
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier: 5enbqUuw/nEl+CbJbiUQlQ6IHjSeLtuGWYc/yb4J5Vc=
Subject key identifier: 49:50:C0:FE:8C:B3:68:80:BC:5A:BD:41:38:FE:3E:18:5F:73:9B:5E
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial: 0198D7E13204C612510E5EA0889DE88730FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 17:01:56 +0000
Manifest this update: Sat 23 Aug 2025 17:01:56 +0000
Manifest next update: Sun 24 Aug 2025 17:01:56 +0000
Files and hashes: 1: AMeFJYEOsq8eDF0JklVrrKO_x-w.roa (hash: BUSoz6NuItfjL6psERkejscD0G0Lwnx4YN1Y5CF1al8=)
2: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: 8wrvhiyjVEGCakviFvh2ffDlvH2Xrq9IgB2yVVb25b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:32:04:c6:12:51:0e:5e:a0:88:9d:e8:87:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Validity
Not Before: Aug 23 17:01:56 2025 GMT
Not After : Aug 24 17:01:56 2025 GMT
Subject: CN=4950c0fe8cb36880bc5abd4138fe3e185f739b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:cf:68:ca:2f:98:e9:3f:1c:e2:c8:d9:a1:
ee:95:d1:2c:81:5c:21:70:ab:5d:7b:b3:fc:31:3e:
bc:99:25:51:0a:e9:32:e8:3f:a9:e5:b9:cc:ad:b6:
b5:8b:fd:26:de:64:57:ec:54:82:b2:cb:13:ef:9d:
0c:aa:33:92:69:f7:74:f6:11:e9:30:12:17:60:14:
31:88:ee:07:cf:a8:29:2b:1c:50:c0:c6:5b:ad:73:
87:9c:c5:7a:08:bb:fe:85:dd:89:3f:92:0b:ec:a9:
23:50:91:2a:74:34:86:c5:ac:36:d0:f3:2b:0d:48:
74:37:02:28:d1:69:f9:66:56:58:95:4f:8e:1a:de:
0d:de:e0:89:a3:16:fc:63:8a:68:bc:f9:ad:84:6d:
b7:c8:ab:3b:f2:19:5d:9b:dd:32:35:93:55:f0:46:
ad:bc:bb:d0:27:dc:29:d4:de:1f:d9:56:64:9b:d1:
d4:11:15:5b:9e:5b:2b:06:b3:b6:ec:51:0b:78:00:
bc:16:29:2d:e3:b6:88:fc:7e:48:3b:aa:30:7d:21:
77:4e:af:12:cd:0c:37:5b:dc:13:c0:dc:5b:93:53:
46:23:b0:5d:9b:cf:70:d0:da:35:49:29:c3:51:24:
a9:fc:c5:8e:c3:fb:9d:d0:bd:f7:d8:08:f9:b2:d3:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:50:C0:FE:8C:B3:68:80:BC:5A:BD:41:38:FE:3E:18:5F:73:9B:5E
X509v3 Authority Key Identifier:
keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:02:f1:fc:4d:39:cb:04:42:14:75:1e:a7:cf:9a:ce:cf:
04:da:1c:22:14:b1:91:c5:0a:48:4f:ee:fb:7c:4c:60:55:b6:
ef:7b:83:dc:0c:e2:70:05:0f:77:53:b3:5c:0c:bc:09:31:b3:
e5:53:fa:c3:2d:12:ff:3b:2f:25:00:7c:b2:84:5e:36:43:56:
ad:14:df:fa:17:24:e5:ba:de:b9:4c:7d:56:58:2e:6e:11:94:
e4:ca:15:f7:68:90:f2:2b:d1:0a:89:0c:f3:50:fc:e4:da:b5:
04:99:33:fb:3e:a1:3c:f2:d4:83:8c:3c:21:fd:7b:9f:46:89:
cc:46:10:5c:4a:58:f6:de:96:4d:1b:fb:65:da:1e:2b:c5:9f:
d1:8d:5f:a0:e9:53:22:8e:67:f9:73:01:7e:6e:4d:59:6c:d0:
c3:b9:0b:60:ef:2e:52:1e:25:a5:bb:33:e6:5d:c8:71:1e:6f:
4a:dc:0a:a6:12:23:a9:37:a1:58:44:02:21:35:de:b8:87:78:
4f:45:73:ef:b7:b6:73:be:f8:69:51:05:1a:50:58:40:d4:33:
fa:60:d6:e4:8a:6d:49:71:21:c0:21:75:9f:de:cd:5c:55:17:
02:6d:a5:e9:56:85:93:88:74:07:02:28:be:20:e9:51:06:6f:
76:0d:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:59 2025 by rpki-client