Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: rs2mK6zxcNnV/v0nzPKQj72RQDw3Ck49gpv7dAAlrgM=
Subject key identifier: E7:3E:A3:6B:E6:CA:26:DE:BE:2F:F2:43:08:8C:23:B8:DD:C5:18:CD
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 01984DAFDBFA50CC80243E11ABBD3979647A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 21:00:27 +0000
Manifest this update: Sun 27 Jul 2025 21:00:27 +0000
Manifest next update: Mon 28 Jul 2025 21:00:27 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: pygSeGglBDq5qj0kW0FbbaUcMR7pHZggbeDXozfq2KQ=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:db:fa:50:cc:80:24:3e:11:ab:bd:39:79:64:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jul 27 21:00:27 2025 GMT
Not After : Jul 28 21:00:27 2025 GMT
Subject: CN=e73ea36be6ca26debe2ff243088c23b8ddc518cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:9b:ff:7e:35:6a:b6:06:42:3c:cb:88:75:
51:cb:b0:5d:b8:fe:bd:4d:ea:8a:45:d0:b2:f7:fa:
e4:a0:76:43:a4:da:32:00:48:7c:d9:c0:35:75:03:
0d:05:bf:15:d5:c5:72:e0:9a:d3:0a:b2:48:ee:00:
b4:e8:a6:10:d0:d9:ba:cb:29:bc:a8:50:6d:1f:7e:
44:43:07:0f:76:e8:b7:57:fc:65:24:a5:7f:40:e2:
92:64:a9:c6:69:6a:8e:0a:81:3e:89:0d:31:12:8c:
ad:ca:39:fb:0b:76:41:e5:67:04:4b:51:3e:88:d5:
c7:87:d2:c4:57:78:5d:10:89:7e:45:45:f0:68:3d:
4a:a8:9b:79:65:93:b6:fa:dd:45:14:5e:d5:e6:e9:
85:1a:0c:46:38:7e:e6:a0:2d:07:70:47:97:2e:5f:
90:56:82:c2:18:73:2b:c3:d5:3c:36:86:80:88:10:
5d:f3:9b:d2:8e:b3:26:01:e8:4b:b1:8e:d9:b7:2f:
99:a2:c5:ad:58:ed:4f:29:c4:da:1e:9c:56:a4:50:
25:d7:85:f8:98:b2:cf:ae:1d:26:49:25:1b:71:6d:
fa:86:85:b3:61:be:ef:3e:29:b3:b7:20:31:40:0d:
15:75:46:c0:f3:bb:15:a8:ab:d7:40:58:7a:93:24:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:A3:6B:E6:CA:26:DE:BE:2F:F2:43:08:8C:23:B8:DD:C5:18:CD
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:35:92:65:b6:f0:4b:3f:e6:12:91:8e:7e:f9:e3:45:b7:ea:
a7:46:32:17:c5:22:c8:62:98:91:a0:29:85:92:3b:13:0d:e1:
e2:ad:b6:b5:cb:e3:76:a2:41:64:c3:b9:d2:dc:d1:59:4c:ae:
bd:af:01:87:3d:b0:c2:e0:d7:c8:50:94:e8:7d:92:91:c3:47:
6d:4b:c9:40:3e:55:0d:6b:54:7f:de:16:d2:00:9e:38:e3:39:
77:04:5f:e1:a8:32:5a:f1:fc:06:33:37:ec:eb:67:02:e2:b8:
86:ee:e2:72:97:7a:09:e5:3e:76:2d:df:66:1c:2c:72:eb:30:
7f:9c:85:96:3d:87:e0:f5:75:5f:d5:29:88:1c:12:08:11:fa:
f5:15:e1:ad:2b:9e:6e:ea:a4:64:18:97:48:60:2a:5f:a6:44:
84:25:75:31:35:31:df:06:60:1b:5d:ba:bf:30:d0:c1:7f:04:
6f:db:0a:23:e8:e2:c2:e3:9f:5c:1f:c5:19:bc:83:d2:73:48:
bc:f4:f1:1c:dc:ba:8f:89:b2:17:24:86:8c:3e:69:25:b6:2f:
ef:d6:f9:f2:fe:ca:2f:a1:53:e7:47:aa:c1:00:21:51:3b:da:
84:d3:a1:53:0f:32:0f:4c:93:cc:b1:53:fb:2f:87:0a:15:09:
2f:d7:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:49:40 2025 by rpki-client