Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: lZ0ZvNtCv7XV+vhDcS4eA8NrjTrT2fBtJrrl7sLSI3o=
Subject key identifier: A2:A5:DA:EB:C1:B9:A2:1D:F6:7B:7C:74:E6:3E:0E:BE:AA:13:BB:BE
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 019874F4C299F07977E0CF9DF86D7CA079F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 12:00:54 +0000
Manifest this update: Mon 04 Aug 2025 12:00:54 +0000
Manifest next update: Tue 05 Aug 2025 12:00:54 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: GUvyLsjvtgHX8/0Wv1B/PA2hEJxCQ3DLF521+1t3l6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:c2:99:f0:79:77:e0:cf:9d:f8:6d:7c:a0:79:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Aug 4 12:00:54 2025 GMT
Not After : Aug 5 12:00:54 2025 GMT
Subject: CN=a2a5daebc1b9a21df67b7c74e63e0ebeaa13bbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:61:59:ef:8c:a3:9f:55:94:25:f0:30:ba:
36:1b:ca:0e:e8:89:38:05:4a:08:a8:93:ba:7f:e6:
7c:9c:d7:69:5c:48:ec:0f:ec:a8:a4:53:1a:ab:e0:
1c:b8:99:38:81:e5:af:6f:ac:d1:c7:2e:ee:cb:5f:
48:53:eb:72:6c:42:cc:ee:f3:f6:71:31:5c:71:e9:
92:f7:b1:b8:4c:43:6f:a4:60:ef:a7:0b:d0:7f:9b:
2d:3d:d2:2b:86:57:39:38:b8:6b:12:ae:bb:e1:89:
4b:5e:5e:4d:64:a1:24:71:dc:47:41:fd:ea:20:bc:
18:b3:c9:e7:ef:ae:a2:3b:39:66:7d:ba:b2:82:3b:
37:12:08:a5:e2:ee:4f:96:01:47:4a:d5:a5:d0:43:
91:58:2f:0c:38:7f:3a:3d:d1:ca:0c:fc:7a:00:b7:
bb:1b:5f:4e:ef:f2:48:8a:66:80:33:07:c9:da:cd:
2c:e6:63:c0:c2:ef:ae:87:42:b4:2c:33:b5:35:5c:
85:7c:f5:dc:f2:5d:51:53:df:9f:96:24:38:46:90:
d1:4a:ad:79:a2:7f:1d:c8:d5:06:c3:27:3f:fe:75:
cd:5d:65:95:c7:61:e1:f2:bf:82:fa:58:c9:ae:4d:
31:72:df:c4:a2:7f:c2:5e:72:4c:0d:0c:9c:e9:fb:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:DA:EB:C1:B9:A2:1D:F6:7B:7C:74:E6:3E:0E:BE:AA:13:BB:BE
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:6d:99:0b:28:6a:0f:10:89:31:0b:6e:be:eb:f2:0c:b4:
0b:56:56:55:6d:c8:a8:7a:bb:2a:0f:88:1b:86:74:ef:a3:13:
4e:ed:ca:e2:d8:29:b4:a8:64:58:c5:64:27:d6:c4:a5:3c:f9:
b7:0f:8e:94:b8:14:c2:d4:cb:9b:4c:1d:a0:0f:0b:de:34:28:
71:b9:09:11:84:9a:16:0e:af:43:33:58:30:16:14:ab:d6:82:
35:6e:24:97:6c:37:39:e4:13:ae:3c:e5:9b:3f:90:1b:6f:c7:
83:c6:ab:5c:cb:b6:f5:48:46:f8:c8:b1:ec:8c:af:bc:8a:05:
f7:b1:bc:ce:49:d7:67:3b:89:1c:82:0f:00:82:64:ab:18:71:
2b:b3:63:f6:c2:35:39:22:22:0b:40:cc:9c:f8:20:99:9f:16:
de:e5:65:39:12:e6:6e:13:01:fa:fe:cb:c4:c3:7d:48:9a:ba:
95:81:6a:51:7a:79:9e:8b:09:cf:d1:3d:74:76:e0:2f:a6:1c:
cf:4d:11:16:6d:6d:82:45:bf:7c:e0:5c:b8:ed:6a:42:55:35:
c6:d7:05:fb:e5:d5:73:91:53:f4:d7:1a:95:0a:0d:d2:aa:be:
ef:07:c2:49:5c:93:04:12:36:1d:f6:f7:82:59:61:d8:d9:dd:
2a:78:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:31 2025 by rpki-client