Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: dYsvSNlyDT3eZo1JBy8T5S+mSDMb0c2dUDnyhky5iWk=
Subject key identifier: 11:33:C6:03:E5:C7:F1:FA:62:78:36:3B:A0:E4:64:68:3E:0F:56:A4
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 019A730168FDD5561E4888F26A727FB5493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: fM7SeDA+J18OSB6bhls6F6vTi5t2z5EkZofBGfJtMfM=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:68:fd:d5:56:1e:48:88:f2:6a:72:7f:b5:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=1133c603e5c7f1fa6278363ba0e464683e0f56a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:51:a8:48:19:03:43:f8:ce:a8:58:f5:10:
51:ce:6d:f1:44:ed:53:c3:30:82:bf:26:7c:5c:ac:
00:c1:11:0b:51:ad:53:e7:d5:0b:ba:e3:35:9d:ed:
c7:89:91:bf:f2:c5:0f:c3:c0:6b:e4:2c:34:11:93:
ac:b0:09:33:ff:dd:8c:f5:e1:58:8f:4a:02:6d:ae:
b5:73:3d:a3:f2:09:99:ce:f7:0c:b5:b6:58:21:63:
b1:cf:bb:fc:4b:3e:c7:0e:63:73:6a:d4:b3:5b:2c:
4c:be:fc:9d:41:3c:21:79:4f:79:48:98:8c:a4:af:
cd:c6:90:ab:7d:5f:77:0e:64:dd:81:b8:5d:12:07:
f0:47:80:45:a0:e8:e7:13:e1:90:62:f8:15:75:6d:
54:42:34:02:b2:2a:cc:18:97:17:bd:33:33:a3:5f:
94:7f:7e:ab:bd:fe:88:47:15:82:c0:cb:43:bb:84:
db:f8:76:cc:24:c4:55:3b:cb:a3:f4:2e:77:e8:a7:
fb:85:da:21:6a:8c:55:94:74:d5:2e:46:3d:ae:a1:
f2:2d:d4:6f:c5:1b:14:4d:b4:35:44:da:1d:b0:b2:
86:b0:dc:c5:bb:6d:a6:0e:1d:52:3c:18:5a:e3:4e:
9f:e9:3e:a0:52:aa:5b:b3:72:71:af:06:88:48:72:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:C6:03:E5:C7:F1:FA:62:78:36:3B:A0:E4:64:68:3E:0F:56:A4
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:05:19:dd:9c:08:e0:1c:45:db:c8:06:ed:b0:bd:d5:6f:
3c:f6:a1:a1:59:3f:5b:bb:32:23:1f:41:77:f3:29:27:23:f3:
ee:e0:c8:63:8b:5d:46:b7:f3:6a:0f:83:d8:82:8a:50:12:cb:
5f:f7:9e:b8:e4:72:07:0f:2b:0d:04:b5:a9:e8:54:f4:9c:75:
26:0c:05:94:a2:6b:f3:d3:2f:f2:cf:e3:d7:7b:42:b6:b6:ed:
27:a2:2b:6c:d9:73:c5:22:97:b6:9e:10:c5:65:04:1f:a8:09:
69:cb:9a:ef:2d:76:c8:b7:4a:5d:3d:2a:e7:b8:ad:cc:e2:8a:
42:41:0d:f8:c9:ae:cf:51:23:ab:c7:1d:bd:02:d9:22:1d:7a:
56:00:39:e8:2e:b2:d8:53:9b:32:bb:47:71:c8:55:52:59:78:
4e:d2:35:67:41:70:08:68:fd:57:ce:62:f4:d6:7b:8f:f9:d5:
99:e7:59:8c:40:1b:29:92:65:bc:3a:6e:54:7e:cd:85:6f:76:
e8:e0:ab:0c:d0:5b:45:2f:08:56:28:93:b7:73:79:d3:30:33:
f8:e6:aa:4c:cb:34:3b:3e:1f:41:8f:9e:7e:72:17:02:07:b8:
2c:ce:5c:b0:9e:56:7b:be:42:27:2a:54:3e:03:6b:a2:81:36:
bb:57:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:45 2025 by rpki-client