Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: vz4WwE8/DrlbG6bugOy7HDrIQeOvUdnHOjGLnYPWyYc=
Subject key identifier: 1B:73:B5:C0:7B:7C:9B:62:1D:CA:AE:6E:D0:03:F7:C8:CF:44:18:56
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 019A71B8B37976BF327BEFB3F21F715D10C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 1457
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: J4Tllp8851y3FFNpBVt+Zixi/57UywICKlXHyx11Bys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b3:79:76:bf:32:7b:ef:b3:f2:1f:71:5d:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=1b73b5c07b7c9b621dcaae6ed003f7c8cf441856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:38:a5:da:3b:29:63:0e:95:93:4f:cc:a8:
29:b6:ab:98:63:3d:ef:31:d2:a1:68:84:05:da:9e:
6a:b9:27:07:84:0a:d3:35:9e:36:5d:c6:c2:a6:45:
42:ae:b8:66:1f:e7:df:75:50:73:e9:dd:f9:72:b1:
e6:1f:ea:42:e2:20:21:83:21:70:6e:19:26:00:41:
85:16:1c:48:54:ad:20:1c:04:c0:79:8b:d3:3d:01:
65:1f:50:85:aa:1c:a0:47:2e:83:32:8d:00:a6:93:
73:8e:23:56:b8:5d:2b:e5:6c:24:2e:01:39:2e:a0:
96:4c:95:97:d9:9c:7c:71:7e:38:97:f1:19:8a:05:
5d:c7:e4:9b:ae:bc:b9:99:ea:e1:1f:fc:00:b7:26:
76:d2:86:05:32:67:80:7f:4f:d3:af:e4:2a:a5:42:
b5:3c:8b:b1:b2:3e:d2:60:ed:d0:7c:81:22:7a:f1:
fe:07:3a:8a:e4:70:47:cf:3f:6b:fa:42:c4:b1:34:
cf:4e:74:b1:6c:f2:9f:9e:23:e1:0b:29:a1:6e:c5:
6c:a8:25:1a:33:53:8c:b2:7d:7c:ac:a9:9c:0c:09:
12:ef:f8:9b:5e:e8:df:48:f9:a4:53:8a:2e:3b:e6:
8d:8b:e9:04:6e:91:39:fe:83:c5:0b:64:b9:a5:c2:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:73:B5:C0:7B:7C:9B:62:1D:CA:AE:6E:D0:03:F7:C8:CF:44:18:56
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:27:1e:d0:9f:d8:d1:88:6d:7a:1b:d1:32:3d:b4:fb:9b:
30:f9:ae:66:5c:5c:90:79:84:6d:a7:3d:6f:b9:a5:e7:2d:88:
30:7f:fa:48:a0:d5:d3:b5:e4:08:5e:69:94:a5:72:36:13:5e:
de:55:57:1b:01:d1:47:1e:f2:fb:84:fa:a9:e3:d8:06:25:ba:
8b:b3:79:06:07:ab:a3:e0:ed:03:bb:2b:b8:13:16:23:d8:f4:
d5:8c:b0:ff:b5:df:23:a0:b6:d0:af:2c:40:9c:50:58:41:e0:
80:0f:69:a0:c9:36:11:ae:f5:b7:24:ee:5a:59:cb:1e:40:15:
2d:31:fe:ab:29:f9:8d:d9:17:a6:25:cc:6b:77:fc:39:fd:a6:
18:c5:d8:13:e0:b5:6b:7c:bf:5c:d9:a8:fe:ac:f0:1b:cb:b5:
78:38:92:19:8e:70:78:88:0e:4d:c0:b1:75:5c:0c:42:5c:6b:
da:c4:94:01:95:33:13:b9:08:7b:79:68:eb:ae:74:32:4b:55:
63:2a:bb:35:8a:fc:8c:99:e1:1e:59:b5:70:df:f2:4f:91:43:
ad:b7:42:b3:86:bd:d9:5a:03:34:84:f5:52:51:07:ae:0c:1b:
cc:0f:41:aa:a2:40:fb:f6:0f:4f:3a:3f:2c:c4:67:cb:a2:45:
26:84:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:31 2025 by rpki-client