Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: ApkHA5snJHkiaLObkyt0+Sn0rYkQZfgcDD5IzA7eO08=
Subject key identifier: 52:33:8C:B6:2B:62:13:50:C3:20:22:26:68:60:CC:30:56:7D:AD:BD
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 019A4DE20F069B4F1E70504B45F6966D4A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: BDoKHIupRf11J3tKHrELDl/YOhpG8q00wcuWGnIRIzI=)
2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0f:06:9b:4f:1e:70:50:4b:45:f6:96:6d:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=52338cb62b621350c32022266860cc30567dadbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:fa:dd:6f:8b:0d:42:e5:76:01:af:da:c1:
26:6d:1a:26:e7:a4:81:00:5d:86:21:95:62:de:98:
d2:1c:46:cf:1c:3d:73:c6:2e:a9:46:1e:a8:d5:ec:
06:25:67:5d:41:16:e2:7a:b5:3b:0e:4b:d0:7e:13:
ad:cd:1c:5c:44:a0:0d:61:0c:fb:f4:5d:b2:ec:42:
39:53:53:91:4d:da:be:12:1c:fc:d3:b0:6c:e3:7e:
65:79:31:57:04:9d:e0:d5:f6:02:15:67:23:6e:4e:
70:82:76:56:97:1b:00:93:7c:ab:63:68:3f:a8:bc:
d9:13:2e:6f:4b:a4:69:9d:51:2f:8a:4e:bc:63:6b:
57:bf:b3:3b:41:14:8a:f0:e1:96:f2:16:af:26:a7:
0f:21:60:34:41:73:34:aa:6e:da:74:e1:d6:3d:5c:
71:02:03:fa:b8:eb:2d:fc:0f:4a:2e:36:52:10:77:
f1:32:18:06:3d:f8:cd:5b:c5:c8:13:a2:37:4a:74:
8b:c7:7e:8c:8a:99:ff:ea:38:10:a2:bb:d0:0d:47:
a0:bc:0b:82:9e:66:dc:10:bd:68:69:6a:44:0e:ed:
86:e5:90:bb:62:9a:7b:10:65:41:9d:74:ce:ae:67:
f9:a9:88:97:e4:9a:8a:ca:93:2c:28:15:d7:c3:7d:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:8C:B6:2B:62:13:50:C3:20:22:26:68:60:CC:30:56:7D:AD:BD
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:ac:bd:ae:c3:83:e2:a7:c5:5c:fd:0e:3f:41:f9:f2:e9:
d4:88:9b:2c:6e:d9:06:61:e6:be:ef:31:9a:63:32:a1:3f:ea:
e8:4e:c5:5e:f1:b6:4b:dc:dc:28:08:da:bf:e4:07:6e:3d:8d:
69:c5:3a:ba:36:80:fc:d0:1c:6b:ea:1a:f4:94:1a:ca:e2:bd:
f0:24:ce:22:79:e1:9b:7a:f5:73:f7:b6:df:30:44:38:a9:44:
2b:cf:98:84:00:34:e7:8e:4a:53:b1:fd:4d:c3:0f:8d:15:d9:
90:05:83:b1:0d:b9:bf:7d:00:44:48:aa:21:0a:2b:fd:37:14:
63:83:34:49:4d:fa:58:71:d6:30:7d:e4:91:0f:13:45:24:47:
af:e1:80:dd:25:75:d2:72:5c:d8:a2:df:fc:af:32:5d:08:34:
d5:9a:6f:41:6f:a8:e4:a2:03:61:f3:a1:f8:23:14:ab:a6:2e:
f3:1b:3f:f9:92:07:3f:fc:d2:48:59:ac:67:e9:87:6d:c7:6c:
94:c2:18:ce:42:b2:c3:c2:3c:62:62:27:67:42:22:d2:f8:86:
01:be:04:8c:6e:3c:ff:ff:f8:59:c7:17:e3:d5:d5:80:9e:2b:
60:ae:bc:ce:e3:74:c4:a5:ff:6b:67:e5:85:79:2e:c8:45:f9:
07:b4:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:10:57 2025 by rpki-client