Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: a5b/V5vAZjJJP3MRM6TkgLj1vzTjwOKHm4PU7hzDK88=
Subject key identifier: 4B:69:87:16:55:04:9C:52:F9:B2:38:F9:43:52:85:F4:6F:75:9A:8E
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019A13BB16581F3ED593593577F53AC57171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0DBD
Signing time: Fri 24 Oct 2025 01:00:19 +0000
Manifest this update: Fri 24 Oct 2025 01:00:19 +0000
Manifest next update: Sat 25 Oct 2025 01:00:19 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: gloM+08WJzz1UfTUQQmjFQ82woBXaUzMq/CY9Xxqctc=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:16:58:1f:3e:d5:93:59:35:77:f5:3a:c5:71:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Oct 24 01:00:19 2025 GMT
Not After : Oct 25 01:00:19 2025 GMT
Subject: CN=4b69871655049c52f9b238f9435285f46f759a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:b0:79:b1:92:c9:40:3d:53:e4:93:4e:99:
fd:d6:79:e6:2b:49:2b:ed:af:de:a4:67:8e:43:db:
1b:44:0e:17:64:87:af:9b:db:a2:29:e4:c4:62:ca:
71:0c:ca:b3:72:09:2a:47:3d:5f:7d:2e:33:b4:45:
03:f4:ee:9a:f7:00:1c:40:0c:ac:e7:6b:1b:ba:11:
ea:45:80:d5:38:20:d0:5f:44:28:77:fc:fd:b5:15:
d6:72:76:4d:1b:56:b9:6d:08:e6:03:64:04:a9:0a:
37:c0:c0:4f:94:63:3c:54:6e:e4:5b:91:13:e9:2f:
93:52:dc:ea:72:59:aa:ad:f9:89:3f:7d:c9:9f:a7:
09:eb:04:70:f7:66:a6:4d:d3:e3:b6:96:be:04:f5:
a6:09:3c:00:ad:6b:71:65:89:70:d9:e4:b7:56:c5:
6d:c9:51:51:b3:3f:88:6b:63:c7:34:89:64:22:7b:
8c:8b:3a:95:a6:ce:48:35:83:64:5b:bf:67:5d:6b:
fc:1c:86:35:7b:c1:e1:4d:b8:cd:20:fd:2b:41:88:
e6:14:75:59:60:9f:55:24:72:fc:04:86:a6:8a:78:
2d:49:ee:c2:07:6e:b2:cb:7a:37:07:a9:0c:39:cd:
f5:af:13:f9:d0:88:b5:77:4d:0a:2a:c2:93:d0:ee:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:87:16:55:04:9C:52:F9:B2:38:F9:43:52:85:F4:6F:75:9A:8E
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b8:38:4a:d5:7b:41:df:7b:bf:9a:9d:d7:95:c0:da:7f:04:
e6:8d:7b:42:71:b6:00:e1:4e:f7:9b:b4:e1:e2:d2:ac:34:ba:
07:d1:85:7a:84:8d:00:8c:30:b6:61:a4:c2:27:12:c0:3f:65:
1f:d1:e2:b5:b3:ce:67:da:08:5d:51:32:ec:ba:81:d4:00:d5:
2d:f5:d2:90:61:ea:0c:c7:37:2c:91:89:2d:77:a7:08:6d:ca:
5f:52:4f:23:39:6e:88:9e:b7:a7:bf:5b:e2:e2:77:5c:cf:f0:
dc:7e:d9:48:82:76:f4:a5:91:32:84:0a:7a:c7:c6:c9:9e:c6:
a6:61:d5:08:7d:14:4e:29:b7:d7:4b:6b:44:7b:7a:cf:e5:da:
47:17:18:28:53:aa:d9:14:bd:5b:19:a4:01:46:3b:b2:ef:ef:
f8:3d:7b:cb:e5:3d:f2:a2:f7:73:37:75:3c:40:4a:c4:12:f7:
b8:9a:6f:3e:d5:08:93:94:39:1c:f7:7d:7c:83:a5:eb:e2:45:
bc:a4:09:04:d6:8b:66:1a:f5:a4:12:64:6e:11:ce:a3:3b:b0:
fa:a0:4e:a4:9f:5b:a5:e1:91:40:27:f1:98:5f:02:db:1e:fd:
8a:b0:08:1d:b7:2b:98:3a:bd:3f:dc:34:99:3f:77:76:85:28:
7a:ee:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:44:34 2025 by rpki-client