Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: H/UgFFjl1WJrdLigc/a6oreVbQxwlbK3sgBimiYA1+c=
Subject key identifier: 93:BD:8C:CB:E6:6B:2C:E5:6C:F8:D1:DE:99:5A:6E:7D:D4:44:9F:92
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 01984852E4704D618BAF22D3D32A750074E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 10B8
Signing time: Sat 26 Jul 2025 20:00:48 +0000
Manifest this update: Sat 26 Jul 2025 20:00:48 +0000
Manifest next update: Sun 27 Jul 2025 20:00:48 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: UNwEfLAT35Lufmdfdz+BcXwpqd8aMfaDNj/F5fp4Dj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e4:70:4d:61:8b:af:22:d3:d3:2a:75:00:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Jul 26 20:00:48 2025 GMT
Not After : Jul 27 20:00:48 2025 GMT
Subject: CN=93bd8ccbe66b2ce56cf8d1de995a6e7dd4449f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:05:74:48:07:7e:eb:54:71:de:e4:0e:f0:
2b:a5:74:fa:ef:2e:5a:92:c7:f3:51:21:f7:bc:b8:
4f:fb:75:8d:3c:91:29:d7:82:1b:6a:79:0f:98:3c:
3c:ec:f5:fd:2e:20:71:94:f1:d5:67:9f:36:d5:c2:
9d:36:64:6a:c6:25:44:60:23:01:06:2a:a1:cb:5d:
8c:86:09:16:2e:24:e0:55:db:f1:be:ce:c6:bd:bd:
c2:20:48:f1:0b:ba:03:72:4e:90:26:1c:99:9e:46:
26:f1:a7:02:98:e2:10:a8:54:19:63:ad:d2:be:b1:
66:d2:b4:b3:2c:5b:3a:19:b4:84:3f:5e:98:e4:ed:
f7:ec:53:ce:86:5c:d3:4c:cd:8a:e7:cd:81:18:c0:
4b:a9:c0:70:d5:85:0b:fa:04:6d:b4:1f:2a:57:01:
96:3c:95:47:e5:61:81:4d:ec:bc:29:97:31:14:ca:
38:3b:a9:e6:a4:d3:2c:1c:41:c7:d6:4d:5a:fe:78:
d3:15:aa:30:83:f4:01:38:f9:11:b6:de:7e:35:1d:
69:b7:c0:c3:e0:88:03:4b:11:59:b5:60:d4:76:a7:
d4:53:5b:2f:6d:13:0d:2e:b1:ff:01:ba:72:ef:32:
11:70:ff:f1:d3:57:50:4c:90:ff:b3:4d:e7:90:22:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:8C:CB:E6:6B:2C:E5:6C:F8:D1:DE:99:5A:6E:7D:D4:44:9F:92
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:6f:48:e4:ef:78:80:2f:0d:18:24:9d:b2:64:3a:35:c9:
3f:1f:28:a8:cc:26:6a:0d:37:3b:16:04:5c:c8:82:8d:83:c0:
c0:08:31:4c:6c:1a:c8:45:4d:2e:e0:a6:9c:bd:c7:2c:96:ce:
7d:8c:cc:91:5e:ff:36:e5:ad:6b:99:fd:9d:6d:c4:65:17:5b:
d0:51:d2:b1:04:ea:16:93:7e:a2:1f:93:a0:e7:80:0c:81:e3:
bd:02:ef:e0:a1:be:9d:78:d1:7c:14:5a:01:d9:b7:c9:39:6e:
1f:3c:2c:91:b6:47:f1:78:a9:f2:c8:7c:50:2b:cd:ef:d3:9b:
4c:02:b2:f3:12:04:df:3a:90:17:c5:a3:3d:62:99:02:85:48:
43:17:7c:0b:42:b5:2d:68:31:dc:57:b8:dd:78:01:97:e3:9e:
42:5e:ff:5c:f9:e1:e7:84:34:cd:c8:97:90:35:5d:67:e2:a4:
10:ea:dc:55:a6:ed:a6:89:b2:2f:52:c4:19:2f:c2:c4:9b:c7:
76:08:46:4a:d1:06:dc:53:5f:71:91:cc:ee:21:3b:c3:d8:be:
36:b8:bf:95:d4:33:81:ee:73:17:61:84:c3:9b:71:dc:4a:c0:
fb:88:36:d8:12:84:3b:75:f7:ed:e8:56:a6:85:86:08:a3:c9:
67:c7:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:50 2025 by rpki-client