Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: eT9A32wRph4J6jrfKzb4e9vU3Y/nWq9rWDii1Z2B1go=
Subject key identifier: 8E:72:3C:E2:85:69:82:87:79:95:DB:AB:13:EE:EA:53:28:11:17:93
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 019848531C59163C6122C363924940ED2733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: mzFh6ARH6kz3gaonWyo00gUZsvuSXR4MaqsOyDKb12g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1c:59:16:3c:61:22:c3:63:92:49:40:ed:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=8e723ce2856982877995dbab13eeea5328111793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e2:ce:66:54:11:75:53:67:95:d7:3a:b1:c1:
76:86:e1:fe:0f:60:a9:30:90:92:5a:22:d5:9a:69:
e3:7a:cf:64:14:33:8e:f6:c9:90:83:e2:42:cc:3b:
1b:01:7b:36:3a:26:a7:2e:dc:c3:fd:5f:6f:89:6b:
d4:53:92:62:5d:cf:37:8d:8f:38:5d:b2:34:35:e1:
c2:30:a5:84:d8:b2:6c:39:b7:80:e8:24:81:5b:8f:
34:ff:8e:62:2e:4e:9f:ad:ab:a4:7c:ed:d6:a2:c8:
e0:fd:f1:79:55:95:f1:9b:fc:0b:c5:7e:4f:f1:46:
05:cd:07:f4:a6:c2:d8:52:73:a8:0a:f5:40:0d:a4:
57:e5:83:e2:9d:30:ba:4e:ac:b6:1f:a4:7e:d0:cf:
0e:e3:41:71:b4:3a:f6:22:a8:22:98:5c:3e:fa:a3:
19:47:e0:ce:ef:ce:98:b8:bf:40:33:c0:cd:35:66:
a3:6e:c3:1f:39:f4:43:ea:2a:61:83:9c:34:21:73:
f5:6d:ce:d6:28:c1:2c:26:d9:14:bd:ac:e9:56:1b:
d4:53:33:f0:1c:e6:a9:7f:e9:2c:41:b8:45:ce:ba:
e6:d3:ed:a5:01:49:30:19:4f:cc:d8:74:dc:59:9f:
a2:7d:16:f4:25:18:99:d1:30:69:13:8c:df:13:bf:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:3C:E2:85:69:82:87:79:95:DB:AB:13:EE:EA:53:28:11:17:93
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:78:25:b3:6e:2a:70:20:bc:25:c8:cd:e0:24:ad:01:58:44:
4e:4f:b6:c6:d3:c8:d0:00:b6:ee:d9:41:c4:1e:37:3f:76:a0:
bf:70:ce:96:4b:d6:07:7d:c9:9a:c5:15:97:c9:b9:0f:28:c5:
82:02:64:eb:96:40:a4:9d:5b:19:91:c1:4e:ff:55:d7:71:39:
58:ab:02:86:8e:2e:d2:b5:23:4e:95:5f:e8:57:f6:f5:8b:db:
2c:af:7d:23:90:7e:7b:fa:49:a0:02:20:5d:9e:55:38:a2:e0:
11:38:7c:30:fb:aa:32:ed:a5:3f:e8:ce:7a:1f:a5:38:fa:84:
00:df:30:fa:e3:86:06:6c:dd:6e:3a:4c:d3:2a:b1:99:7c:40:
0b:6b:53:d1:ae:fd:8b:a9:a7:8a:60:50:36:01:80:9e:cd:82:
cf:ac:e6:c4:6c:40:81:f0:50:9a:57:37:46:39:a8:cb:ce:f6:
56:e7:56:98:f5:a8:f8:d7:b9:1d:37:75:d1:9b:7f:ad:1f:2c:
75:47:c8:b8:ae:f0:e6:78:7e:38:8f:07:a8:ec:e3:2d:81:f9:
f0:b6:b6:40:87:e1:60:81:c3:51:5c:71:34:21:e7:f3:c1:17:
ed:dc:28:21:cb:7a:94:e0:4f:93:9f:ef:de:b0:6a:b8:11:e4:
d2:f3:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:47 2025 by rpki-client