Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: 76YMwj8g73Ske+7kWQX7UnXws0HAT4Vx82mLyNi/l2A=
Subject key identifier: 75:4D:5B:6F:C0:EA:31:54:2D:E6:7A:5F:59:27:46:FF:B1:F9:83:C6
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019921B292CDC0866E35814AAE177C59F07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0432
Signing time: Sun 07 Sep 2025 01:02:55 +0000
Manifest this update: Sun 07 Sep 2025 01:02:55 +0000
Manifest next update: Mon 08 Sep 2025 01:02:55 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: 7M/CFF/9ZFXRetg+ZazMAXnelvg1rqT/9L0uzeMYxgI=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:92:cd:c0:86:6e:35:81:4a:ae:17:7c:59:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Sep 7 01:02:55 2025 GMT
Not After : Sep 8 01:02:55 2025 GMT
Subject: CN=754d5b6fc0ea31542de67a5f592746ffb1f983c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:0e:6c:c0:ef:d4:65:14:16:2d:38:db:e0:
c5:75:ef:15:b0:5b:71:e7:f9:68:29:cd:a4:4f:45:
d8:a9:5b:7c:8a:6e:77:e0:12:da:90:bb:94:d2:75:
e0:62:1e:3e:09:18:64:64:29:ce:2d:a1:d4:5c:d7:
fd:31:72:6e:55:8a:84:c2:12:72:92:cc:84:2f:36:
f4:ee:de:a7:d8:02:cf:68:5c:58:06:73:96:35:cc:
d4:bd:6f:0b:04:7c:7e:ce:17:92:56:fc:41:c7:9a:
a0:6e:e2:35:bd:bd:20:67:1f:ad:7e:e2:02:c6:dc:
30:8f:17:5b:6d:63:15:c2:bd:d5:72:37:e3:7e:bc:
13:19:88:b2:19:ea:ec:4d:7d:69:7d:ce:a5:9e:bc:
27:48:05:8c:e4:a6:4a:47:02:dd:f9:50:63:b5:f6:
b6:e0:fd:a9:9e:5a:ea:bc:ca:bf:d1:61:ad:c5:6f:
39:2a:81:4f:c5:09:d6:ee:0d:86:47:76:92:33:66:
ba:06:73:44:07:22:69:bd:6f:6c:3a:f0:fb:ba:8e:
a7:fd:32:e0:56:4f:2d:9e:95:bc:80:c5:38:2d:6c:
b0:0a:07:8c:d5:15:43:8f:b0:50:a3:e1:5f:66:a0:
80:e2:d9:46:57:04:b8:d2:4b:bc:23:d5:36:82:c3:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:5B:6F:C0:EA:31:54:2D:E6:7A:5F:59:27:46:FF:B1:F9:83:C6
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:56:9c:e3:24:a5:0f:07:39:24:0f:0f:46:23:74:32:db:7b:
f8:14:4b:79:ea:8c:9d:d6:86:2e:bd:0d:1c:a2:49:15:8b:44:
6b:75:1d:50:dd:a4:5d:ad:a0:e2:7f:d3:74:4e:3e:17:49:81:
77:f6:b4:47:61:f7:d9:6c:71:74:49:e7:8c:c2:97:4f:d7:a3:
f1:88:d4:1d:4a:7e:df:65:a1:27:4a:d8:bd:03:37:a2:2b:b4:
ec:da:5c:50:27:64:b0:79:14:8a:e0:91:7c:11:9b:1a:e5:59:
cf:4d:1d:5f:c6:3a:83:78:c3:b7:b3:e8:08:5c:c5:bf:61:c5:
c7:75:ed:54:1e:b0:f2:d6:0d:14:25:c0:d0:11:4f:a9:8b:17:
fa:01:05:cf:c8:10:5c:b1:92:fa:32:66:25:44:69:a4:93:2c:
ef:96:de:e1:71:ab:dd:64:4c:a2:6e:89:b8:ac:19:74:e9:ea:
a0:6d:e4:ed:2f:d1:f4:e8:92:27:ae:66:9d:fa:a0:47:b7:c0:
87:37:ab:1d:48:24:1f:95:87:c3:2c:63:48:a8:24:0e:43:ed:
c1:87:cd:a9:6f:11:9d:63:eb:6e:4b:4a:b0:88:19:9d:b1:50:
b6:a8:c4:15:69:74:b5:bd:f2:d6:83:c0:cd:58:16:a6:c7:41:
df:bf:e8:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhspLNwIZuNYFKrhd8WfB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm
NTQ3YTIwHhcNMjUwOTA3MDEwMjU1WhcNMjUwOTA4MDEwMjU1WjAzMTEwLwYDVQQD
Eyg3NTRkNWI2ZmMwZWEzMTU0MmRlNjdhNWY1OTI3NDZmZmIxZjk4M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgObMDv1GUUFi042+DFde8VsFtx
5/loKc2kT0XYqVt8im534BLakLuU0nXgYh4+CRhkZCnOLaHUXNf9MXJuVYqEwhJy
ksyELzb07t6n2ALPaFxYBnOWNczUvW8LBHx+zheSVvxBx5qgbuI1vb0gZx+tfuIC
xtwwjxdbbWMVwr3VcjfjfrwTGYiyGersTX1pfc6lnrwnSAWM5KZKRwLd+VBjtfa2
4P2pnlrqvMq/0WGtxW85KoFPxQnW7g2GR3aSM2a6BnNEByJpvW9sOvD7uo6n/TLg
Vk8tnpW8gMU4LWywCgeM1RVDj7BQo+FfZqCA4tlGVwS40ku8I9U2gsOF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVNW2/A6jFULeZ6X1knRv+x+YPGMB8GA1UdIwQY
MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt
MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0
LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlac4ySl
Dwc5JA8PRiN0Mtt7+BRLeeqMndaGLr0NHKJJFYtEa3UdUN2kXa2g4n/TdE4+F0mB
d/a0R2H32WxxdEnnjMKXT9ej8YjUHUp+32WhJ0rYvQM3oiu07NpcUCdksHkUiuCR
fBGbGuVZz00dX8Y6g3jDt7PoCFzFv2HFx3XtVB6w8tYNFCXA0BFPqYsX+gEFz8gQ
XLGS+jJmJURppJMs75be4XGr3WRMom6JuKwZdOnqoG3k7S/R9OiSJ65mnfqgR7fA
hzerHUgkH5WHwyxjSKgkDkPtwYfNqW8RnWPrbktKsIgZnbFQtqjEFWl0tb3y1oPA
zVgWpsdB37/o3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:57 2025 by rpki-client