Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File: doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier: W8fRGXw4khmK5O721ONmZiqHVxr9z/tSM3dMQHw4yxc=
Subject key identifier: 75:30:7F:7A:A8:4F:32:F0:0A:6F:1B:7D:E3:CD:CC:66:B5:DD:9B:28
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer: /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial: 01984708ED9748206915D6FB6042712C9CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 14:00:24 +0000
Manifest this update: Sat 26 Jul 2025 14:00:24 +0000
Manifest next update: Sun 27 Jul 2025 14:00:24 +0000
Files and hashes: 1: VGNUuwe-hqqAy7oOkHM2nEayK1o.roa (hash: PbhbER0ewQHcNx+5Jye/cmyEemdCt4HhzE4je62M8OM=)
2: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: nNCve9WS+NAWTbVVyUABXWHD5pNeOOglZfJdIXdm4vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:ed:97:48:20:69:15:d6:fb:60:42:71:2c:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Validity
Not Before: Jul 26 14:00:24 2025 GMT
Not After : Jul 27 14:00:24 2025 GMT
Subject: CN=75307f7aa84f32f00a6f1b7de3cdcc66b5dd9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:f3:67:6d:45:16:69:30:36:f2:89:75:85:
90:b4:a2:b0:96:7c:60:3d:72:e4:c8:15:34:38:34:
dd:17:ab:a3:92:30:d0:cc:ea:46:a6:e8:64:ea:de:
a7:76:44:3b:18:0d:7f:dd:4c:72:bd:af:7a:a2:85:
70:0f:f6:7f:b4:4a:5c:56:b8:c7:53:1c:d0:96:51:
02:0e:0a:89:00:c2:20:4a:54:49:ad:1a:e1:00:3f:
3b:a8:3e:0c:85:4b:e8:d9:d0:34:58:ef:ae:c2:b8:
7d:59:e0:fe:28:f2:22:63:22:f6:2f:5f:52:47:15:
d2:4f:25:14:2a:1e:84:e1:ad:de:36:e2:ae:84:82:
db:f4:10:b0:f3:1d:98:5f:f1:58:b7:e4:f6:ac:d0:
32:01:2a:f9:20:5c:8c:97:85:e4:1b:08:e3:c6:18:
53:e2:14:92:97:b9:c4:56:09:31:35:26:1e:38:51:
a1:fb:e3:e3:82:06:d5:e0:95:32:88:67:f0:27:42:
d9:23:df:13:a7:ad:e4:53:cd:bd:6d:d9:cf:58:f1:
f6:77:03:88:10:f1:db:9a:98:b3:ec:37:4a:86:70:
b5:86:d3:4f:da:d4:dc:bc:aa:c9:18:64:6d:fc:e4:
7d:0a:26:bc:23:a9:f9:13:14:91:6d:c8:ca:a3:f6:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:7F:7A:A8:4F:32:F0:0A:6F:1B:7D:E3:CD:CC:66:B5:DD:9B:28
X509v3 Authority Key Identifier:
keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9c:fd:08:cb:77:7f:49:11:2c:34:f8:44:09:77:b3:a8:d9:
01:a6:25:13:09:1f:71:84:6b:ff:0c:2d:d9:f3:da:88:bc:d1:
6b:b0:64:c8:c6:53:2a:77:1c:b6:f2:fd:de:6c:26:ef:13:32:
a2:b0:c9:d8:d1:85:78:ba:04:c2:18:04:aa:63:fa:57:f1:89:
e3:7b:72:1e:64:7f:21:76:57:5d:cb:e0:b3:d1:e0:ba:48:ba:
65:59:ff:c8:18:05:c3:28:c5:cb:9e:86:39:c5:c6:62:45:ac:
89:47:e8:c5:b7:7b:b6:f5:e2:94:99:e7:64:71:93:a7:ed:74:
88:47:ea:6a:dd:21:6b:fb:01:5a:e0:87:f5:81:e1:31:86:47:
ec:16:cb:5f:42:d1:b3:e6:a6:76:f0:e3:55:b2:6e:2a:88:5d:
56:04:8c:ee:4c:77:98:b5:84:0f:93:0b:95:0a:ca:87:ef:18:
5c:41:01:fe:e1:b0:8b:46:e4:ce:43:3d:f0:63:16:ae:bf:48:
81:fc:87:24:24:15:50:1f:68:8f:bf:e8:75:74:1a:43:30:51:
58:19:62:4d:d6:a7:d5:f9:16:7a:0c:e8:b4:28:01:f9:7d:c3:
1a:da:78:ce:4a:58:b5:d8:54:1c:33:3e:69:7e:0f:52:6e:35:
14:e3:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:57 2025 by rpki-client