Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: YwVqYxOGrK8oemZZ4SqV5tCvcTKlCZ21ZNgfcGWJU14=
Subject key identifier: 3D:FB:C7:45:1E:EA:3E:CB:9E:6A:5E:4C:CC:1A:85:24:14:3B:F9:9A
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 019747B1054E48C95DBE6E590E5BE5B67901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:12 +0000
Manifest this update: Sat 07 Jun 2025 00:01:12 +0000
Manifest next update: Sun 08 Jun 2025 00:01:12 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: UPTVZGtGA9H2sm2m8qGJ5GLyFmOltcUeAKLr1GgfqCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:05:4e:48:c9:5d:be:6e:59:0e:5b:e5:b6:79:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Jun 7 00:01:12 2025 GMT
Not After : Jun 8 00:01:12 2025 GMT
Subject: CN=3dfbc7451eea3ecb9e6a5e4ccc1a8524143bf99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:0c:e1:36:71:f7:31:c5:c0:d5:73:a5:09:
a2:83:83:7a:8a:08:9e:51:4b:72:cf:5a:1b:66:6b:
a7:2a:67:ca:7e:03:5d:d4:45:17:7c:a5:8d:f6:e9:
ee:c3:bd:47:c6:3d:04:ff:51:ee:bb:9c:a9:35:41:
5c:f1:ed:63:1c:1c:0a:c2:0c:d7:52:9f:45:fd:f1:
66:77:0a:0a:51:1e:92:e1:09:d7:b2:92:07:6c:f7:
b0:52:dd:dc:8e:f6:96:1f:42:12:51:14:b7:87:49:
01:e5:7a:04:f8:1c:af:4b:1b:2a:a6:6b:9e:c9:1f:
26:61:ee:3d:49:3a:3a:8c:cc:1d:e3:ba:dc:ea:fb:
83:5f:f7:2a:e4:a6:c1:4b:fd:f0:9d:31:1f:c7:f8:
a7:d7:de:9e:5f:49:b3:ac:84:36:2e:75:c8:86:9b:
ab:32:ba:48:3c:56:6a:63:41:99:1d:11:5e:38:8b:
5d:1f:94:1e:17:7d:ea:d4:4e:54:31:f8:a7:d4:8b:
50:35:36:88:9d:a7:10:70:f4:f4:2f:d0:bf:68:1f:
7f:57:22:66:95:da:3e:73:4c:a0:15:05:a6:34:c6:
c6:4b:50:cb:89:ab:eb:8d:36:6b:1c:09:cf:2e:ec:
bc:e2:a8:4b:e6:d4:71:b9:0d:01:0d:94:39:01:e5:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FB:C7:45:1E:EA:3E:CB:9E:6A:5E:4C:CC:1A:85:24:14:3B:F9:9A
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:74:74:38:14:cc:7d:ee:5f:e3:14:99:65:3d:06:9d:95:
d3:d6:1c:ba:ee:a7:47:74:8b:ab:9f:5a:0d:40:52:47:5e:d6:
3f:67:ca:6c:92:e2:0d:26:a5:4f:ac:c1:6f:e1:09:64:42:32:
49:13:e1:f4:46:b7:3b:72:bc:30:58:96:cb:93:40:4a:e8:67:
ca:46:60:22:99:cc:14:5e:61:e8:c6:d4:e0:4d:3d:22:64:06:
be:4e:b4:4f:9b:cf:e7:51:b8:c0:a2:5d:6e:30:fa:a0:85:eb:
44:92:8d:2c:9f:ed:5a:34:86:73:ed:1e:1e:dd:b3:fa:14:23:
75:40:db:06:5f:6f:8c:bf:a9:2a:67:aa:6b:c2:f7:7b:47:58:
b5:9e:33:98:02:15:cd:d6:2b:44:c2:f5:50:37:60:ca:6b:fe:
ee:0d:0f:9d:dc:f7:96:db:58:6f:e7:70:93:01:21:bd:07:10:
cf:ff:33:e3:ae:f4:02:2e:d0:80:a1:90:52:bf:23:3d:c8:70:
56:45:5f:7f:2f:30:34:7f:5e:94:ef:fb:2a:20:e5:9a:7a:fd:
7e:39:b4:be:33:07:8a:ca:89:4d:43:5d:d9:9b:c1:fa:e2:4c:
13:19:e9:b1:62:e2:b5:9b:0b:85:ae:70:a4:45:88:b4:94:a2:
aa:b3:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:02 2025 by rpki-client