Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: uXacxunOcuy/UE+u81vCm0cflQ8dGkWaOEhV+ILDNK0=
Subject key identifier: 84:75:FB:B8:AB:D1:7F:87:59:47:C1:BA:D1:1E:6C:11:46:8F:21:6A
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 019921B057BCAFD06E864B827D6C5FC44365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 0938
Signing time: Sun 07 Sep 2025 01:00:28 +0000
Manifest this update: Sun 07 Sep 2025 01:00:28 +0000
Manifest next update: Mon 08 Sep 2025 01:00:28 +0000
Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: thhpz176XkJ46rauju6rVCQl0/GbJQx9wKPQFMwa78A=)
2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:57:bc:af:d0:6e:86:4b:82:7d:6c:5f:c4:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Sep 7 01:00:28 2025 GMT
Not After : Sep 8 01:00:28 2025 GMT
Subject: CN=8475fbb8abd17f875947c1bad11e6c11468f216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:6f:9d:cb:a3:a7:d1:a3:ea:1c:fc:db:9b:
aa:5b:da:e4:10:80:91:9d:3e:43:3a:da:b7:ba:15:
c2:22:6c:cd:c5:93:36:28:7f:2f:1e:8f:21:f9:93:
de:96:1d:15:52:4f:85:5c:a5:6b:c3:5a:28:be:72:
7a:14:49:9a:88:b5:76:41:f2:a3:02:97:71:57:ea:
ab:e8:c3:b1:d4:87:ba:e4:26:ee:1b:a9:9e:e0:9f:
54:3b:9e:52:ec:b7:ad:cf:ef:33:92:e5:72:23:b2:
78:49:ec:eb:9b:51:ca:91:ee:16:1b:13:40:f8:1c:
41:88:63:43:a4:f4:9e:74:e5:dc:eb:26:7e:6d:37:
e2:cc:4b:de:87:90:6b:33:ac:68:e0:b8:c1:d6:c4:
28:21:fa:fd:4b:ed:6e:72:7b:ec:99:92:4c:a3:25:
be:5c:14:47:2d:c7:d7:02:80:7d:13:67:a6:c6:35:
f2:fe:bd:c2:c9:f4:e2:9d:33:ca:d4:9f:10:4c:5a:
22:8e:c3:09:0a:0e:e5:bc:17:82:81:e2:b7:1c:d7:
81:f5:8c:2f:23:b5:43:ef:be:69:61:1d:67:52:be:
14:b9:27:16:02:35:13:9b:a0:38:0f:10:92:0d:49:
e5:da:e4:8f:90:6b:9b:c2:50:e0:b6:1b:e3:e0:13:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:75:FB:B8:AB:D1:7F:87:59:47:C1:BA:D1:1E:6C:11:46:8F:21:6A
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8b:95:0d:bb:e3:46:fd:25:5e:f2:83:0c:65:c2:15:1c:69:
0e:76:a2:ba:97:58:b1:96:eb:94:16:b9:0a:79:a5:a7:ef:bd:
bf:cf:13:45:8f:cf:6d:18:e2:ac:b9:62:20:75:d2:b2:2d:45:
9b:44:4a:df:54:94:14:fa:df:5d:71:c6:aa:ce:d0:8e:3c:c6:
eb:df:34:66:bd:48:4a:da:be:2c:0b:a7:bf:5e:74:72:8d:3f:
64:28:cf:45:3e:84:c2:f9:3b:4c:3d:18:b2:26:a1:2c:67:07:
28:ec:9b:7a:98:bd:64:ba:99:7c:1d:37:2f:5e:3e:3e:c2:3e:
32:93:63:ef:29:ab:0c:31:4f:93:c7:f1:44:48:4e:f3:a3:2b:
b8:d1:69:1d:da:df:dd:a4:e3:f8:12:c5:aa:9b:08:05:30:45:
ea:73:c4:63:e4:9c:cf:94:b8:65:cc:3f:b4:57:a3:20:32:9b:
79:2b:0f:41:ba:d5:4e:1f:a9:15:e5:40:0c:09:e7:bd:11:76:
a7:59:c2:29:63:65:40:b8:3b:e3:f4:ca:0e:d4:8a:90:4e:00:
76:5f:ff:ed:30:a5:05:6a:c5:c4:e1:36:17:fc:f7:89:10:63:
c6:54:92:1f:fc:79:2e:23:15:62:1d:a4:3d:e7:ad:f5:3a:a9:
50:87:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:27 2025 by rpki-client