Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: jrfNNaE6yqePiV4WPt1yLTS6DFy4NART3JFp7TtjtdM=
Subject key identifier: 39:6A:1D:11:04:97:EF:84:53:7A:BE:DC:6A:2F:6A:BA:B8:85:7C:50
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 019921B2383CBC9D2412E19D1D1E3D7FD3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 13A9
Signing time: Sun 07 Sep 2025 01:02:31 +0000
Manifest this update: Sun 07 Sep 2025 01:02:31 +0000
Manifest next update: Mon 08 Sep 2025 01:02:31 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: JW85Q0+XwsxN2HuMfGbxgboVJuyW2pJH3L7XjhFMeAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:38:3c:bc:9d:24:12:e1:9d:1d:1e:3d:7f:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Sep 7 01:02:31 2025 GMT
Not After : Sep 8 01:02:31 2025 GMT
Subject: CN=396a1d110497ef84537abedc6a2f6abab8857c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:4a:87:7e:f5:c7:8e:e3:53:6d:da:9d:8e:
4f:ad:8f:fd:6c:85:d0:7b:e6:ae:04:15:fb:e0:7f:
92:e2:67:3c:81:8d:a5:a0:48:69:f5:bc:c2:d5:b1:
9f:cc:78:2e:79:76:4d:80:85:56:d2:ec:73:4f:28:
da:24:24:79:29:51:4f:e1:ea:62:43:b5:09:27:30:
00:6d:d5:fb:dd:40:10:b1:6e:ad:78:71:42:91:77:
42:f1:96:93:c1:8e:1d:24:e1:8a:84:c8:99:44:a7:
af:1f:c9:49:57:a3:2d:fe:23:4c:ad:13:86:8e:b8:
b0:da:70:e3:16:7d:fe:59:1f:eb:eb:db:e6:34:f2:
c7:06:77:93:2b:fe:7a:86:a7:51:4b:1b:14:5a:98:
80:ae:2e:a2:43:0f:a2:21:2c:42:d2:d0:36:bb:8a:
a4:84:ab:18:13:92:f9:dd:7b:4f:9d:fa:da:62:5e:
59:b7:a3:57:10:ef:f8:92:77:7e:29:dd:a7:3a:e1:
e9:37:0f:d6:14:a8:36:14:3c:0a:69:e6:2e:f2:93:
d0:57:11:61:b5:0d:e5:c4:27:de:ed:d9:15:9d:3f:
f4:ae:6e:60:c4:ee:28:fb:4a:f7:3f:52:cd:e8:73:
7e:0c:71:f2:bf:ce:b2:fb:27:9b:d0:6a:6c:3a:20:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:1D:11:04:97:EF:84:53:7A:BE:DC:6A:2F:6A:BA:B8:85:7C:50
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:92:ed:b0:51:09:54:07:7c:bc:99:5a:ab:35:23:fa:a0:e1:
be:b9:61:3e:35:af:04:db:58:94:f9:ec:b1:2b:e5:3a:3a:fa:
b7:45:a4:ce:84:34:5d:d3:9e:20:e0:c8:56:ca:ad:11:ea:b5:
f6:eb:3d:29:ec:4c:e3:2f:67:a6:2e:07:93:00:ec:40:75:73:
ed:3e:96:f2:80:ab:a2:3e:3a:ef:6a:fa:97:26:db:2e:26:8d:
a8:b1:8e:87:50:5f:47:11:e8:20:32:2a:0b:12:2b:12:d2:78:
29:8f:b6:ca:25:b8:c8:37:5b:70:35:6c:ee:a5:fe:af:89:8e:
fe:20:d0:55:1f:f7:20:04:0e:52:1c:cc:8b:66:cd:ef:15:94:
6d:db:ce:00:21:03:fa:95:92:8f:47:1d:b1:f5:55:61:db:50:
b8:6d:13:d1:c6:60:5c:fd:5f:cd:d0:3c:13:09:a6:a6:66:a7:
b1:34:eb:22:d6:6b:a8:ab:7f:83:41:5b:bf:3a:0e:45:d9:a1:
69:dd:84:61:22:1d:07:cc:39:b3:cb:00:f3:45:d2:ea:93:b7:
e9:41:d1:22:1a:6a:f9:f0:ae:30:ef:84:a0:45:e6:03:03:21:
71:7d:98:41:36:92:81:ff:f8:2d:da:49:2e:bf:de:9a:ac:36:
35:cc:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:05 2025 by rpki-client