Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File: do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier: 5D7m9Ei6aemD/KPMjuS5KF0JUBehzA35UeY732wRUcw=
Subject key identifier: 29:8B:7B:D5:3C:57:6F:C2:1C:E0:BC:E8:BB:AE:A8:95:F5:E8:B0:D5
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer: /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial: 01989780E9034DDD9DC92E6793474186EB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number: 067D
Signing time: Mon 11 Aug 2025 05:01:04 +0000
Manifest this update: Mon 11 Aug 2025 05:01:04 +0000
Manifest next update: Tue 12 Aug 2025 05:01:04 +0000
Files and hashes: 1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: axjTFyTK38wTPevhZxkoMB/pHMS2S1OqMHUmYJ7RYGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:e9:03:4d:dd:9d:c9:2e:67:93:47:41:86:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Validity
Not Before: Aug 11 05:01:04 2025 GMT
Not After : Aug 12 05:01:04 2025 GMT
Subject: CN=298b7bd53c576fc21ce0bce8bbaea895f5e8b0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:0d:e9:7f:7d:14:81:65:29:e2:19:5b:84:
ad:03:e2:28:b3:1d:2b:c8:5e:c1:6b:94:d7:1c:48:
88:15:f7:d4:cc:e2:d8:5e:4d:12:fa:1a:58:58:e8:
5f:52:21:66:6d:b1:3e:66:02:9a:17:f1:85:18:52:
58:1e:34:e9:2f:14:78:ed:24:47:72:be:90:23:f9:
0b:83:89:73:c0:a8:3e:3c:16:d8:65:eb:22:e3:d6:
e8:c8:2e:53:1a:04:09:70:6d:51:c5:8d:7a:1f:cf:
0b:85:6a:42:8f:c1:a8:07:c9:49:72:d6:a6:a2:ad:
f0:b0:05:ea:53:fe:0c:7f:ac:a3:22:2d:65:d5:8d:
01:1f:c4:5c:51:ed:ca:84:ec:1d:c3:88:ad:8e:2b:
44:46:e7:3e:e1:4e:01:5b:58:84:d8:c9:e7:03:13:
61:ef:44:d6:a3:8e:98:ad:48:4e:1a:3a:93:1e:ef:
3a:b1:81:85:ed:5d:e6:7b:4e:d3:b1:f0:83:93:2d:
06:16:b3:b7:41:22:42:80:1e:89:e7:4f:58:12:e2:
14:76:e8:77:b8:7b:cf:20:59:c3:b0:6c:1d:cf:0d:
b7:72:d2:f1:6a:b7:2d:41:22:18:6d:d8:5a:eb:b3:
5c:e6:49:52:98:2a:cc:35:3b:2d:e9:55:71:d1:9d:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:7B:D5:3C:57:6F:C2:1C:E0:BC:E8:BB:AE:A8:95:F5:E8:B0:D5
X509v3 Authority Key Identifier:
keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a1:58:05:d5:00:a7:5b:88:ff:4f:67:14:57:39:22:96:78:
fb:c2:94:16:7a:5a:a6:0b:35:bd:79:5f:30:51:f5:6c:6f:46:
0b:6f:87:e5:df:22:ef:a6:0e:bb:c6:a8:aa:55:88:31:8f:cd:
49:03:e0:3c:71:50:f0:8b:6e:3f:5c:a7:13:8e:34:de:8c:61:
ae:c3:ce:e9:bd:0e:2f:c0:82:1a:09:6e:54:c7:37:10:3f:db:
c1:f2:8a:77:8f:6c:fe:da:8e:ce:bf:92:00:9e:62:66:27:d7:
85:0f:17:93:94:25:55:33:bb:7a:92:f3:64:3c:ae:05:f8:3d:
78:39:73:5f:50:e7:8d:d8:dd:68:ad:ef:12:c2:d5:35:f8:1b:
3e:ad:8a:11:50:f7:fb:0b:3d:8b:ee:fc:ad:96:92:25:41:a7:
67:1c:19:7b:d8:50:1e:8b:87:ff:4b:2b:46:d5:a2:77:b7:19:
3e:ba:f5:87:86:76:2a:c7:b9:dc:2e:49:9f:c8:74:b8:84:d0:
a2:cd:b4:d3:f0:01:7c:51:68:a8:93:5e:21:bf:04:1c:eb:0f:
54:73:ca:1c:3a:c6:8a:c6:d7:fd:57:80:44:f3:20:ad:d0:f4:
e4:63:b3:9a:2c:5e:b1:9f:b1:ce:a7:25:5e:db:88:d7:e8:1c:
02:ab:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:04:59 2025 by rpki-client