06:00:25 2025 GMT
Not After : Oct 23 06:00:25 2025 GMT
Subject: CN=13f02610bb1694bbd74d2018b0dd1c8b4f864a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:62:54:fe:bf:b4:12:ed:c2:59:35:50:16:
4e:30:58:f4:7d:04:48:a8:31:3b:d7:11:52:77:ee:
ba:2d:37:62:42:f3:52:48:d3:6a:2b:6b:47:f2:39:
9f:a9:cb:de:6f:7e:fd:db:25:bd:1c:0b:3b:78:c4:
a9:14:1c:fd:08:3e:e4:27:e3:e9:a1:02:96:1f:b3:
e8:dc:05:99:4b:2a:bb:e5:ca:c2:70:54:d2:c2:db:
b5:6d:26:73:d7:86:8a:55:2b:7b:73:1a:4f:4e:e2:
35:76:9b:56:d1:f0:69:b2:1d:cd:3e:60:f9:c0:67:
33:0d:dc:19:25:36:16:24:72:c7:02:ed:f7:56:f1:
56:69:ae:ed:aa:a0:7d:57:ab:cd:6b:2b:6c:64:a6:
58:39:17:d8:38:48:18:e7:ef:d8:77:c1:d4:5e:45:
8b:e3:80:58:df:33:13:51:5e:85:8e:2e:cb:d3:8a:
d1:c1:47:2c:ca:dd:d1:c1:b8:6b:72:43:47:fb:34:
9c:ff:9d:ea:9d:95:64:47:b3:36:4d:2b:46:34:ac:
9a:26:9c:2f:36:68:47:9f:ed:34:ef:d2:27:c4:b6:
dc:b4:21:3a:fd:b5:b9:64:98:3c:3d:e2:eb:42:58:
be:2b:3d:c1:10:1c:b9:bb:73:ce:89:2d:ec:d3:22:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:26:10:BB:16:94:BB:D7:4D:20:18:B0:DD:1C:8B:4F:86:4A:30
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:79:63:7e:a9:de:11:5e:c8:6a:ea:14:1c:d2:7f:52:a0:
c3:2d:29:4c:2f:0e:2b:10:5a:df:a1:f1:be:ce:5e:37:22:5b:
1a:97:82:0d:57:4d:6b:67:8d:38:75:89:3a:93:a0:8f:b3:0a:
6a:f2:41:42:b7:ce:7c:0c:a4:2f:af:87:e0:b4:7a:b8:f2:5f:
1c:3e:5f:f4:c4:e9:e6:1b:86:0e:03:1a:b1:af:03:35:75:7e:
ee:72:fb:28:f0:1b:72:2d:94:18:0b:18:36:67:e9:23:a9:26:
e0:81:9f:1d:2b:b8:ab:92:9e:d6:fd:29:33:00:08:16:e0:92:
1f:bf:de:d4:71:e9:e1:b3:d4:6f:60:a7:e9:23:9f:9b:85:91:
44:c7:29:38:fe:95:9f:02:3f:6f:d4:59:4a:71:29:08:d7:46:
90:2b:eb:0e:6e:b7:f6:98:0c:2a:5d:cf:83:74:c7:9d:d7:05:
70:2f:4e:aa:5b:29:0d:43:f5:63:bd:44:ca:a5:24:bd:da:dc:
4e:3b:e9:5b:fa:46:5e:01:3a:1b:21:a4:fc:b9:c0:61:6e:1c:
53:7d:e8:ac:1f:ea:89:82:47:49:dc:03:33:af:bc:20:de:da:
16:75:1f:ed:49:f3:c8:10:aa:87:31:a2:04:b7:c8:e0:30:f7:
1a:e1:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:22:20 2025 by rpki-client