Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: DSL/woM6KPgVNoXPlwCqKyzJueWhXcF0XQhxsXmjvxQ=
Subject key identifier: B6:41:8C:45:43:90:9E:CF:55:49:D7:88:DB:2F:45:80:A9:5A:2C:77
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 019768176014CB2A5C33703580BB8EF8AD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0CE8
Signing time: Fri 13 Jun 2025 07:00:51 +0000
Manifest this update: Fri 13 Jun 2025 07:00:51 +0000
Manifest next update: Sat 14 Jun 2025 07:00:51 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: w6jRxP5EXMFxLhapO1WHXdMTboUnNAAxB/dksiKhI/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:60:14:cb:2a:5c:33:70:35:80:bb:8e:f8:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jun 13 07:00:51 2025 GMT
Not After : Jun 14 07:00:51 2025 GMT
Subject: CN=b6418c4543909ecf5549d788db2f4580a95a2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:99:6f:bf:d6:c5:a0:d8:60:c5:9d:ef:0f:
42:0d:ec:5c:07:5b:9b:c8:f3:61:c3:3f:94:52:e1:
08:89:b0:98:7a:ca:a7:10:fd:1b:a2:be:76:43:20:
65:dd:fe:27:c2:f1:e8:fc:9d:49:56:c3:87:e0:ce:
50:19:24:f3:e9:01:db:3d:3f:a8:0e:7e:26:ae:76:
2b:ad:b8:d9:60:40:9f:72:4c:44:d5:ed:cd:3e:69:
0c:a4:12:45:7f:d5:26:8d:13:72:f6:34:a2:fd:59:
eb:6c:f2:e0:14:ea:3c:65:19:76:25:91:08:26:ee:
46:3b:27:1f:1b:a2:f0:f2:73:f4:e2:fd:44:c4:5b:
8c:4d:43:71:12:3e:19:a9:4e:d0:4f:55:28:8b:9e:
8a:b5:b5:59:07:77:d5:8d:3c:2f:90:b2:d9:75:dc:
79:71:85:02:a6:31:e7:3e:9c:1f:f2:2e:0a:b3:01:
bb:73:ed:b1:f0:3d:08:db:80:a2:5a:32:3f:bf:ff:
6a:64:a4:49:41:65:41:90:69:84:86:3f:e3:52:19:
ba:05:20:49:58:e9:71:72:aa:bd:5a:ba:96:3d:00:
29:12:53:77:e3:9c:98:77:04:e8:e6:4e:7d:55:69:
79:62:1f:eb:5e:8a:02:2e:c9:1d:26:e7:1a:e1:8d:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:8C:45:43:90:9E:CF:55:49:D7:88:DB:2F:45:80:A9:5A:2C:77
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:43:13:95:5f:4c:e8:d4:43:46:35:cf:c6:12:10:81:7e:73:
ee:ce:26:2f:c3:44:7a:e1:b4:90:0f:83:03:19:a5:00:43:85:
0a:62:ef:4e:a8:25:ca:ea:07:61:00:09:0f:4f:4b:35:3c:62:
9d:bf:b3:65:10:ec:60:e8:80:34:61:02:33:6b:52:19:2a:26:
8c:67:74:c9:4b:d2:69:cf:9a:5a:54:ba:53:49:dd:8c:58:f8:
de:ca:67:91:80:40:87:d3:1d:ca:8c:a4:56:c9:4c:c8:94:1c:
9a:88:a2:90:11:00:81:f5:5c:a8:ee:b7:f2:ff:a9:48:63:c7:
ea:44:95:70:a4:5a:a0:cb:52:c6:9f:14:13:0b:65:21:d3:4c:
46:23:6e:74:fb:63:ab:31:ba:5e:86:1d:bd:d9:52:1f:38:0c:
d8:4d:43:bd:7c:47:29:44:24:1e:fc:37:87:74:5e:0a:58:c8:
54:f3:1e:8b:4e:12:bc:93:03:b5:e6:78:e9:01:9b:3f:4c:61:
46:0a:cc:40:59:c2:ec:08:22:dd:05:c5:18:43:e3:7e:61:27:
09:c7:a1:56:8a:a7:a4:04:65:33:7b:03:0f:00:d5:be:28:cb:
7e:d3:5e:e8:14:c9:ef:8e:a6:7c:1c:a5:9b:07:c6:fe:34:3a:
c6:98:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:00:20 2025 by rpki-client