Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: NslPWfeKqUOYGZ4+iEZUgA81t5KOZ2T/ZrF3f73a10A=
Subject key identifier: 7B:2B:A5:FF:8A:34:D9:A4:AE:70:CE:AF:F1:8B:41:64:4D:FC:76:84
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 01984AAE84292FCFA6072461F391EABDA3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:07 +0000
Manifest this update: Sun 27 Jul 2025 07:00:07 +0000
Manifest next update: Mon 28 Jul 2025 07:00:07 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: ui9Fk/9W6UqKI21gyyRQm6Sr48Bi+x7bmarzdDcjSFI=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:84:29:2f:cf:a6:07:24:61:f3:91:ea:bd:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Jul 27 07:00:07 2025 GMT
Not After : Jul 28 07:00:07 2025 GMT
Subject: CN=7b2ba5ff8a34d9a4ae70ceaff18b41644dfc7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:ec:03:6d:ed:0f:10:bc:f7:a8:a3:1f:ae:
3a:cf:d3:b7:d6:30:6b:fd:4e:09:6d:bb:75:dd:99:
56:b2:ae:fe:6b:4a:24:1e:a6:a4:f9:fa:ca:7e:30:
c3:45:db:b8:37:98:0c:54:eb:5f:41:a0:98:78:fe:
27:59:03:8f:e2:16:80:3e:21:6d:ec:fa:61:7f:e2:
6f:79:6d:fe:cb:18:1a:56:f6:7e:70:3b:d5:75:16:
10:74:5b:d8:24:a0:e2:dd:9c:af:16:df:03:55:db:
a5:5b:30:a7:e1:d8:61:9e:22:57:9a:ba:b1:45:99:
39:b7:a0:d3:71:d8:28:51:06:df:75:10:c6:96:bd:
1b:85:67:d0:25:92:13:28:cb:62:2a:43:77:40:98:
9d:26:e5:54:5c:29:40:a6:5f:01:ea:c7:29:19:4c:
24:4b:d8:85:98:d3:d4:14:e9:04:63:7a:07:ef:79:
67:22:8a:65:a2:35:16:23:ac:d8:af:44:e1:d3:0d:
65:47:c0:a7:cd:10:ae:67:52:1f:59:b5:8b:41:bc:
72:03:74:a1:b0:6d:e3:74:14:13:11:91:e7:6e:90:
4f:58:52:6f:60:ab:98:6c:f2:0d:3a:ab:96:51:36:
40:3c:2a:44:e5:f9:c8:30:c6:7d:16:92:6a:37:83:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:A5:FF:8A:34:D9:A4:AE:70:CE:AF:F1:8B:41:64:4D:FC:76:84
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:2d:e3:c7:63:c3:d3:58:46:60:07:51:ec:68:ad:33:fb:
ff:30:ac:a0:6e:54:5d:d5:b3:47:74:ea:a6:ee:34:03:c8:d6:
62:a9:a5:7c:53:24:ba:e7:f3:37:d4:b3:f7:16:88:06:63:4b:
32:7f:63:e4:a7:59:b3:a1:e3:02:7c:a9:ce:0b:c1:5e:6a:2e:
b2:e4:8f:f4:c6:b8:2f:44:1f:bd:df:a9:b1:67:6d:10:09:6a:
32:f1:d7:91:d6:3a:fa:1a:de:de:e4:36:05:05:13:4d:aa:44:
59:f7:b5:85:23:c9:a8:74:e6:2b:88:04:0d:25:ec:2a:06:78:
6f:2c:1e:b9:8f:09:08:63:16:db:bb:f3:cf:89:1a:7c:da:40:
26:88:36:fb:86:38:8b:3b:01:c2:98:4f:45:c1:ce:08:50:07:
c2:88:a1:e9:69:b1:af:b9:c4:65:2b:1f:44:c9:f7:6e:17:a7:
c9:6b:50:6e:0e:29:24:fb:ba:b3:74:7a:d4:d7:01:a5:b0:d0:
15:1f:f2:03:08:6c:c6:76:77:e0:66:be:46:f8:1d:87:3d:06:
4a:d5:6a:f3:34:a0:2b:3b:76:0e:80:14:2b:42:97:c9:e7:87:
3f:47:c7:0a:49:9e:ec:8c:a1:dc:f0:e5:b1:81:bb:b5:15:1e:
57:ad:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:34 2025 by rpki-client