Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: jKcg+WA/5fYaQ9nBHnl3k4gVJv0Gyn9c662PcGcvQS0=
Subject key identifier: 73:E7:C6:1B:90:C5:32:69:45:89:AF:F6:97:AE:47:6C:1C:24:B1:C3
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 019A72CAACB52485714E19F07908A69F6F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: s1M64N8H67phYKjMVUtfLByTGJaTy9t3L0+24wi+u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ac:b5:24:85:71:4e:19:f0:79:08:a6:9f:6f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=73e7c61b90c532694589aff697ae476c1c24b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:81:44:68:65:97:d4:8c:61:54:9f:bb:a4:
7a:9b:12:65:78:63:6b:b6:58:76:47:12:ef:57:a2:
ff:a2:8c:f1:c0:2c:ed:79:9e:9a:70:3a:92:1a:4c:
ac:cb:c2:7a:7f:15:0c:2b:b1:6f:2b:39:fb:b9:2f:
3e:64:90:2d:04:6b:b7:9f:60:f3:c8:c5:06:82:9b:
1e:33:71:bf:a4:aa:bc:3f:65:58:63:ee:8d:91:71:
9f:6b:a1:f4:67:bb:1f:23:3f:e6:8f:28:ad:07:74:
2d:3e:3e:d8:26:d2:3c:7c:d2:29:f2:ba:6d:e7:cb:
d9:f0:dc:c5:58:ad:71:7f:93:64:0f:a2:63:cb:7f:
fe:ac:5f:fb:e2:90:31:a9:22:03:17:bc:b2:55:db:
3a:d7:37:52:77:9b:aa:de:c2:a2:28:a0:12:88:c3:
3b:8f:26:f7:4d:bd:81:46:6c:57:d6:fe:3f:a0:d0:
0a:79:ae:36:d9:71:5e:db:33:6f:5b:6b:0d:bf:dd:
63:08:ba:25:9b:80:38:47:22:9d:4f:e1:7f:7b:d8:
48:df:ba:e8:8d:5f:c0:f3:5e:18:8e:fc:5c:4b:fe:
24:dc:92:e9:77:ea:65:df:22:dc:76:20:e6:42:80:
e5:32:ae:74:3b:48:b2:1f:4c:bc:b2:88:ff:ba:eb:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:C6:1B:90:C5:32:69:45:89:AF:F6:97:AE:47:6C:1C:24:B1:C3
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:c4:56:f7:37:84:54:6f:bb:d4:8e:9a:b0:ca:08:42:c2:
24:b4:e3:0e:44:0e:05:6b:1c:30:ed:ae:b1:45:a8:cb:bb:90:
54:50:82:5e:de:87:3d:70:59:d1:60:00:af:9c:7e:f0:0b:ab:
fa:f5:6b:76:68:ba:88:b3:57:f2:8a:27:e1:5a:74:90:83:e0:
a6:72:7c:25:ea:77:4a:df:9b:fd:41:5b:b6:b0:b4:93:a2:cd:
26:1b:54:bc:61:c0:28:7d:04:f9:a6:6a:9a:90:f2:3b:bc:b2:
f0:ba:cf:65:da:12:7f:45:6c:da:6a:29:fb:2a:a8:91:14:a4:
8c:ad:b1:56:3f:bf:61:03:99:de:73:81:7e:da:0c:90:55:da:
1a:12:80:a5:35:a1:af:17:75:96:f1:6e:d5:d3:96:eb:8a:5e:
ee:3e:c0:61:71:77:3c:21:c4:42:dc:b9:16:a9:38:0b:0d:a2:
22:82:e8:28:87:2e:6b:eb:8e:5a:dd:b1:b3:c1:4e:1d:43:20:
98:ad:48:cd:b3:b2:8a:62:8a:5b:a6:8c:87:0a:2a:62:be:13:
08:08:4b:32:23:d2:5d:10:a9:4c:5e:0c:a1:83:78:f8:23:b4:
57:41:a1:66:a7:9b:1c:48:8f:67:5d:03:f5:aa:2f:18:27:fc:
37:9a:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:39 2025 by rpki-client