Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
File: _2doQ1vYHTIqUcZiBRA9Rc775fA.mft (raw, json)
Hash identifier: OWqhIk1QpQ4XZvnpDsdmQIaQgcxF3IXZn5SkyqV31XQ=
Subject key identifier: FD:78:7A:C5:D0:54:73:1A:67:04:D8:CB:64:DE:27:1E:C3:6A:B8:71
Authority key identifier: FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
Certificate issuer: /CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Certificate serial: 0199239ECAD478A3809CF8F285C10BD9FE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 10:00:33 +0000
Manifest this update: Sun 07 Sep 2025 10:00:33 +0000
Manifest next update: Mon 08 Sep 2025 10:00:33 +0000
Files and hashes: 1: _2doQ1vYHTIqUcZiBRA9Rc775fA.crl (hash: c43MTbSgOdgFT52hVebX2Ozzrxt0AsUYA+/IFmuKR6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ca:d4:78:a3:80:9c:f8:f2:85:c1:0b:d9:fe:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Validity
Not Before: Sep 7 10:00:33 2025 GMT
Not After : Sep 8 10:00:33 2025 GMT
Subject: CN=fd787ac5d054731a6704d8cb64de271ec36ab871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:58:25:a9:8d:c5:59:1c:0d:de:14:e9:2b:
fa:5d:b7:00:f1:e3:1e:a6:9e:35:3a:e4:f2:7d:32:
1c:40:4c:d4:ad:58:95:bd:93:e4:1e:91:51:3a:7f:
d8:43:61:fc:47:50:2d:a1:36:41:b7:66:16:ea:c7:
b1:ec:99:a9:57:67:e6:1d:b9:a7:99:f3:c3:5c:b5:
ba:8b:99:08:a5:dc:bd:0f:7d:f1:d0:24:20:03:26:
f3:3e:ea:5a:a6:5e:4d:fa:a0:d7:65:33:b7:04:37:
28:78:15:0a:80:90:69:fa:8f:65:6b:6f:69:5d:d8:
7e:7e:a8:10:46:58:b6:f5:93:11:81:ad:f4:5e:af:
30:d1:bd:23:f2:46:c1:70:98:fe:a6:f9:04:de:7f:
30:2d:8d:90:d9:fa:64:61:04:8e:d6:fa:e9:70:8c:
64:19:55:eb:17:61:7f:d7:da:21:22:8a:42:06:7b:
1b:23:43:5e:df:eb:8b:7b:ee:3b:52:df:ae:40:16:
2f:9a:77:fc:56:12:d8:7f:7d:10:18:5e:5e:85:53:
3d:27:61:88:26:85:25:8c:31:de:96:13:6f:41:b3:
52:1b:83:5a:21:7d:a6:a3:30:47:bd:9d:d2:3f:55:
b9:5f:a3:16:ac:0f:f7:bf:76:b7:2a:7f:d0:30:6b:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:7A:C5:D0:54:73:1A:67:04:D8:CB:64:DE:27:1E:C3:6A:B8:71
X509v3 Authority Key Identifier:
keyid:FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:49:4a:35:dd:d2:52:d2:a0:bb:81:f0:d4:51:18:98:42:4b:
c1:00:18:08:8d:69:e4:03:20:3a:7b:48:fd:8f:b8:96:be:5e:
93:97:5d:fb:36:ff:6a:09:79:ef:07:fd:59:24:fb:3c:53:bc:
88:44:5c:81:5f:aa:d5:e7:2a:97:c0:10:28:f4:9f:15:5a:9f:
c3:49:b1:db:91:ca:ff:d8:1f:c9:b5:0d:3a:35:2a:63:e2:14:
0b:96:a9:f2:2e:e8:33:47:06:7c:af:a0:44:0a:15:65:f8:c4:
e5:c7:e2:5b:33:f9:ed:f7:f6:1d:07:d7:59:4d:2e:05:42:3d:
8d:53:09:43:c1:58:9e:3c:40:14:47:43:bb:83:83:b3:e6:78:
95:8f:83:3f:99:3e:04:13:68:54:25:41:6b:aa:fa:a4:0b:8c:
85:b4:4d:43:64:db:85:0e:a7:6a:2a:97:0d:3f:f7:e4:1c:bb:
0a:28:b1:08:a0:72:e3:30:e3:68:6b:9f:96:df:a5:50:88:79:
a6:b1:7e:75:d4:a4:b7:5f:ee:ca:31:93:e7:be:e9:c8:96:e0:
06:5d:97:ff:79:3a:e2:6e:62:f0:75:7b:13:f5:51:25:08:d8:
30:26:b2:0f:13:11:2c:7d:d7:56:9a:68:4b:be:e2:8f:e8:15:
2f:c4:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:17 2025 by rpki-client