Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: BObrIOKSSOSAoPe3pknbNNfsxcK5UTKHE80hxnF4Vec=
Subject key identifier: 1C:1E:68:FE:CB:D9:44:F3:41:D6:FA:B2:4A:A8:B8:F8:D5:7A:1C:04
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019A146048F39250D0EAEA8B7C5FCB7BEE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 03D1
Signing time: Fri 24 Oct 2025 04:00:45 +0000
Manifest this update: Fri 24 Oct 2025 04:00:45 +0000
Manifest next update: Sat 25 Oct 2025 04:00:45 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: f/WeuSGdCWIMHHzZLcjp7KXG4OUKko8zeZygh7PxWcs=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:60:48:f3:92:50:d0:ea:ea:8b:7c:5f:cb:7b:ee:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Oct 24 04:00:45 2025 GMT
Not After : Oct 25 04:00:45 2025 GMT
Subject: CN=1c1e68fecbd944f341d6fab24aa8b8f8d57a1c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:6b:1e:b4:b8:95:d6:10:e3:00:bf:ab:6b:
63:78:cb:85:04:c9:fc:e5:2d:57:fb:a2:16:d6:72:
ce:09:e6:6b:b6:77:04:0e:79:1a:a1:94:5d:f0:f4:
fb:19:00:71:29:0c:27:35:19:bd:42:a7:4c:50:16:
ca:71:74:3d:92:e1:e4:ae:6d:6a:d2:43:c8:fb:d4:
87:6e:41:cf:3b:7f:45:56:f1:cd:ef:05:48:7a:08:
4e:09:8c:c7:05:d0:be:14:18:4f:6b:e8:44:43:97:
7b:e9:e9:64:c3:ac:ea:d6:59:59:ea:a2:82:85:4f:
d5:35:5a:e4:ca:34:96:70:08:cd:0e:de:4f:71:d8:
0d:65:98:a1:4b:06:e9:c2:5f:a8:f5:51:37:f9:9c:
c1:89:1f:f5:c9:db:1d:3d:60:9e:61:ef:23:e1:33:
ee:6c:48:c5:00:b4:7f:d8:d5:e1:29:20:70:44:49:
ac:10:12:20:20:63:d8:b7:55:f9:5c:b3:22:42:dc:
74:a9:e9:72:7a:ac:9a:2a:4b:e5:7e:f1:40:74:a1:
a7:1c:c4:35:3d:3f:02:c3:6a:5e:ad:65:ec:68:61:
b3:c6:a8:40:34:2b:ca:74:c1:da:97:27:58:43:24:
97:da:ae:5a:b9:9a:50:0f:1c:1f:b4:eb:c3:2d:5f:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:68:FE:CB:D9:44:F3:41:D6:FA:B2:4A:A8:B8:F8:D5:7A:1C:04
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:5a:80:ee:7d:74:b8:cf:f1:6c:f4:2a:1f:b5:1a:7f:1f:
24:c3:3e:db:fc:35:43:fb:6a:69:64:37:ad:9c:5e:6a:72:1a:
a7:09:db:fe:5f:d0:5d:30:1f:11:c8:0e:a4:f5:19:af:bd:02:
92:6a:a6:60:1a:b0:14:d9:f0:6d:33:93:11:e6:aa:e3:ee:e4:
73:a2:cc:11:19:c8:94:4a:1f:eb:fd:7d:ed:2a:b9:81:7d:ef:
45:aa:b7:b9:a9:ab:68:c0:9f:a8:1a:e0:58:45:3f:7c:09:ce:
22:9c:f5:1f:dd:29:08:81:f7:a5:a7:1e:c1:3d:30:c1:65:de:
d5:8e:13:d7:26:e5:32:ca:2e:b2:df:36:19:68:52:50:97:66:
36:d6:96:94:de:2b:b7:cc:18:b0:e7:98:f3:89:65:e1:8a:b2:
90:0e:42:d8:29:7f:95:17:30:d1:f3:25:53:e1:dc:fc:56:35:
57:99:63:f9:bb:80:5b:87:a4:17:96:61:23:ec:c5:7f:52:c0:
45:4b:46:6f:44:3d:bf:8f:4c:4a:ec:fe:f4:95:04:8f:08:bb:
a6:7c:f6:b4:1f:53:41:25:d4:a4:75:aa:0d:9e:94:8b:88:ed:
78:da:a0:93:9e:91:74:6a:f0:c1:70:26:28:21:90:92:58:a3:
80:ee:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:17:13 2025 by rpki-client