Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: rz22I429ziYhMWgdQIgkSXh2rldXXTzLx8kaPwNcJ3Q=
Subject key identifier: DF:96:3F:3F:8A:65:4B:10:E1:33:F9:61:C9:A8:4B:10:7E:6C:F7:DB
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019923A01CB62B71515C88DA3356C5F0B351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 1576
Signing time: Sun 07 Sep 2025 10:01:59 +0000
Manifest this update: Sun 07 Sep 2025 10:01:59 +0000
Manifest next update: Mon 08 Sep 2025 10:01:59 +0000
Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: FMncKvmoi37Iuq91tXCMZ5XDSum8Sm/+Z10tFMb+nPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:1c:b6:2b:71:51:5c:88:da:33:56:c5:f0:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Sep 7 10:01:59 2025 GMT
Not After : Sep 8 10:01:59 2025 GMT
Subject: CN=df963f3f8a654b10e133f961c9a84b107e6cf7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:1c:d9:5c:f1:52:3b:6a:70:be:56:b0:b4:
74:11:a0:d5:69:08:d2:47:a6:27:fa:57:e2:2c:57:
5f:ec:6e:f1:3a:61:4c:40:21:77:b5:79:55:77:75:
cf:10:3d:77:c0:b4:90:c5:ca:05:9b:bb:23:77:6e:
d0:fa:53:e3:46:64:0a:f5:c8:4f:5e:9b:84:49:55:
c9:76:4e:04:ec:e8:97:06:b0:65:14:6f:2a:2a:ad:
44:76:6b:69:26:30:5f:1c:63:a8:a6:df:ea:4d:ea:
25:f4:b8:27:ba:a8:13:1f:ec:7c:96:84:66:d3:20:
24:ff:f4:99:d6:59:81:75:59:ae:2b:eb:5e:c3:12:
af:9e:c5:e7:18:06:de:b9:b6:70:73:99:81:e3:59:
6b:4c:73:7e:29:1c:9e:1c:f8:e9:af:b6:31:ff:49:
40:ee:c0:8d:da:89:bb:f7:aa:02:1e:0c:03:a2:68:
49:57:c9:a3:b8:1e:58:ac:81:31:3e:56:b1:1f:87:
b1:e1:3a:e0:ea:f7:42:c7:aa:c9:93:e8:f2:9f:f9:
fb:cd:07:57:12:8f:b8:9d:1c:88:0f:c7:e3:3a:48:
5e:1f:a0:64:10:b9:e5:4a:6e:41:86:7a:86:5f:ed:
df:f0:58:b8:fe:9d:d7:2a:aa:a2:6b:06:3f:24:38:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:3F:3F:8A:65:4B:10:E1:33:F9:61:C9:A8:4B:10:7E:6C:F7:DB
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5b:9c:f7:c0:1f:2d:bd:b6:9c:4a:59:95:d0:ed:f3:08:2a:
d0:e2:6e:fb:8b:c7:13:32:4a:dd:ba:70:10:31:5c:4a:1a:99:
d9:10:ae:0a:58:a8:bd:8c:1f:20:97:0c:67:a5:e2:c4:23:79:
2c:1e:b5:c7:c7:ea:dd:6b:c3:3a:d1:50:02:59:82:e0:aa:14:
78:8a:bd:d3:75:78:c9:d3:3f:d1:32:ef:8b:b0:05:e5:26:82:
b7:58:7a:d3:23:ec:b1:6b:69:d7:b4:a3:60:7f:59:41:af:f2:
f5:c1:51:26:75:0a:6b:9a:0d:a8:1f:38:55:86:8d:5c:4f:1a:
cf:3e:e1:b5:2d:8b:e7:c6:af:29:45:b1:3e:69:dc:08:34:0b:
39:a5:8d:e1:5a:73:b3:3b:8b:a6:45:fa:5d:6a:08:56:6f:5c:
bb:df:f7:7d:82:b4:9e:dc:af:17:b0:18:78:c4:e1:11:fb:17:
1b:98:a8:65:88:83:3b:8e:e9:ef:08:29:1b:5d:8e:8f:f7:11:
c2:1f:e6:3d:f8:ae:41:52:d0:eb:2c:74:05:34:b2:f3:6c:b4:
4e:49:87:b8:ce:d1:f5:78:89:b4:16:3f:1d:4e:41:de:49:61:
dd:89:fa:7b:df:0d:c9:fb:3e:b2:4d:3f:3e:4f:e8:bd:b0:c0:
e2:23:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:28 2025 by rpki-client