Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: 1MeMqi6txFfXQ3yJ02kJYESMxdnK2NwkHzpuVpI0wuQ=
Subject key identifier: 83:4F:F7:F6:99:FD:E6:9E:75:4C:F7:CF:AB:B7:00:16:E8:B5:88:EC
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0197624C44AEBACB7FD7BB761581FCC6FE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0CE5
Signing time: Thu 12 Jun 2025 04:00:54 +0000
Manifest this update: Thu 12 Jun 2025 04:00:54 +0000
Manifest next update: Fri 13 Jun 2025 04:00:54 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: ABzt8tp9+j8FUTbTQC5HGaemexHqG/zUSvlx3ogVaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4c:44:ae:ba:cb:7f:d7:bb:76:15:81:fc:c6:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jun 12 04:00:54 2025 GMT
Not After : Jun 13 04:00:54 2025 GMT
Subject: CN=834ff7f699fde69e754cf7cfabb70016e8b588ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:7d:0a:c3:70:e1:5f:8b:7d:22:99:c2:2c:
3b:c4:92:02:e8:61:b3:0f:37:0c:cb:b6:8d:9a:d0:
cf:92:3c:46:7f:bd:4d:e2:98:85:96:31:c8:fe:3d:
2e:15:20:25:ff:e7:16:27:4f:a7:eb:ff:06:cf:7e:
d7:7e:27:1d:4b:dc:f2:a3:da:cf:5b:9a:d5:0f:bd:
fe:4e:af:86:cd:a9:37:c6:03:da:db:ce:22:ad:f5:
eb:de:b1:8f:04:29:ca:29:7e:e5:84:35:40:83:4a:
ea:8f:38:a8:1f:3b:30:a5:b2:77:21:7e:7a:a2:1c:
2c:4e:7c:3a:b8:24:dd:1f:22:46:63:c6:92:a6:51:
51:e7:41:06:16:0c:20:d5:9c:e0:55:c0:2b:34:ae:
67:12:b5:44:2b:32:c1:d1:fd:68:f4:50:44:7c:9e:
18:92:8f:06:6c:fd:4f:f4:9f:7f:9f:67:93:61:62:
c5:d7:a3:51:d9:74:c3:88:d7:f2:12:ec:c5:fa:87:
65:5a:5c:84:79:e1:1f:fc:4d:82:32:60:90:e7:bc:
10:85:ec:85:44:b6:cf:6b:20:d4:df:c5:57:5c:47:
bf:0c:ea:ff:fa:9e:1a:27:2e:fd:5e:07:57:16:ed:
41:50:1b:9c:e5:6f:a3:ba:f1:8d:75:e8:b8:49:d7:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:F7:F6:99:FD:E6:9E:75:4C:F7:CF:AB:B7:00:16:E8:B5:88:EC
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6e:0a:5c:af:95:b4:b8:0d:d5:5d:b6:11:b2:8c:cd:56:49:
99:5b:e7:6d:b0:02:c4:78:e9:64:71:7a:e3:42:84:5a:9e:7a:
6d:e7:3c:8b:0c:83:30:ec:55:f9:c1:c3:75:d6:11:3b:53:25:
f3:c3:9b:f6:37:80:04:77:d9:94:f1:da:c2:9a:ba:ce:d9:e4:
45:b6:06:fc:ed:39:da:77:6d:97:06:bb:b9:d0:19:e7:c3:9c:
b9:51:fc:cb:22:71:77:dd:06:d7:95:49:76:2c:ff:01:92:e7:
0c:20:c9:bd:49:e8:9a:de:f3:36:b5:ec:0d:c4:35:fd:51:a8:
a2:bc:e8:81:f9:47:3c:08:79:22:8f:c4:ed:23:cb:9d:5c:ed:
db:94:96:f4:a0:d5:17:15:e4:01:9c:59:1b:81:6d:04:cd:f0:
a3:d2:64:79:57:7a:3c:0e:34:6a:33:7a:3d:2c:63:1a:e2:51:
87:5f:96:a4:7d:98:bc:fc:d2:57:46:89:48:f7:d6:f0:2e:e4:
68:04:0b:de:76:b0:64:63:5c:00:2a:30:66:e3:40:67:ef:5d:
29:7f:6a:48:7c:3f:62:b1:3e:63:9b:c5:79:96:75:a2:b0:3d:
14:04:e4:18:24:c8:50:67:64:b0:7b:e9:06:ea:2f:ad:cb:13:
92:07:a0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiTESuust/17t2FYH8xv5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWEzM2U3ZTFjMjM5NGM2NjNiZTg1ZDczYjllZTM0Yjc2
OTQ5NWYwHhcNMjUwNjEyMDQwMDU0WhcNMjUwNjEzMDQwMDU0WjAzMTEwLwYDVQQD
Eyg4MzRmZjdmNjk5ZmRlNjllNzU0Y2Y3Y2ZhYmI3MDAxNmU4YjU4OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0l9CsNw4V+LfSKZwiw7xJIC6GGz
DzcMy7aNmtDPkjxGf71N4piFljHI/j0uFSAl/+cWJ0+n6/8Gz37XficdS9zyo9rP
W5rVD73+Tq+Gzak3xgPa284irfXr3rGPBCnKKX7lhDVAg0rqjzioHzswpbJ3IX56
ohwsTnw6uCTdHyJGY8aSplFR50EGFgwg1ZzgVcArNK5nErVEKzLB0f1o9FBEfJ4Y
ko8GbP1P9J9/n2eTYWLF16NR2XTDiNfyEuzF+odlWlyEeeEf/E2CMmCQ57wQheyF
RLbPayDU38VXXEe/DOr/+p4aJy79XgdXFu1BUBuc5W+juvGNdei4SdefQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINP9/aZ/eaedUz3z6u3ABbotYjsMB8GA1UdIwQY
MBaAFHaqM+fhwjlMZjvoXXO57jS3aUlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTct
NzRkNGMyYzViNjk0LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTctNzRkNGMyYzViNjk0
LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG4KXK+V
tLgN1V22EbKMzVZJmVvnbbACxHjpZHF640KEWp56bec8iwyDMOxV+cHDddYRO1Ml
88Ob9jeABHfZlPHawpq6ztnkRbYG/O052ndtlwa7udAZ58OcuVH8yyJxd90G15VJ
diz/AZLnDCDJvUnomt7zNrXsDcQ1/VGoorzogflHPAh5Io/E7SPLnVzt25SW9KDV
FxXkAZxZG4FtBM3wo9JkeVd6PA40ajN6PSxjGuJRh1+WpH2YvPzSV0aJSPfW8C7k
aAQL3nawZGNcACowZuNAZ+9dKX9qSHw/YrE+Y5vFeZZ1orA9FATkGCTIUGdksHvp
BuovrcsTkgegiw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:45:37 2025 by rpki-client