Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier: MKhYIPrVevtYFnbrpsxxJkpjWHH6wCI3opnIG138ndk=
Subject key identifier: 11:7E:4E:1F:DB:8B:E7:22:E4:E5:1F:1B:5D:86:C4:20:8F:E3:D2:75
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 0197B7B3628941F8A21C576B691730FD92CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=)
2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: 5Am+JelywWI9A+JhssOYo8XcxDqnS/hOin/Xp+wkvfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:62:89:41:f8:a2:1c:57:6b:69:17:30:fd:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=117e4e1fdb8be722e4e51f1b5d86c4208fe3d275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:c1:66:3f:e2:ac:c6:a6:df:58:35:3a:2c:
ac:1f:29:1f:34:28:2b:68:6e:e1:c9:34:77:a6:af:
19:27:ad:ae:cf:ee:b8:b3:eb:c3:8b:fe:5b:ff:01:
3e:e4:c1:a1:fe:7e:b0:02:73:c1:36:bd:c9:c1:c5:
1f:4d:49:16:1e:ee:74:69:1b:4a:5a:7a:9e:6f:81:
b1:78:b2:5f:e9:c7:d8:ad:dc:22:9c:75:bb:dc:be:
ff:6c:ba:fd:9c:5f:fb:95:4d:d5:76:52:c8:f1:43:
67:62:e4:47:16:9b:bd:ed:96:9a:5c:8c:45:93:21:
63:01:ab:6c:5c:96:6b:5f:2a:93:85:dc:f6:83:31:
17:1f:8a:73:84:65:10:8f:23:a2:94:99:2b:8e:6d:
33:93:ae:ed:82:d3:d8:1d:14:c4:3a:b5:ed:bc:69:
56:90:33:53:4c:18:60:2c:19:7d:06:ce:46:51:dd:
30:a8:ce:e8:f9:d2:30:fe:79:25:2e:6f:8a:02:69:
ae:f9:50:4f:20:89:96:bd:2a:be:bc:2b:84:60:f8:
5e:21:24:d4:56:87:04:0e:a6:96:be:48:71:8f:68:
99:1a:15:cb:b6:7c:f1:19:b4:31:9b:f1:56:a1:64:
96:1b:1a:f1:67:ed:70:25:4e:04:93:85:7d:a0:49:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7E:4E:1F:DB:8B:E7:22:E4:E5:1F:1B:5D:86:C4:20:8F:E3:D2:75
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fa:9e:a8:7e:a7:b3:95:a9:5d:a2:e6:5e:96:0e:32:68:3d:
a4:d6:1f:e8:ab:67:08:1d:92:a1:c6:66:5e:90:bb:82:7d:d4:
8f:75:79:87:1d:c7:f0:88:73:6e:38:d7:f9:8e:83:09:61:3b:
bb:0c:e8:8f:6e:21:ad:db:1b:57:8f:7d:32:e9:80:6d:b5:26:
af:06:5b:fe:79:8b:7e:90:07:ba:c9:42:6f:96:2c:87:a3:53:
7a:dc:e5:10:3e:09:54:2a:91:e6:e1:8e:0e:a8:be:7c:20:84:
05:ad:74:a3:a2:27:a6:32:29:38:df:b4:54:ec:92:aa:ed:1c:
f3:2a:8d:85:28:bd:77:a8:1f:15:04:7d:20:2a:9b:47:91:dc:
a9:a1:3b:80:eb:39:31:b9:dd:3c:0b:5d:a0:b7:64:16:d1:d6:
87:f0:1c:23:4f:66:7e:dd:58:65:47:b1:65:90:c7:b1:24:8b:
65:77:df:27:9f:43:29:cc:33:80:c5:f4:af:4a:77:f7:ad:a0:
f8:ec:c4:60:f1:04:9d:8b:b9:1f:01:58:c7:54:69:c4:3d:a6:
b5:2f:79:3a:2a:f2:44:46:e3:f0:3d:d0:5b:17:11:27:e9:e3:
0d:47:22:d6:f5:5e:f4:a3:81:f3:ec:c4:72:2a:f3:4e:14:c7:
e4:b4:b9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s2KJQfiiHFdraRcw/ZLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2
YTM4NmUwHhcNMjUwNjI4MTgwMTE2WhcNMjUwNjI5MTgwMTE2WjAzMTEwLwYDVQQD
EygxMTdlNGUxZmRiOGJlNzIyZTRlNTFmMWI1ZDg2YzQyMDhmZTNkMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JDBZj/irMam31g1OiysHykfNCgr
aG7hyTR3pq8ZJ62uz+64s+vDi/5b/wE+5MGh/n6wAnPBNr3JwcUfTUkWHu50aRtK
Wnqeb4GxeLJf6cfYrdwinHW73L7/bLr9nF/7lU3VdlLI8UNnYuRHFpu97ZaaXIxF
kyFjAatsXJZrXyqThdz2gzEXH4pzhGUQjyOilJkrjm0zk67tgtPYHRTEOrXtvGlW
kDNTTBhgLBl9Bs5GUd0wqM7o+dIw/nklLm+KAmmu+VBPIImWvSq+vCuEYPheISTU
VocEDqaWvkhxj2iZGhXLtnzxGbQxm/FWoWSWGxrxZ+1wJU4Ek4V9oElvNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF+Th/bi+ci5OUfG12GxCCP49J1MB8GA1UdIwQY
MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt
YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw
LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvqeqH6n
s5WpXaLmXpYOMmg9pNYf6KtnCB2SocZmXpC7gn3Uj3V5hx3H8IhzbjjX+Y6DCWE7
uwzoj24hrdsbV499MumAbbUmrwZb/nmLfpAHuslCb5Ysh6NTetzlED4JVCqR5uGO
Dqi+fCCEBa10o6InpjIpON+0VOySqu0c8yqNhSi9d6gfFQR9ICqbR5HcqaE7gOs5
MbndPAtdoLdkFtHWh/AcI09mft1YZUexZZDHsSSLZXffJ59DKcwzgMX0r0p3962g
+OzEYPEEnYu5HwFYx1RpxD2mtS95OiryREbj8D3QWxcRJ+njDUci1vVe9KOB8+zE
cirzThTH5LS54g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:34 2025 by rpki-client