Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: TVr7P4wcQhzCuM2OU7NCK0IzS4Iym5h9cvPq36JzH1U=
Subject key identifier: D8:2D:39:F3:8A:34:4F:98:15:00:6B:4F:14:7C:BB:E1:1D:0C:1C:F2
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 019922FAFBBC6C9AD5C8D6A78146A399AE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:01:37 +0000
Manifest this update: Sun 07 Sep 2025 07:01:37 +0000
Manifest next update: Mon 08 Sep 2025 07:01:37 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: XBmf1ysFLRs8revVFXkC9qteRxZU4fpBpe7RNX0fMiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:fb:bc:6c:9a:d5:c8:d6:a7:81:46:a3:99:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Sep 7 07:01:37 2025 GMT
Not After : Sep 8 07:01:37 2025 GMT
Subject: CN=d82d39f38a344f9815006b4f147cbbe11d0c1cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:96:24:4a:06:93:33:3e:d0:7f:32:ca:fe:
0c:53:38:6b:45:68:cd:c7:8b:fa:a7:6b:3f:bb:e5:
a5:42:d0:4c:a5:3b:8a:ed:e0:ae:b6:73:3c:71:df:
8b:ec:44:1d:31:08:c7:ce:23:0b:6a:40:4d:8d:e1:
c7:3b:0e:4c:48:91:28:ab:14:9b:c5:55:68:cc:2d:
83:e8:43:f4:28:43:54:0c:a8:a1:49:e0:2f:cc:7a:
7f:62:d5:74:76:32:96:3f:72:63:d5:ab:0e:19:1e:
0f:fe:55:a9:85:d4:b7:fb:d0:03:83:c4:09:9a:34:
e4:02:41:c3:ea:aa:37:d3:0a:61:d3:e6:8e:c2:c0:
5a:36:66:5e:15:52:12:24:f2:18:eb:d5:a2:71:61:
b3:2c:e9:0e:ab:da:a4:4a:9d:df:15:74:e0:9b:8d:
3e:96:f8:e4:79:3d:bb:72:27:ce:56:3d:80:35:05:
3a:43:c5:67:d8:9f:ae:38:82:63:8a:22:00:c1:99:
bf:eb:41:5f:ec:ff:7f:a9:e0:18:af:f1:d3:aa:a7:
57:8e:e4:a7:e8:65:ab:18:8e:c9:ee:88:ff:90:41:
ec:ae:88:d0:af:5c:62:0b:8b:61:20:8b:6d:d1:43:
ad:35:08:8d:d2:59:29:8d:f3:53:9c:c6:15:d1:cb:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:39:F3:8A:34:4F:98:15:00:6B:4F:14:7C:BB:E1:1D:0C:1C:F2
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:aa:db:86:5d:4e:d4:47:5b:28:e4:b6:97:2c:da:43:96:
d6:e8:62:b6:18:c2:9e:40:f8:4f:5a:59:00:88:0a:74:46:5f:
29:d2:ad:27:69:23:66:76:f4:79:da:1a:23:99:b1:46:80:86:
76:9f:ce:56:91:37:8e:ff:ba:91:65:b9:25:17:2f:1c:ce:4b:
e0:ba:29:59:4b:ba:5f:34:ca:5e:3a:07:65:0a:51:c9:4d:c3:
f8:17:78:5c:5c:a5:96:50:3d:aa:5c:14:a0:b0:2e:38:e1:9d:
9e:bc:f3:ec:1b:c2:7d:ef:1c:68:82:68:d6:fc:30:cb:86:8b:
dd:0b:de:d8:b9:3c:58:a6:81:32:f0:24:33:c0:73:4a:09:bd:
e8:5c:35:ef:66:d6:ba:49:79:90:aa:8d:8a:1d:1c:b1:cb:cd:
a5:40:22:e0:a6:28:bb:f9:26:8a:e2:1a:af:2b:b3:b7:69:da:
cc:64:70:36:48:8d:b8:ce:b5:18:51:c2:e9:bf:2e:93:59:94:
68:e2:76:e2:53:30:53:d2:be:33:f7:1e:36:49:3d:4b:79:aa:
9e:7e:b2:39:14:3d:4b:ac:58:74:c4:ed:68:0b:da:72:4c:a2:
fa:a5:50:d9:58:a8:f9:37:25:d6:6f:52:fb:d6:12:e1:54:7b:
50:06:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client