Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: gBs9ifxTRWdUqVfOSFr9YrU9vj6/6Wq8r5/Au8iiKhI=
Subject key identifier: 98:C6:82:84:F6:2B:FE:CE:DE:6D:A2:DB:C3:A0:14:2C:DB:AD:1E:45
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01987C09E3C2B461C74B1204E48B1F682D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0311
Signing time: Tue 05 Aug 2025 21:01:19 +0000
Manifest this update: Tue 05 Aug 2025 21:01:19 +0000
Manifest next update: Wed 06 Aug 2025 21:01:19 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: ph3MMrOQqsYyLTPUXmXz9kPgKBoLb0i/v2h121dW6Lg=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:e3:c2:b4:61:c7:4b:12:04:e4:8b:1f:68:2d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Aug 5 21:01:19 2025 GMT
Not After : Aug 6 21:01:19 2025 GMT
Subject: CN=98c68284f62bfecede6da2dbc3a0142cdbad1e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:74:fa:83:f3:2d:ab:12:b2:cd:bd:73:33:
ef:85:65:98:8e:f4:3e:48:86:30:7a:54:fd:39:8d:
37:d8:e6:14:f6:07:a4:a0:b8:f1:20:f5:25:0d:33:
a2:6d:79:d2:4c:50:6a:3c:13:4f:b5:92:49:98:41:
a4:ac:f6:c2:a6:59:eb:46:7e:21:0d:3a:ff:14:f2:
80:82:94:64:5f:38:33:63:5d:a4:0b:e6:d5:a3:77:
ed:af:29:a4:d6:97:5b:33:39:41:d8:77:87:96:bf:
6d:0b:21:24:a9:18:93:d8:81:76:cf:7b:7d:47:9f:
79:23:20:5e:15:ec:db:10:f8:e5:3c:04:37:a4:b8:
29:7d:af:71:a6:a5:f5:f2:6e:af:ae:4e:6b:f7:75:
f6:f8:35:eb:f0:61:2b:0c:a3:18:96:9a:06:fc:c7:
21:cc:d0:5e:2c:1f:59:21:97:6a:f1:4b:41:2c:2e:
df:25:bf:c2:1a:09:7d:89:49:eb:74:c6:f5:60:3a:
ee:02:b4:0f:44:c3:4c:ad:83:a1:39:3e:c8:ac:fc:
d4:36:be:c9:2e:6f:f2:80:25:d7:5c:e0:14:1b:f9:
c6:6b:7b:c9:5d:cb:90:e6:e8:b6:5b:a9:8b:c8:4a:
ce:fb:47:0b:87:97:6a:1b:34:6d:b6:e6:54:8b:80:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:82:84:F6:2B:FE:CE:DE:6D:A2:DB:C3:A0:14:2C:DB:AD:1E:45
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:17:50:81:96:c6:79:77:c5:23:5c:dc:9b:5d:ed:63:41:22:
f0:7b:2a:61:77:53:ee:c5:3b:f8:19:3c:5c:8a:a5:ac:5b:bb:
a7:fe:4a:bc:dc:03:7c:46:f3:c5:88:14:5b:3b:80:24:83:a2:
b4:05:26:e2:ad:56:a9:7d:61:6d:17:9f:99:6e:3f:c9:29:f4:
c5:98:3b:ba:d2:11:91:4c:73:03:8f:05:b7:f8:22:29:93:87:
7f:48:90:ed:92:e4:ff:e8:11:0a:12:d8:d9:95:ad:09:a1:dc:
9b:2c:23:51:5d:a8:cc:39:8b:44:02:48:21:8c:26:2a:de:07:
07:34:51:37:65:b9:bb:8f:a7:d8:f8:91:45:04:d9:80:25:81:
ad:e7:16:13:50:df:3b:2a:41:86:d2:fa:6d:97:a3:e9:83:55:
dd:61:c2:22:1a:89:b8:63:11:0d:2b:57:07:44:17:24:46:79:
ec:a4:f0:6f:f6:3d:0d:5c:1b:53:19:19:be:89:2c:bb:bd:ea:
8e:5c:5f:8f:cc:a3:3d:6d:5c:ea:bb:3b:92:1d:92:89:68:a1:
1c:c9:88:c7:63:67:9a:9e:02:a1:3d:66:5a:36:47:31:ce:16:
39:a6:8a:3d:ac:9c:ff:04:10:52:28:9d:1d:a5:9e:96:85:47:
14:aa:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:54 2025 by rpki-client