Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: Ncoy057vEYWRjBV8iNmCreu53dCzdpmwTh6ZeLertkA=
Subject key identifier: 3A:E7:2F:13:91:F0:FB:FB:38:9A:D1:9C:D5:E3:E8:57:27:65:61:23
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 019A2B8CF9A78021078090495EEE7C98E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 0206
Signing time: Tue 28 Oct 2025 16:00:50 +0000
Manifest this update: Tue 28 Oct 2025 16:00:50 +0000
Manifest next update: Wed 29 Oct 2025 16:00:50 +0000
Files and hashes: 1: ZZ126kZc2Gs9amlt5Rc0VmUZOPw.roa (hash: laA9ImB0VtnpNlOC8RmvM5URSIvzaqpg8ewZvS5hOLw=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: h3wTsOpTzJuW2RrGVmKzXNAnSD4ZBvpTM+HNL3WxqOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:f9:a7:80:21:07:80:90:49:5e:ee:7c:98:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Oct 28 16:00:50 2025 GMT
Not After : Oct 29 16:00:50 2025 GMT
Subject: CN=3ae72f1391f0fbfb389ad19cd5e3e85727656123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:64:a6:7f:87:2c:80:20:8d:91:de:9c:4d:
42:52:8b:d7:9f:08:c8:8d:c5:82:ce:a5:74:65:92:
77:ae:d0:d7:96:26:7d:0f:b7:66:43:69:a9:e5:5b:
65:e3:d4:44:bc:e5:fc:f0:6c:ca:57:8c:2c:06:e1:
b2:fb:35:21:31:96:bd:3e:8f:55:66:fc:5e:41:fb:
b6:3d:94:12:22:13:50:39:72:3a:68:18:8c:cc:1e:
9e:3c:56:01:0f:e1:2b:31:26:7f:1e:f1:3c:5a:69:
8d:64:2c:cb:03:70:af:dd:7d:0c:cc:ba:4c:5e:9b:
5d:f5:da:bf:fe:9c:cb:d9:e6:b8:00:b4:7f:99:97:
41:52:fa:b6:c3:30:99:e8:de:ed:25:e4:a6:ed:6b:
10:37:c9:46:0c:09:9a:67:92:3d:87:39:d5:94:46:
32:08:c6:4b:e3:a1:b9:0c:e7:0a:f1:ea:82:53:8f:
73:00:61:e4:4e:e3:c1:c2:93:9f:91:61:62:b1:77:
5c:e3:3d:b8:b8:4d:f1:a7:e1:b7:c2:ed:d4:bb:1c:
cd:5d:66:49:73:8b:c9:d2:36:bd:92:d6:68:40:91:
00:43:16:3e:2b:53:93:04:2f:f0:f4:9f:77:71:d8:
d9:ba:66:54:a4:3d:dc:f6:3e:6e:da:3d:94:ac:85:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:2F:13:91:F0:FB:FB:38:9A:D1:9C:D5:E3:E8:57:27:65:61:23
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:7e:9a:1d:d7:34:a2:cd:a6:2b:bb:3f:65:67:60:32:44:
15:d0:da:dc:fd:68:61:f9:57:ea:65:6a:8e:b5:d0:1e:f7:08:
ad:1f:1e:64:d9:7e:49:5c:bb:54:50:eb:a7:9e:59:2a:6d:f7:
4f:14:9c:ae:4b:bb:e5:ce:f3:b6:5f:1e:87:91:a1:a3:f1:ae:
aa:e9:e2:7e:4b:09:a7:34:d1:70:8e:9c:56:d4:2f:87:d6:bc:
57:08:6b:5a:66:8d:36:34:e9:9c:90:16:09:3e:8e:d4:ff:8c:
96:a4:82:2e:cb:76:21:ce:b4:90:c6:d1:9c:47:67:f4:1f:ef:
dd:88:26:95:3c:65:04:a6:83:2c:08:7c:10:89:66:57:4c:1a:
5f:98:d2:74:9e:65:08:e3:44:1c:c2:62:e3:e3:65:e8:e5:89:
74:ff:cb:3a:c0:14:3e:85:70:56:70:16:e1:5c:ad:2b:69:41:
95:d1:d9:1f:79:4f:3c:da:3d:90:91:e9:52:eb:df:1b:bf:e9:
8e:e5:b7:6e:cb:d0:95:24:ae:c6:f6:e4:23:8e:2c:a4:0c:7e:
e5:a1:6c:7c:16:b2:5b:fb:76:8a:c1:9a:9c:69:41:d9:4b:62:
63:6d:41:1d:c5:d4:ed:f2:e9:e2:22:69:58:83:02:bb:65:71:
8c:b6:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:31:10 2025 by rpki-client