Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: U+A4IwYqdeL9pt3Fsnv9WTJxGFP44XC5URbZhL51sX8=
Subject key identifier: F7:87:16:89:15:4F:86:4D:69:4D:89:2B:2E:5D:78:9E:E8:97:B4:5C
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019922FA5A59934CF42A8FCEBB5C0CEEA970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 0354
Signing time: Sun 07 Sep 2025 07:00:56 +0000
Manifest this update: Sun 07 Sep 2025 07:00:56 +0000
Manifest next update: Mon 08 Sep 2025 07:00:56 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: iwHjvTKq7sK3v5vmi3kmUSFhT5GHKIOztk9HUpvDy2o=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5a:59:93:4c:f4:2a:8f:ce:bb:5c:0c:ee:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Sep 7 07:00:56 2025 GMT
Not After : Sep 8 07:00:56 2025 GMT
Subject: CN=f7871689154f864d694d892b2e5d789ee897b45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:77:db:f6:2a:78:82:56:b1:a0:e5:e6:da:30:
32:36:96:a8:e1:c7:3f:31:1e:42:bf:76:a5:87:94:
66:fc:ac:ea:42:6b:72:96:02:e7:a0:be:46:ee:cc:
4b:48:7e:3b:93:67:ee:be:9c:b9:d3:0c:e1:fc:67:
3c:1b:5f:1a:c8:81:6a:01:aa:9d:08:10:d1:c3:9a:
1a:14:c8:9a:72:0c:a0:f5:3a:e7:5a:31:e7:8d:7f:
ef:28:9f:47:29:8b:6a:88:45:f2:0b:d2:ec:62:7a:
69:d1:a0:c1:fa:bb:c7:07:a2:1b:f7:09:bd:9a:31:
39:e5:98:ef:5d:91:97:97:bf:17:79:1d:2a:39:2f:
59:cb:f7:45:eb:a1:4b:77:70:07:89:1e:36:ca:b3:
fd:21:ec:cb:7c:85:f7:b9:60:f4:4d:e9:9a:6d:f7:
57:21:00:aa:fd:fc:f0:57:7a:69:14:99:78:4b:10:
4d:af:46:b5:cc:92:c8:21:75:e9:0d:dd:63:8e:f2:
1c:b1:22:27:f0:fd:a9:a7:99:cd:fe:a7:a3:a7:37:
d8:47:5f:2c:8d:f6:33:74:54:3b:3e:83:93:f1:d8:
87:05:6a:26:eb:23:a7:0a:1f:c6:bb:f4:fc:7c:84:
cb:1b:b6:38:cb:aa:ff:2d:c7:d0:c0:3c:11:2f:21:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:16:89:15:4F:86:4D:69:4D:89:2B:2E:5D:78:9E:E8:97:B4:5C
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:10:be:07:c2:95:8b:4e:a0:32:2d:c0:94:e9:6a:7c:c9:0c:
b0:6f:5b:6f:7e:e2:c5:86:ad:79:48:75:47:0c:24:11:21:1a:
08:98:72:8e:88:13:52:a8:2d:96:43:37:d9:fc:3c:36:0f:91:
7d:5f:06:63:67:4a:50:a5:9d:b9:07:c1:b6:f9:eb:0b:75:45:
1e:ef:f3:06:6b:18:f2:79:f0:35:46:1e:b8:97:73:07:0a:df:
66:af:03:51:b6:ad:54:cd:4c:df:f2:40:24:8f:74:d4:b6:97:
9c:78:c5:ef:9c:a4:42:a5:9c:f7:e3:ce:8d:91:ac:f3:7d:2e:
4a:b8:46:f2:82:b6:41:30:fe:f1:e8:91:1b:1b:24:3e:4a:b2:
44:d2:1e:ee:78:a0:51:62:67:31:a6:18:b2:b1:52:16:10:a2:
03:d8:c1:09:e7:b4:72:5b:bc:54:c1:d5:b0:c3:d9:27:f8:81:
b5:3e:16:d6:82:9d:30:6f:38:09:38:95:1a:5d:40:f3:9a:6c:
ed:4c:09:a0:38:db:6e:ca:de:02:be:45:53:3b:4c:f2:ac:fe:
95:40:fc:76:b9:51:f1:dc:b5:36:ec:5c:19:f8:8c:15:76:67:
24:6f:d2:7e:8c:bc:bc:8a:2a:02:1f:83:4a:1c:e7:99:e6:03:
8a:13:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client