
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: ZWGKxLVYtSaILOxI0ZFz8RwzKnv/8X3cFS6WH1ypcO8=
Subject key identifier: 5F:9B:DC:FF:A4:FE:4F:11:17:C2:26:9A:F1:70:DE:6A:F9:31:05:A4
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 0199FB0F3DFC5BFD327234E1D88E9E74D104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:44 +0000
Manifest this update: Sun 19 Oct 2025 06:01:44 +0000
Manifest next update: Mon 20 Oct 2025 06:01:44 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: 7kXXqZ+TAR55NlBrPbJT9ulWfl5qZlQmqVMlz42a9Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:3d:fc:5b:fd:32:72:34:e1:d8:8e:9e:74:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Oct 19 06:01:44 2025 GMT
Not After : Oct 20 06:01:44 2025 GMT
Subject: CN=5f9bdcffa4fe4f1117c2269af170de6af93105a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:61:4a:71:a3:6a:50:0b:d8:1b:0e:97:11:
db:b6:91:9c:1a:53:d9:65:05:f1:29:b2:53:43:71:
37:3c:f0:b8:f0:7a:20:be:3c:07:73:37:9c:c2:48:
ad:7a:94:ae:7d:24:69:b0:4a:d6:9b:df:16:94:7a:
a7:d2:60:bf:f3:b6:6f:fe:68:af:2b:c6:d8:84:7d:
4e:3f:1f:a2:88:36:21:b9:d2:71:b3:f9:14:c6:e1:
25:cb:3a:f2:10:14:8f:dc:ac:41:5a:6e:43:3f:00:
e0:4a:9b:07:48:0a:34:44:d1:d6:0a:6e:6e:79:c0:
56:46:63:88:8c:5e:cb:49:99:74:a3:72:7c:ec:15:
04:2c:73:40:fb:38:ae:75:b4:0b:57:ea:20:2d:7e:
59:30:1a:01:60:89:7b:ce:c7:9b:50:1c:60:2c:74:
d1:d1:99:e3:37:12:e3:a2:f4:b3:f8:f1:76:da:90:
42:a5:92:9e:38:c8:0d:fe:99:68:15:7e:7b:1f:ca:
0e:04:2b:b8:74:14:ec:65:08:39:20:a1:6b:90:13:
b5:09:ca:59:59:ba:9d:14:55:5e:71:56:cd:38:88:
9e:a7:15:ba:30:7d:14:f0:48:ff:78:b7:83:74:0d:
29:a3:96:36:17:92:f2:87:c4:90:65:71:f9:66:62:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:DC:FF:A4:FE:4F:11:17:C2:26:9A:F1:70:DE:6A:F9:31:05:A4
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:a8:00:6f:d7:ef:69:89:08:5c:59:a6:6d:14:25:14:99:
7e:ba:70:bc:3b:58:2f:9d:f8:07:11:34:99:56:ac:b8:d5:04:
9c:42:e9:ed:cf:b7:ed:30:42:c4:22:b0:4c:e3:55:84:aa:3d:
d5:a0:e8:77:d9:f9:44:1e:0a:a2:ad:97:5c:f1:76:de:42:3a:
82:12:79:7e:5d:5a:b6:4a:3c:74:bb:e1:85:99:9b:90:ba:76:
0e:4c:e6:36:21:69:0e:4e:e5:f6:83:5d:33:d1:83:30:c9:6e:
de:51:27:eb:f7:4a:03:05:a7:d3:a8:0d:be:02:b4:ae:00:6a:
27:a7:3c:57:0c:3c:a2:6f:8f:30:2b:2f:3e:ce:b0:c6:85:b1:
09:ce:c8:c2:25:2f:5f:ad:28:f8:fe:ed:76:a1:04:a7:aa:83:
fa:83:10:39:17:ad:95:9b:6c:90:c5:d2:37:b6:9f:04:d1:69:
65:77:33:63:42:70:29:1f:3c:c0:4d:0d:77:da:d4:1e:49:07:
01:2c:5e:bb:fd:fd:67:98:51:a6:51:b4:d8:2e:62:30:24:08:
de:d7:35:17:81:6c:f2:92:ce:f5:0c:28:33:15:9b:91:d0:36:
3b:3f:1e:af:5b:cb:10:f3:35:e6:28:aa:d1:1c:38:9e:67:85:
aa:e6:c0:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dz38W/0ycjTh2I6edNEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2
YTM4NmUwHhcNMjUxMDE5MDYwMTQ0WhcNMjUxMDIwMDYwMTQ0WjAzMTEwLwYDVQQD
Eyg1ZjliZGNmZmE0ZmU0ZjExMTdjMjI2OWFmMTcwZGU2YWY5MzEwNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlhSnGjalAL2BsOlxHbtpGcGlPZ
ZQXxKbJTQ3E3PPC48HogvjwHczecwkitepSufSRpsErWm98WlHqn0mC/87Zv/miv
K8bYhH1OPx+iiDYhudJxs/kUxuElyzryEBSP3KxBWm5DPwDgSpsHSAo0RNHWCm5u
ecBWRmOIjF7LSZl0o3J87BUELHNA+ziudbQLV+ogLX5ZMBoBYIl7zsebUBxgLHTR
0ZnjNxLjovSz+PF22pBCpZKeOMgN/ploFX57H8oOBCu4dBTsZQg5IKFrkBO1CcpZ
WbqdFFVecVbNOIiepxW6MH0U8Ej/eLeDdA0po5Y2F5Lyh8SQZXH5ZmJErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+b3P+k/k8RF8ImmvFw3mr5MQWkMB8GA1UdIwQY
MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt
YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw
LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFCoAG/X
72mJCFxZpm0UJRSZfrpwvDtYL534BxE0mVasuNUEnELp7c+37TBCxCKwTONVhKo9
1aDod9n5RB4Koq2XXPF23kI6ghJ5fl1atko8dLvhhZmbkLp2DkzmNiFpDk7l9oNd
M9GDMMlu3lEn6/dKAwWn06gNvgK0rgBqJ6c8Vww8om+PMCsvPs6wxoWxCc7IwiUv
X60o+P7tdqEEp6qD+oMQORetlZtskMXSN7afBNFpZXczY0JwKR88wE0Nd9rUHkkH
ASxeu/39Z5hRplG02C5iMCQI3tc1F4Fs8pLO9QwoMxWbkdA2Oz8er1vLEPM15iiq
0Rw4nmeFqubAUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:40 2025 by rpki-client