Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: YhQwehgV2vllRbaaG8X1BWt6OcGcDW6ByfoBFpPMabQ=
Subject key identifier: 5C:6E:DC:80:EB:5C:0E:B2:F0:4A:17:6F:DF:AF:97:F0:FC:64:01:D5
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0197485585F994CDF862374F211772D20EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 033D
Signing time: Sat 07 Jun 2025 03:00:53 +0000
Manifest this update: Sat 07 Jun 2025 03:00:53 +0000
Manifest next update: Sun 08 Jun 2025 03:00:53 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: T+GlaBEQUp1uVIK7FrCvmA5mLJpINV6Z9Dj4WVmJlz4=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:85:f9:94:cd:f8:62:37:4f:21:17:72:d2:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Jun 7 03:00:53 2025 GMT
Not After : Jun 8 03:00:53 2025 GMT
Subject: CN=5c6edc80eb5c0eb2f04a176fdfaf97f0fc6401d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:93:8d:f3:ae:a1:ca:d4:0a:6c:ad:ae:18:
ef:4a:dd:f5:63:82:3c:74:17:e9:e9:1a:65:40:9a:
a4:4f:50:a4:79:7e:8b:e4:db:d5:5c:5b:1a:2d:5e:
a8:80:5f:07:26:51:ba:17:85:b7:51:14:d7:d3:94:
a0:dd:f8:4f:5f:ca:18:c1:59:bb:91:1e:6b:b0:4e:
58:32:ef:98:be:7a:f1:ef:80:10:4a:22:10:ef:d8:
88:22:ba:b9:8f:0b:44:05:78:eb:71:63:86:b0:85:
fe:9b:6e:6d:b5:06:26:ab:97:97:d8:ab:b6:fb:96:
3d:a7:36:17:40:d0:ff:1f:f0:7c:ae:c9:da:c3:36:
d6:11:9e:92:8a:37:a1:f6:df:14:08:f6:06:21:90:
a8:89:e7:f6:04:8c:51:1a:f2:78:60:51:74:18:bd:
bd:50:94:09:fe:2c:da:02:85:0f:d4:0d:82:db:dc:
bd:96:9e:bb:b7:64:3f:4c:82:69:bd:69:8e:34:23:
bc:45:7d:05:62:fd:5e:2d:2c:2a:8f:78:6c:2c:36:
9a:f3:f1:5a:5e:7c:8d:8c:a3:53:f3:10:c2:38:36:
fa:b4:cf:ec:8e:53:6e:d1:c0:15:d7:66:2b:ce:10:
fe:87:d8:36:67:5d:90:f0:e3:eb:37:6a:bf:00:ae:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:DC:80:EB:5C:0E:B2:F0:4A:17:6F:DF:AF:97:F0:FC:64:01:D5
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:7f:eb:7e:19:c4:40:aa:71:d3:cb:f7:87:e6:da:ba:d0:
a1:c3:05:ae:ee:16:e9:8a:9d:51:10:69:a0:b9:79:99:c1:d6:
11:f0:e7:38:f1:32:13:3b:31:a8:49:5d:31:d5:72:c0:19:82:
79:3f:89:73:32:ae:65:e4:e6:0b:3e:b5:14:70:88:cd:6f:bd:
89:79:c3:9a:37:72:37:92:96:0c:7b:b8:0c:16:6c:e7:14:49:
e6:c9:aa:de:9d:22:6a:f8:bb:ac:95:6d:de:0d:a2:35:bc:c8:
61:64:f1:c3:b0:18:59:70:74:e5:6d:64:3a:83:6f:24:77:37:
7e:01:da:94:86:5b:42:18:00:c0:e5:b4:c6:7a:18:85:19:39:
54:da:7e:fc:0e:8c:53:19:ca:b6:d7:79:e3:6a:04:56:82:ea:
de:a0:93:33:32:5d:07:cf:a9:ca:e4:c3:c0:9c:18:e7:6b:a3:
a2:1a:c8:73:02:71:8a:6c:8d:84:e3:d6:4b:d9:35:88:30:d7:
fc:13:c0:f1:64:43:48:74:52:8c:86:27:19:0f:8c:0f:74:9a:
6c:b0:03:86:40:34:1a:c5:b3:f8:77:4c:99:da:d1:e3:bd:31:
a6:76:fc:3b:0e:2e:21:6e:9b:cb:1f:df:4f:23:37:59:5e:b6:
81:26:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:55 2025 by rpki-client