Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: Qyq4ai+2cZv9R4g1+Sk038UmLa1O5FuapmMHvO3Smlw=
Subject key identifier: 86:6C:1B:9B:F9:67:18:D2:8D:40:EE:71:E9:D5:BD:A5:38:E5:A7:5B
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0199C6456A8CAB1756D2EC2853ABBA1FC4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 16CD
Signing time: Thu 09 Oct 2025 00:01:02 +0000
Manifest this update: Thu 09 Oct 2025 00:01:02 +0000
Manifest next update: Fri 10 Oct 2025 00:01:02 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: AdofGikX+d+CcDysiPWYw8sEyFiGJZ1SoTyq8/GBtgE=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:45:6a:8c:ab:17:56:d2:ec:28:53:ab:ba:1f:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Oct 9 00:01:02 2025 GMT
Not After : Oct 10 00:01:02 2025 GMT
Subject: CN=866c1b9bf96718d28d40ee71e9d5bda538e5a75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:70:73:51:88:d5:47:65:a9:e2:84:af:1b:
3a:63:41:2d:c5:bb:f6:57:11:25:df:fa:19:c4:38:
d2:b7:62:f3:8b:2d:f0:1a:f7:dc:43:26:ec:95:b7:
8c:e1:e0:65:4c:bd:fe:79:82:bb:42:83:ff:d0:e4:
d5:cd:4c:6a:7b:ff:73:68:19:ee:2f:16:3b:33:2d:
35:37:e4:81:b4:0e:1c:28:cf:32:2a:f2:40:d2:f4:
f9:88:10:01:a0:a4:85:df:ee:cd:88:79:b3:f1:8e:
0a:52:ce:b2:e1:8f:3a:74:b3:7a:fb:7d:5d:bd:7a:
ca:4c:a8:68:7a:d1:99:4e:89:92:56:1c:8a:03:c5:
d2:0c:db:c4:a8:0f:dd:c4:dc:a8:2b:8d:3a:fe:36:
b6:b4:5c:3b:cd:74:a7:44:e4:28:0d:86:d1:ef:45:
5d:b7:23:d0:8e:95:be:a7:36:5b:6b:b4:cd:07:fa:
8a:c1:25:ac:ad:2d:7d:26:1a:da:6a:13:1d:62:4c:
76:a0:db:c0:be:ba:d4:fb:13:41:8f:5f:60:3d:67:
f4:f7:59:ce:d2:32:07:33:53:af:9e:b3:3b:f5:03:
cd:8d:83:d3:2e:7d:27:20:26:f7:12:39:b7:bf:6d:
fb:74:a4:6e:99:59:48:f4:d0:34:af:7b:e2:ef:12:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:1B:9B:F9:67:18:D2:8D:40:EE:71:E9:D5:BD:A5:38:E5:A7:5B
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:73:0f:11:82:e2:38:a2:ec:08:02:a8:82:42:48:93:d6:6c:
29:e5:33:c1:10:61:c2:2f:a5:56:f9:19:f2:f2:d1:43:1a:fc:
6e:b9:f6:35:83:61:4d:65:5b:70:40:d7:d2:1a:c1:bc:14:79:
13:2a:f7:0a:3d:03:df:7c:ac:5e:b4:9c:90:34:c1:d3:89:5d:
eb:5b:0b:6c:f8:5d:ed:64:79:4c:45:f2:13:99:87:be:c0:91:
08:68:9c:dd:d8:c6:42:7f:90:5d:37:99:ca:f8:63:dd:14:c1:
ac:ab:32:70:8f:bf:dd:22:ca:b8:de:5c:92:83:ba:ba:95:56:
5d:b3:0e:4b:6f:2c:55:0a:3e:91:13:29:b0:7f:c0:33:95:c5:
56:27:da:74:b6:8e:df:4d:9c:b1:85:75:5a:0b:cf:67:d8:ce:
c7:13:0a:ab:8f:35:03:5d:7f:28:ad:a1:70:a1:68:00:d0:15:
64:87:3f:0b:48:f3:29:79:b5:a6:08:39:35:3f:9d:cd:8c:25:
67:c6:df:75:98:b3:fc:18:ef:94:c5:25:05:d5:4b:0d:d3:f2:
5e:f4:19:67:25:65:c3:9b:93:f8:67:9d:a7:a7:0f:c6:50:6e:
5f:37:72:1f:78:0f:e3:f8:78:b4:37:dd:54:4d:88:11:25:ec:
40:07:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:16:57 2025 by rpki-client