Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: JnyH7jspoSEhQgZWSQeGvnFNzn/4N1IxPOh/AKCZYFM=
Subject key identifier: A3:2C:56:B0:7A:55:D4:3F:25:5E:D2:55:E8:70:F7:14:C7:8F:2A:8F
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 019A4E18EC55F4FE350F58372301F7202AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: 0/SS939wZyZusJbKRMUM8JyBWHfNU+Puc01aw8tdlTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:55:f4:fe:35:0f:58:37:23:01:f7:20:2a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=a32c56b07a55d43f255ed255e870f714c78f2a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:38:22:79:02:0d:f2:26:0f:48:27:a2:96:
6c:6b:6b:be:b1:d1:80:a6:44:6a:f6:35:22:c9:5d:
04:f1:c8:25:78:c6:c3:2a:fd:df:93:90:a1:ee:e6:
a8:81:ec:51:a2:08:b6:18:ff:09:f2:19:e0:c6:a6:
07:e4:ae:93:de:c5:a3:97:03:51:24:1a:5c:1e:81:
79:f2:38:fd:0e:ce:59:9f:0a:16:f9:03:49:8f:69:
9b:54:b8:10:d9:1d:e5:91:4c:8c:fc:d6:51:77:49:
4f:b3:dc:40:2f:c0:36:af:72:8f:e6:e3:c4:77:da:
0a:3a:00:bf:87:96:0b:2c:31:2f:c5:0d:52:d8:21:
37:29:8a:3e:b5:f1:d5:98:d9:2b:ef:03:48:b7:fe:
aa:3a:64:25:d4:b9:59:6c:d9:ac:75:ca:68:4e:3b:
dd:47:8e:a4:f6:cf:6f:0f:1b:f6:ef:5f:2b:96:0a:
ea:2e:b0:f9:c5:dd:9c:6a:9c:e3:53:dc:db:80:bc:
d3:81:a8:7e:45:e3:2d:e6:a5:59:d5:5b:ca:5e:cb:
a9:fd:53:da:11:30:7d:a1:f3:ca:70:9a:0e:77:50:
3b:3d:02:a2:b6:7b:4a:24:8a:16:ab:36:7b:ee:9d:
6f:e3:8e:2b:f2:b0:bc:d8:b5:61:7b:2a:77:68:26:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:56:B0:7A:55:D4:3F:25:5E:D2:55:E8:70:F7:14:C7:8F:2A:8F
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c9:e8:b8:f7:80:14:a3:7e:f7:73:9d:e5:b4:bb:45:ce:84:
cc:be:87:e1:04:f9:d9:5d:cf:68:fd:c5:aa:62:c3:3a:66:15:
2c:70:45:df:e5:3c:d4:9c:3c:79:f6:17:f5:58:8e:d3:e6:88:
6e:7f:f5:a8:aa:ca:ee:46:00:88:8e:37:b5:0e:27:25:f2:9d:
05:ba:3c:cf:cb:36:31:97:ab:05:ee:1a:e2:e4:29:b6:99:94:
bf:6f:f9:93:26:88:0e:c4:52:52:05:af:c5:01:2d:9c:0e:65:
20:6a:2c:fc:0f:6f:2e:4b:a3:7e:12:b0:18:da:4c:23:de:61:
ad:e1:a2:b4:07:b4:7f:5e:42:fb:3d:59:f9:12:9b:99:4c:65:
6f:8a:b9:5f:0e:89:36:3d:9a:09:91:5e:01:55:0f:1b:ae:75:
0f:ea:e7:ba:2c:56:ba:6e:f7:5d:e8:56:bd:d8:b3:75:b0:e3:
4c:f3:b9:78:5a:d8:bf:22:7f:5c:2c:70:b2:76:3a:e1:96:30:
b5:e9:90:27:dc:f3:d8:b8:28:4a:ce:a2:f3:e6:28:60:a8:5b:
c0:29:d5:34:87:0c:d3:cd:ba:53:31:8b:47:20:8e:43:2b:97:
98:27:b0:aa:bf:eb:45:a7:6b:18:ef:3d:6d:34:67:22:cb:a0:
28:cc:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:18 2025 by rpki-client