Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: C9QtkwtmoOM+OPyL88vcewRIqu0+nrfrHeAhC91gyLg=
Subject key identifier: DC:AA:35:B1:17:44:FA:3D:5D:DA:DF:EC:9E:DE:9C:0F:9A:2A:8D:0B
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019A71B8A30817926B40D1764FE988F9EDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 04E0
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: qS4dUItZtoZ2DYViRwrdSHHf4d2KXLgj+2PbuekcElk=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a3:08:17:92:6b:40:d1:76:4f:e9:88:f9:ed:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=dcaa35b11744fa3d5ddadfec9ede9c0f9a2a8d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:37:7e:f1:38:c6:01:78:8e:a4:76:fe:b2:
a2:2f:ec:f7:56:5f:9b:ac:a3:fb:e7:ba:d9:d8:ce:
bd:76:0d:b2:43:d5:60:7f:b7:5f:72:ad:2a:4c:c5:
3e:09:ef:51:59:4d:52:12:da:23:40:96:b7:47:59:
d1:6d:6a:85:3e:1c:b1:31:b7:03:c8:e6:f5:db:ab:
a7:85:b5:a5:fb:a7:5e:38:b7:ea:3d:c6:df:d7:31:
5f:7a:3f:7a:2c:89:1e:f8:c8:3c:3f:a4:7d:52:d6:
b6:1f:cb:b0:1a:09:9a:25:98:8b:4d:7b:38:da:66:
5a:4c:66:99:13:26:01:79:d7:f8:74:0b:70:1c:33:
82:c5:f7:89:c1:68:14:38:49:03:97:a8:9f:7b:e1:
58:8e:5c:6d:b2:0b:2d:dc:7f:5f:1e:7f:6d:4d:c6:
34:8d:8b:c7:c6:b0:66:12:be:0c:c3:0a:e1:ca:67:
a8:b9:9d:38:da:e3:6c:fa:cc:c7:b0:aa:26:0c:d6:
e7:1a:41:4a:23:d7:d8:dc:19:e4:ee:f5:1f:e4:bf:
1a:fd:72:07:b2:09:48:b1:1f:31:5d:e7:ac:60:52:
1c:6a:63:b5:86:c1:cf:e8:e1:23:19:54:f9:0a:00:
77:a8:5d:f4:13:c8:e7:e3:9e:b9:56:03:72:4b:89:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AA:35:B1:17:44:FA:3D:5D:DA:DF:EC:9E:DE:9C:0F:9A:2A:8D:0B
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:74:58:3f:2e:42:75:ab:b0:71:c0:31:91:a5:54:b5:0e:
99:17:09:1d:e4:48:5e:8a:7a:e2:4e:bd:2f:a5:5c:c2:2e:8b:
a3:6d:e0:a9:7b:46:11:d8:86:09:c3:b7:ce:6c:56:56:e1:79:
cb:15:6d:14:35:c4:18:ab:bc:0f:b7:57:c5:f7:0f:b9:bf:07:
3f:a4:c9:9a:6a:7e:55:78:2d:7a:33:cc:9a:d6:33:02:2f:27:
78:d6:6f:6a:ec:6d:7c:be:20:6f:f8:f1:cc:0a:44:95:fb:73:
2b:14:57:56:cf:37:77:ba:fc:c0:2d:ad:0f:15:56:9e:76:e8:
6e:47:57:50:31:41:d1:f1:0a:8d:01:79:37:32:1f:d1:29:bb:
8a:80:ba:7f:82:e7:f5:44:87:be:18:0a:4a:2a:ff:94:7b:ca:
b7:5a:ea:78:f8:4f:1d:04:9b:7e:56:54:18:6d:15:4f:6f:c3:
3c:56:3b:d9:d5:68:31:e5:90:69:f2:2e:c6:ba:e0:b9:fa:4f:
e4:78:88:0b:eb:4d:16:77:89:61:d9:d8:f6:31:a3:7d:ef:cb:
20:fa:9b:ef:88:08:75:87:ed:9b:c7:29:a7:92:2d:78:2b:98:
6e:14:85:8d:60:5a:f3:96:53:af:fe:71:2b:25:5c:32:cc:f0:
90:d8:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client