Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: 7ogXND0/sxsZ2rvdXmnU+jWjADX9/smivAAfZAEajMs=
Subject key identifier: F2:31:91:75:5B:E7:C0:11:BB:6E:F8:AD:7C:E3:BD:A8:77:83:F0:A4
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 01984852BFD3C716440767C9E2CE14206D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 158F
Signing time: Sat 26 Jul 2025 20:00:39 +0000
Manifest this update: Sat 26 Jul 2025 20:00:39 +0000
Manifest next update: Sun 27 Jul 2025 20:00:39 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: I7oDLFsxQBAbGBgTStL061JvejaymA2rrSSzqLVVVnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:bf:d3:c7:16:44:07:67:c9:e2:ce:14:20:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Jul 26 20:00:39 2025 GMT
Not After : Jul 27 20:00:39 2025 GMT
Subject: CN=f23191755be7c011bb6ef8ad7ce3bda87783f0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:af:4e:28:6b:32:de:3d:6f:b2:18:09:0f:
0f:47:d8:de:87:40:a5:88:1f:f8:d1:d0:73:66:9f:
1c:c4:e1:95:43:26:51:19:26:bf:d5:4b:8b:4b:e9:
53:43:08:5b:52:16:7b:25:51:f8:e9:e1:55:f3:67:
11:e3:84:f6:1a:62:15:1f:51:f5:88:af:88:90:9e:
a4:21:de:ca:75:0c:75:2e:36:80:8a:0b:b9:3d:36:
a7:69:2b:b4:7f:31:64:5c:c3:71:ae:d3:c9:99:d5:
e7:be:28:c9:c8:71:cf:50:e0:41:ba:83:1e:bb:01:
0d:6c:c4:e2:dd:23:c7:8c:82:db:d4:d4:5a:4d:d7:
c1:66:f7:67:06:e7:44:b0:91:7a:74:3b:5b:eb:ac:
e6:00:05:86:90:c4:d5:7b:ed:3a:28:fb:75:55:3b:
31:4c:77:12:f4:77:70:e6:f3:84:3c:c6:cd:52:21:
4a:a9:84:36:6a:d9:fe:da:2b:45:9a:e2:c5:27:74:
72:06:bb:ed:29:05:50:57:9a:1e:7e:73:29:79:18:
75:0d:47:a1:d6:96:91:f1:f1:42:a2:6a:69:06:f4:
1e:53:66:63:f2:bb:6d:b8:c2:5e:c1:27:2b:f2:f5:
68:62:44:12:5f:cf:fc:bd:eb:50:7f:76:2d:d1:ca:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:91:75:5B:E7:C0:11:BB:6E:F8:AD:7C:E3:BD:A8:77:83:F0:A4
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:75:5d:e8:5a:57:d5:d9:68:f1:62:bc:d2:f4:cd:de:e2:15:
0c:21:12:e7:4e:20:5e:da:d6:17:73:70:13:f3:3a:26:ea:7a:
d1:3f:fe:5b:8b:2d:e8:ff:6e:f9:37:6a:ee:ba:ad:c0:29:54:
44:a7:7a:37:3b:3c:6d:63:ed:7a:79:60:cc:7c:4e:76:9d:5e:
cc:db:8f:0f:8e:53:bb:2a:e0:0c:74:d7:f3:d7:14:88:bf:42:
bc:81:a9:bf:6c:9f:ba:5a:a6:a3:da:3d:fc:70:86:91:78:b1:
f7:73:84:a6:a6:6a:99:f8:cd:a6:89:99:7e:b4:84:5b:f2:ec:
47:71:65:a7:eb:ef:71:39:7b:24:16:9d:74:e2:6a:43:55:3e:
37:49:92:b2:b8:ea:e7:5c:5f:55:47:6c:02:73:0c:f8:fe:f2:
35:4b:b2:b3:bf:a9:5a:e5:56:ac:16:4e:84:fa:a5:8c:c9:4a:
ea:72:47:9a:56:ab:9d:9f:26:14:5a:26:4d:aa:dd:ce:70:18:
96:9e:19:66:4d:7c:54:03:ea:2a:be:02:e5:30:a0:ac:01:4a:
9c:a8:c4:24:4a:bf:49:26:22:32:0e:91:79:fb:1d:8a:68:79:
6a:22:3f:5b:24:54:bf:0c:5c:b8:07:f0:ef:4d:8f:b3:e3:f7:
bf:39:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:44 2025 by rpki-client