Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: F5CijKR12KsvyWEI9FzR+XYIOtCzF/73zcUFYzmpxbw=
Subject key identifier: 02:47:A2:9B:F1:B8:F2:63:03:FC:6B:F1:14:55:95:1C:6C:A7:D8:59
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 01992331179534AC642A6250AB483D069FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0D9A
Signing time: Sun 07 Sep 2025 08:00:43 +0000
Manifest this update: Sun 07 Sep 2025 08:00:43 +0000
Manifest next update: Mon 08 Sep 2025 08:00:43 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: PVPc2mOrj1BGI7vKngUFeSd2GDbf+jDbPX6OAL69nhU=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:17:95:34:ac:64:2a:62:50:ab:48:3d:06:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Sep 7 08:00:43 2025 GMT
Not After : Sep 8 08:00:43 2025 GMT
Subject: CN=0247a29bf1b8f26303fc6bf11455951c6ca7d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:78:18:74:22:df:08:7c:e1:95:f4:e4:31:
ce:71:37:90:5c:1a:d7:7f:02:41:33:f4:0c:7b:06:
ed:29:5e:a3:4f:34:9f:93:c6:57:b4:de:97:5d:84:
ca:3f:17:b4:f5:72:23:19:ee:15:0f:0c:b1:57:c4:
96:fb:3a:29:d0:fb:d4:a9:56:2a:0a:dd:68:f0:4a:
16:97:7d:43:28:88:17:ae:83:30:f5:29:14:05:8a:
16:48:90:02:79:cb:1a:8d:f1:c3:a3:30:3d:f8:9d:
4f:49:3c:36:04:3c:6c:63:ad:b9:15:a1:8a:f9:0c:
f7:48:12:58:36:76:a7:34:31:85:fc:0c:c1:78:9b:
5a:1f:73:c6:47:0e:4d:1b:98:31:24:d4:02:be:ca:
53:c0:d8:93:48:54:c2:a0:93:61:91:3a:23:27:7c:
26:42:a3:de:b7:11:c4:90:0f:ba:19:7a:ab:b3:f2:
7a:7f:d5:bf:e6:6b:87:cc:59:7d:02:61:41:de:58:
1c:4e:f7:94:b4:df:82:14:2f:c6:85:1e:89:d4:39:
f0:61:cf:de:a1:e6:c4:69:22:d3:d9:cd:17:9a:fb:
da:26:38:6e:12:79:16:f5:cc:9a:ab:f5:c0:64:d5:
7b:81:39:bb:92:aa:00:90:ee:d7:7f:dc:8c:46:3d:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:A2:9B:F1:B8:F2:63:03:FC:6B:F1:14:55:95:1C:6C:A7:D8:59
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:16:a0:83:eb:cb:f1:90:4b:96:7a:bb:59:41:31:84:76:1a:
d4:b0:d2:cb:d5:1b:bf:78:70:56:f4:ea:2e:00:3e:69:a8:b3:
80:37:c7:8e:86:c7:f0:e1:95:b9:91:4d:be:de:3a:e3:e5:20:
53:ed:e1:ac:dc:5b:4e:a9:7c:48:16:79:ed:32:12:58:cb:10:
69:b3:a7:b6:51:c0:e5:bd:1f:53:35:dd:7b:d9:aa:5c:07:3c:
49:1b:33:d9:42:fb:66:ba:80:7e:8d:5b:19:84:bb:d7:75:26:
74:db:2b:91:9a:29:ec:b6:a5:e3:54:4b:44:07:78:37:55:9b:
41:aa:ff:a9:2d:e9:a9:9d:b5:3e:9b:d1:56:8e:fc:33:a7:77:
d2:e4:ad:1a:d8:c8:86:86:da:55:84:7d:cd:44:2d:c9:49:34:
21:08:68:b7:60:bb:a5:03:6a:6d:4e:df:b5:7e:1d:de:c5:5e:
b7:07:e7:d2:ec:37:53:c7:96:27:04:44:98:54:60:66:cc:78:
0c:d8:ef:b9:c1:52:47:08:09:42:49:a6:6e:d4:47:99:79:ce:
cb:62:3f:9b:06:3d:67:b8:f6:15:e1:e3:02:49:d4:62:f6:37:
e0:ed:2c:46:fc:48:d5:1c:5a:54:ec:c9:26:35:5d:6e:b3:44:
d1:6f:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:39 2025 by rpki-client