Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: OQ7gdypjJW6EX8chwgI7+GGZVyVX1Qf6yYkx2pc4u2s=
Subject key identifier: 06:5A:1C:D9:B0:7E:18:DF:50:91:40:32:F6:61:F3:6E:77:DD:99:44
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019A72267670D13B97DE9D4CD92393103A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0552
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: cOYKkEcIPgHxTEx0ySbuB9zNl/ujy3hwBxAFoucfGTc=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:76:70:d1:3b:97:de:9d:4c:d9:23:93:10:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=065a1cd9b07e18df50914032f661f36e77dd9944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:5d:16:e1:1a:e1:4a:92:54:86:e9:75:4b:
68:e7:ac:ad:d6:8a:9b:f5:6c:33:ed:56:ec:53:ce:
90:ff:62:85:e1:96:4c:e6:cb:8d:3f:0d:3a:c4:1e:
30:fe:b7:e5:4d:cf:6c:70:bb:52:a7:dd:c8:28:a0:
f1:47:51:64:1b:37:9d:0b:4e:1c:05:1a:cc:3f:9b:
b9:72:7f:f9:b9:9c:a9:c1:91:b3:2a:16:b5:1f:10:
d0:39:8d:b3:e3:f6:54:3d:f2:46:26:bd:2b:ed:d8:
da:14:b6:30:19:38:53:ff:88:1e:37:da:0c:5d:fe:
20:d0:9b:20:89:b9:74:55:e5:65:ba:c1:65:89:82:
54:98:c3:67:8f:6c:66:82:93:51:9c:c5:f7:42:4f:
1b:55:99:13:1c:64:00:37:f9:0f:df:c6:32:91:0a:
8f:27:20:89:a9:b3:38:4b:ec:5d:31:b5:e9:77:ee:
4c:cc:44:67:68:ca:13:03:1c:1e:d8:aa:d4:6c:14:
1d:48:03:34:16:4b:48:f2:ef:51:87:ab:49:b7:59:
84:8e:47:3d:54:3c:04:bf:eb:1a:78:08:b6:11:a9:
20:41:65:4a:6a:6f:67:0a:26:b8:7e:0f:30:e6:94:
83:7b:81:60:ce:8a:b9:12:f2:f7:e0:e6:1d:c1:ac:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:1C:D9:B0:7E:18:DF:50:91:40:32:F6:61:F3:6E:77:DD:99:44
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3c:a2:63:be:08:00:56:6b:43:bb:ff:8e:58:c8:ce:68:cc:
d9:e3:a3:fa:dc:ef:69:bc:65:f6:72:98:13:5f:de:91:df:4f:
55:93:3b:b7:cd:75:47:55:3c:f6:e1:2f:8e:d7:97:a4:de:f3:
74:79:2e:47:bf:bf:7c:a2:54:ed:1d:c6:52:36:d3:c3:a0:56:
90:2c:ba:50:a4:06:b0:3b:01:1e:f1:db:2e:c6:2a:b4:fb:46:
1f:5c:37:bc:98:c1:86:b4:34:da:d2:a7:52:ae:0c:85:be:6e:
26:a0:e4:5b:e7:f6:5c:84:46:61:6a:e5:2e:78:6e:9f:67:2d:
fe:a9:19:19:40:fe:74:ed:9d:90:dd:b7:7e:bb:a7:95:3c:17:
b5:e2:71:68:2c:77:d9:2a:b2:c9:ce:4b:41:ef:3a:74:1b:dd:
d4:94:4b:f5:a4:7c:2d:67:91:43:2e:1a:7f:e1:89:21:59:9c:
90:13:97:3b:86:9f:5a:74:c6:af:c7:b7:29:8c:cb:26:ec:32:
77:b5:79:3b:4a:cc:fb:2c:a7:d5:f1:3d:5c:5c:94:0a:7a:c8:
09:f5:17:0f:99:48:df:6f:5a:14:bd:ea:c5:96:d1:b9:86:2e:
cf:37:c4:07:f9:34:06:93:14:be:14:fb:59:d1:d0:46:8e:8d:
5e:6c:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:55 2025 by rpki-client