Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: H3VLVWVeVMGpV2bfM/ZGeukXm01dUw9HdrBmXHTxv3E=
Subject key identifier: 1C:3F:B1:00:92:DA:A0:5B:8D:35:EB:99:AB:D1:A2:EC:D9:57:53:BE
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 0198D6CD7C04E915E3C08CD9A625A45D502E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0340
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: HxopJZobDtzMeGRaP38HUjLn72s8ARQpWOZLejWlZNg=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7c:04:e9:15:e3:c0:8c:d9:a6:25:a4:5d:50:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=1c3fb10092daa05b8d35eb99abd1a2ecd95753be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:7d:4f:58:23:39:ae:95:4e:89:36:7c:f5:
aa:a2:54:84:54:80:9b:74:ea:98:56:56:e2:fd:ed:
1c:b0:ac:22:0e:41:c3:98:fa:24:28:03:8a:48:2a:
90:87:a0:96:c3:9c:f5:46:a9:b0:96:27:97:0b:eb:
d9:32:dd:b2:83:c1:ee:ca:40:35:a3:0a:c7:9f:da:
6b:a6:f0:50:6f:b8:f7:68:7a:d6:20:af:aa:c6:5f:
3e:f3:5f:da:f8:43:95:43:de:ed:dd:36:17:da:5b:
b6:64:89:33:d7:23:e7:e8:d1:61:5a:6b:4e:c1:17:
07:1e:b0:b8:bf:fa:1c:66:6c:60:96:08:3f:fc:9e:
a5:1b:1c:f3:43:2f:95:f6:60:42:ab:74:84:81:e6:
8a:22:7e:ed:b9:c0:c6:ed:a2:46:b4:81:98:51:ef:
8c:f6:dd:11:da:e8:a5:eb:bb:48:c1:b9:91:a2:02:
cc:12:06:d8:0b:0b:ca:43:f7:c9:7d:9f:e5:cb:07:
a2:6c:be:49:96:91:5d:e0:2d:8d:d5:4a:2c:9d:ad:
26:16:f9:90:8f:a9:ae:02:aa:f0:58:fd:09:35:53:
07:8e:7c:54:7d:f7:da:96:25:4e:77:fa:9b:5b:37:
61:79:47:17:0d:8d:34:a4:6d:d1:20:fd:78:3d:74:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:B1:00:92:DA:A0:5B:8D:35:EB:99:AB:D1:A2:EC:D9:57:53:BE
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cb:41:73:48:ed:79:a7:c2:d0:29:03:c1:f3:48:ee:fb:13:
84:84:7d:af:5d:d4:c6:b2:6d:4b:2b:80:a2:95:14:92:a6:ac:
aa:99:7b:94:a0:f0:d2:56:d8:e3:19:46:7c:5c:26:7a:66:78:
52:2a:04:85:42:b8:61:f2:ce:39:35:8b:02:9a:0e:42:f2:d1:
0c:66:b0:e0:b0:64:e3:8f:55:28:c0:f4:89:04:5a:4f:89:80:
41:6e:64:fb:c0:74:20:d9:82:85:67:d9:3d:6e:2b:78:b0:d4:
e0:11:e2:4f:c2:1f:ea:ce:91:de:d2:de:4a:ce:a3:57:b9:da:
96:8a:7e:42:5e:72:f9:f2:45:e4:dd:4d:ff:49:fa:fe:df:f7:
cc:ac:ed:2a:ee:24:0c:e9:5a:ec:52:eb:bd:18:58:1c:c6:20:
56:b0:f1:07:88:31:65:61:4d:83:bf:3d:ed:72:0b:5c:7d:fb:
53:e8:b5:d6:3c:64:5e:d2:35:78:aa:34:db:ed:4e:e0:ff:b5:
b7:70:93:b3:ab:51:f5:cb:a5:54:cc:c4:b2:85:03:43:0d:c5:
13:0d:5f:d2:34:83:58:e2:6e:d0:d8:36:66:bd:e1:cd:78:d3:
8b:14:09:b9:04:5b:0d:ac:6c:46:69:0e:e9:14:69:a0:17:9a:
48:f3:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:19 2025 by rpki-client