Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: ZPVPMzTJl+Me97Gq3tD3n2EkyX5XMfcREA0w7TP/l08=
Subject key identifier: 42:97:64:28:96:4C:71:72:A1:1B:8C:86:83:81:ED:9F:E5:CD:FF:61
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 01992255DABDB45542E2E61FF589716FD79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0DCD
Signing time: Sun 07 Sep 2025 04:01:15 +0000
Manifest this update: Sun 07 Sep 2025 04:01:15 +0000
Manifest next update: Mon 08 Sep 2025 04:01:15 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: i+pm63+nokd1H9sPSeoUhdOPOabYevgN2FGpJuUUW38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:da:bd:b4:55:42:e2:e6:1f:f5:89:71:6f:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Sep 7 04:01:15 2025 GMT
Not After : Sep 8 04:01:15 2025 GMT
Subject: CN=42976428964c7172a11b8c868381ed9fe5cdff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:33:05:60:b8:21:c9:d9:be:6e:6c:5c:d6:
0d:d2:ca:24:0d:dd:f0:25:5a:2d:d2:ae:ae:dc:dd:
cc:12:f7:9d:3e:e4:09:b6:b5:dd:b7:bf:ee:26:d3:
35:41:51:81:94:2e:b7:fb:52:77:63:41:06:45:e2:
7f:02:3a:18:69:93:ca:dd:fe:e1:e0:b9:6f:f3:9d:
68:1a:a4:23:c6:ee:3b:f3:1c:4a:da:ab:75:95:11:
75:d5:12:57:2c:e2:a1:37:a6:bd:68:a7:11:39:7f:
7c:f6:4c:62:a3:71:f7:f4:6a:8f:09:fb:9c:4e:03:
26:f2:92:d5:72:43:cc:5d:80:a9:d6:80:55:6f:5b:
1b:09:7f:a3:3d:9d:50:8a:3b:04:34:01:98:e7:62:
37:4a:08:da:79:d0:f5:0f:cb:f1:34:3f:44:ff:b5:
64:59:68:c2:2f:60:2d:bd:27:e9:b5:4b:4d:74:d7:
ea:e8:34:0c:86:ff:dc:b6:01:3e:2a:ac:6b:47:7b:
60:03:6e:ec:36:bd:f3:9e:16:1d:6f:94:c2:5d:30:
1a:69:27:c1:c2:04:fc:50:eb:65:ba:db:e7:72:fe:
3b:6c:44:ef:a4:d7:ee:8a:76:c2:df:4b:2f:cb:b9:
d3:58:91:d4:af:6b:14:29:5f:8d:b4:21:ef:6b:98:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:64:28:96:4C:71:72:A1:1B:8C:86:83:81:ED:9F:E5:CD:FF:61
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4e:36:b9:b4:59:cd:87:9c:51:ae:ba:5e:53:55:ba:f4:77:
ac:0d:f3:47:fe:8a:68:ae:3b:75:2f:80:04:8a:34:d1:26:6c:
72:05:53:f0:2f:f2:6c:87:39:67:f8:73:41:a8:57:e9:ac:96:
d8:d0:f7:89:a6:06:9a:d4:1f:10:34:ad:5b:f7:07:16:95:42:
e6:4f:d2:c1:94:01:35:d6:52:e0:cd:f0:3e:1f:f5:07:89:dc:
6a:f1:f9:f3:70:3a:08:ab:b9:bf:df:66:e3:a1:89:4d:47:18:
76:f8:30:41:7b:19:67:0b:01:e3:de:ee:3d:a7:52:cb:f6:0b:
1e:63:67:d3:78:45:e0:2c:73:10:86:61:71:42:46:82:a9:a2:
ca:3b:f4:62:3b:e4:8c:cf:86:e2:44:88:25:ec:2f:18:7b:33:
e5:c9:c6:3c:94:d3:5a:d4:2b:d7:1d:ff:42:db:be:27:f7:c4:
62:b8:8d:83:75:b9:bc:1d:09:bc:85:44:5b:6d:45:5a:73:78:
6a:e1:54:f6:bf:26:cb:82:93:96:6a:5e:53:55:3c:60:3c:2b:
ce:8c:1e:10:ca:61:14:01:88:5d:0d:4e:99:85:9a:99:b8:ff:
c5:01:04:b3:c2:3f:f9:d0:23:16:2d:79:1e:d9:2f:e2:3d:59:
70:17:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:00 2025 by rpki-client