Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: YAD1B5NDpJx550aIuxEMBAHz89qF78p4eGaiBEeo4C4=
Subject key identifier: DD:E7:62:E6:10:69:47:03:4D:56:D4:78:60:71:15:C6:8E:D5:F2:41
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019A71B833804F0D298208FCF1F873CD3EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 1623
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: EGa7MgFYyLR2omkHHQkAaQHVVZr4TP5mA02q5ihWmrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:80:4f:0d:29:82:08:fc:f1:f8:73:cd:3e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=dde762e6106947034d56d478607115c68ed5f241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:2a:38:69:81:e6:9f:49:12:2d:20:d2:b9:
af:77:5f:31:9a:1f:80:29:d2:05:c0:7e:3a:12:6d:
0a:a2:07:24:df:26:4f:15:47:27:64:04:e4:08:23:
33:53:74:4d:f7:e6:60:22:f5:cf:06:2b:9c:cb:e9:
33:2f:5b:2a:35:25:ce:64:e4:77:32:90:7e:1f:f0:
5c:d4:41:76:8b:46:54:ac:91:0e:f9:9b:dd:f7:f4:
3e:54:9e:03:7d:53:5b:29:23:6b:a1:27:99:1a:6a:
eb:55:14:17:75:bf:9a:24:52:c4:4d:10:4a:5e:a8:
2c:47:45:31:61:39:e3:d7:ca:f9:a6:6d:ba:57:78:
45:58:fb:ed:75:0f:bc:6f:d3:31:a7:f0:c4:b4:ff:
a3:01:73:d0:4d:0b:f0:dc:82:fc:3e:f3:ba:e2:d2:
85:bc:04:53:3e:df:95:8d:9b:11:6c:ee:a3:f2:3e:
85:98:7c:75:ad:e2:61:58:db:db:49:eb:20:66:9a:
5f:c1:fa:69:87:75:a3:3c:c2:9b:a4:aa:c4:eb:28:
38:2d:d4:f4:1c:59:6a:47:82:ce:55:07:3d:2d:3c:
2a:a2:4c:19:96:33:bb:28:2d:62:1e:30:32:dc:35:
92:62:2c:29:dc:e5:be:4f:e0:08:e0:70:3e:3b:3d:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:62:E6:10:69:47:03:4D:56:D4:78:60:71:15:C6:8E:D5:F2:41
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:30:5f:4f:83:de:1d:b0:b5:d1:91:79:14:2c:22:7f:b5:49:
56:de:a0:41:fb:d9:08:9d:49:97:e3:c9:7c:d8:ff:17:ad:89:
91:c2:56:2e:b3:f3:82:d2:cd:a1:57:dc:19:7b:c1:c6:d9:a0:
a1:99:c5:fb:8e:1d:68:5d:0f:35:ad:d3:ee:2d:77:68:54:32:
d7:b4:17:28:79:8e:8d:e7:48:a4:11:2a:3e:dd:05:d4:73:1e:
ea:d1:3c:3c:3c:c1:71:07:c4:44:46:6a:bd:56:9c:b3:c4:b6:
73:1e:c2:85:7c:87:04:5e:0b:0d:cd:07:41:f6:af:32:9e:e5:
cf:cd:ca:bb:ab:69:54:a8:95:12:fd:83:fd:92:87:29:1b:73:
47:a0:97:1f:3d:ee:f9:18:60:e0:6a:6a:d8:e1:4c:80:74:4d:
24:63:17:64:fb:c8:ed:37:85:56:dc:40:e5:c0:bc:5c:26:c1:
9b:32:3d:65:07:9d:74:46:1b:b6:b4:8f:c2:a6:c9:9b:63:0a:
73:fc:dd:8f:5a:00:51:1e:10:95:f8:6f:24:ab:84:a4:bb:63:
99:12:34:6e:5e:15:77:ac:c8:01:37:03:1a:38:ec:45:ba:0c:
84:fe:db:4e:fc:51:8e:85:c7:f9:45:13:f2:00:b7:c8:87:1f:
f2:5f:0e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDOATw0pggj88fhzzT7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0
N2UyNTQwHhcNMjUxMTExMDcwMTI4WhcNMjUxMTEyMDcwMTI4WjAzMTEwLwYDVQQD
EyhkZGU3NjJlNjEwNjk0NzAzNGQ1NmQ0Nzg2MDcxMTVjNjhlZDVmMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNQqOGmB5p9JEi0g0rmvd18xmh+A
KdIFwH46Em0Kogck3yZPFUcnZATkCCMzU3RN9+ZgIvXPBiucy+kzL1sqNSXOZOR3
MpB+H/Bc1EF2i0ZUrJEO+Zvd9/Q+VJ4DfVNbKSNroSeZGmrrVRQXdb+aJFLETRBK
XqgsR0UxYTnj18r5pm26V3hFWPvtdQ+8b9Mxp/DEtP+jAXPQTQvw3IL8PvO64tKF
vARTPt+VjZsRbO6j8j6FmHx1reJhWNvbSesgZppfwfpph3WjPMKbpKrE6yg4LdT0
HFlqR4LOVQc9LTwqokwZljO7KC1iHjAy3DWSYiwp3OW+T+AI4HA+Oz1ElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3nYuYQaUcDTVbUeGBxFcaO1fJBMB8GA1UdIwQY
MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt
Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj
LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzBfT4Pe
HbC10ZF5FCwif7VJVt6gQfvZCJ1Jl+PJfNj/F62JkcJWLrPzgtLNoVfcGXvBxtmg
oZnF+44daF0PNa3T7i13aFQy17QXKHmOjedIpBEqPt0F1HMe6tE8PDzBcQfEREZq
vVacs8S2cx7ChXyHBF4LDc0HQfavMp7lz83Ku6tpVKiVEv2D/ZKHKRtzR6CXHz3u
+Rhg4Gpq2OFMgHRNJGMXZPvI7TeFVtxA5cC8XCbBmzI9ZQeddEYbtrSPwqbJm2MK
c/zdj1oAUR4QlfhvJKuEpLtjmRI0bl4Vd6zIATcDGjjsRboMhP7bTvxRjoXH+UUT
8gC3yIcf8l8OkA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client