Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: 7vgK6BFoFxuf8GBfxhKf3WdmUCJJPH27PkoN04zzi4I=
Subject key identifier: 32:67:15:B4:87:65:73:2B:6F:09:E7:D8:BC:09:4D:24:5C:25:5B:6A
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 01996058E0785B5EBF5B2ED898D5FD51D128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 1690
Signing time: Fri 19 Sep 2025 05:01:01 +0000
Manifest this update: Fri 19 Sep 2025 05:01:01 +0000
Manifest next update: Sat 20 Sep 2025 05:01:01 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: g26wqrWJPrID5YsZFidQmzY7NLmD6xG6/SamuqvLz8c=)
2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:58:e0:78:5b:5e:bf:5b:2e:d8:98:d5:fd:51:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Sep 19 05:01:01 2025 GMT
Not After : Sep 20 05:01:01 2025 GMT
Subject: CN=326715b48765732b6f09e7d8bc094d245c255b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:7c:b6:03:75:02:b2:fa:c1:2b:ac:5d:48:
ca:78:59:7c:83:0e:ae:ed:f7:40:9f:74:5b:6b:11:
72:37:ad:c2:4b:a8:73:2e:59:b3:57:3b:6c:e7:e3:
f5:f7:ba:5a:78:6d:cc:bb:f1:3a:c1:67:f8:d6:16:
8f:b5:bd:cd:02:4b:0d:44:a9:d6:aa:8b:22:67:9f:
6a:c1:f5:b8:cb:8b:d9:23:ae:77:4f:7a:ca:a9:dc:
6d:59:a9:cb:3c:f7:f1:cb:fc:15:21:9e:c0:86:6e:
1e:12:c1:bf:a9:38:8a:f1:c2:1f:8f:6a:e2:e7:0a:
32:fe:72:f5:5d:30:49:12:ea:44:a8:b3:e2:09:a2:
a5:36:0c:6a:52:bd:fb:ac:ae:a6:5a:fa:60:4a:9a:
69:73:a9:17:ba:ac:14:6c:8e:6e:67:00:41:b5:09:
96:0d:94:00:dd:1a:29:19:24:7b:22:3f:cb:64:13:
7c:ef:a4:dd:ea:5b:60:23:f4:7b:34:d6:a2:52:78:
56:0d:c0:ef:48:cc:33:92:15:32:60:d5:f0:b2:c4:
35:4e:4a:66:97:98:98:25:32:18:5a:86:53:21:25:
5d:4e:0e:94:fb:8c:93:4b:a4:08:28:1a:b1:7e:54:
64:77:06:e4:41:0b:cd:4d:dc:57:08:21:fe:d6:ae:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:15:B4:87:65:73:2B:6F:09:E7:D8:BC:09:4D:24:5C:25:5B:6A
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:51:c3:14:b2:48:09:33:49:68:3d:8f:fd:49:cc:3f:82:71:
92:ed:af:ad:83:be:37:16:65:70:85:fa:07:ca:42:e8:d5:61:
3b:0c:78:8b:04:e2:27:1f:35:14:e4:6f:93:33:03:e5:01:3e:
37:be:42:7a:9c:a3:44:d9:8a:2c:ae:7b:87:fb:92:10:62:06:
05:5b:87:be:f1:60:07:88:10:dd:41:5e:6a:b0:d8:09:3a:73:
a1:b9:23:b9:47:be:93:dd:86:b0:80:93:1b:b0:07:b1:95:43:
96:21:5d:69:0c:40:2f:27:13:90:a9:08:ed:2d:ce:78:93:43:
f1:7b:de:21:74:08:8b:b1:8e:2a:46:bf:13:a9:45:2e:21:3a:
2f:f7:be:75:e0:20:11:76:9d:58:d9:3c:43:2c:a5:8b:83:0e:
19:6b:f2:44:86:16:ba:4e:68:52:db:81:2a:d1:24:b5:9b:1e:
0d:d7:76:1b:66:e0:88:ed:37:b2:ec:24:90:75:d4:bd:af:3d:
2a:86:35:cf:2d:37:85:f9:50:b8:f3:df:ae:0d:2f:1f:5a:59:
93:dc:36:d6:27:f1:60:6d:d0:3f:e7:32:5d:9c:15:26:9a:cd:
1d:d1:10:31:a4:38:33:b7:85:4c:b6:94:86:a1:cf:f9:70:d0:
35:88:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:23:20 2025 by rpki-client