Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: bfPdnOSYU48S+lwpGJotJ+wepGVraze3azblrZksVKo=
Subject key identifier: A2:ED:1F:16:AC:44:34:D4:DD:8B:92:6A:47:A3:08:10:E3:21:DE:D4
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 0199233127A8969E770A3C21447064621E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 1207
Signing time: Sun 07 Sep 2025 08:00:47 +0000
Manifest this update: Sun 07 Sep 2025 08:00:47 +0000
Manifest next update: Mon 08 Sep 2025 08:00:47 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: E9kijDvautkfy8PcHzRdlcevjEz/LP6KY393zm9Ngf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:27:a8:96:9e:77:0a:3c:21:44:70:64:62:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Sep 7 08:00:47 2025 GMT
Not After : Sep 8 08:00:47 2025 GMT
Subject: CN=a2ed1f16ac4434d4dd8b926a47a30810e321ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:f4:e3:c9:1c:41:70:bf:30:d2:b8:37:cd:
59:8b:49:5f:8e:4a:01:a3:9b:c0:11:e5:7d:ff:25:
9a:1c:c8:8e:c3:49:97:2c:16:21:75:bb:fe:aa:66:
d2:70:b8:c6:75:f3:6a:ed:af:d8:8f:4f:ab:a4:c3:
e4:2b:a2:a1:64:65:19:f5:09:60:1f:79:4b:c7:7a:
ce:8e:d7:e5:49:5f:6e:d2:a0:e4:59:bd:d9:10:fe:
ed:b4:b6:4e:d4:83:73:7b:f8:3c:02:93:2a:11:43:
09:a8:0d:dd:a6:d1:cf:49:4f:47:5d:c9:e8:e7:2e:
5e:8c:db:d0:96:79:bc:d4:b7:85:b3:a4:76:a2:b1:
ad:f1:fb:5c:77:7d:63:67:1c:50:8f:3f:b5:b1:c7:
14:d6:b9:97:76:94:df:d5:96:c9:3e:8b:4a:93:e8:
08:0c:52:08:ba:65:b6:a6:61:da:7b:92:46:84:06:
49:c1:f9:28:32:3d:17:16:3b:9a:0f:2c:32:f1:25:
5d:13:fa:b8:7c:bc:aa:a3:f3:e9:5d:bd:ef:a6:a9:
ca:6f:f6:59:c4:fe:cc:cd:27:66:e6:e1:8b:c4:a8:
97:a1:e9:81:74:f8:3b:df:80:d7:bc:70:1d:aa:84:
5c:d3:e8:20:91:04:a2:c0:1c:23:2e:5a:a0:4e:fb:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:1F:16:AC:44:34:D4:DD:8B:92:6A:47:A3:08:10:E3:21:DE:D4
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:f9:be:08:c4:d2:fa:6a:12:d0:b4:7b:e4:a6:06:66:a2:
73:cf:6c:ec:12:02:b8:ca:ac:f3:55:59:59:73:10:25:17:a7:
5c:71:97:f6:06:14:e7:a8:74:0b:95:c2:66:ef:9b:65:0c:a3:
08:b5:10:2d:a8:ae:93:da:82:6f:dd:39:3b:0f:ef:54:a2:72:
12:7d:99:21:25:49:c4:92:45:ad:e1:81:e4:01:62:72:80:e2:
62:4f:ed:aa:a0:6d:27:8f:9d:00:1a:38:48:89:ed:0a:b2:59:
ec:32:01:71:b4:03:ea:d5:76:36:7c:1d:24:73:11:c2:87:88:
13:4d:16:44:0d:2d:6e:f4:77:77:4d:20:e9:17:f9:16:2d:82:
ce:0a:ed:d7:7e:17:1e:7f:16:40:19:df:40:83:52:47:34:e2:
41:ef:81:6a:7b:b3:27:0b:a7:4d:d4:d5:4b:98:f6:46:53:fe:
a2:b4:64:b4:99:23:f4:20:ac:11:52:72:ba:2f:ac:8d:1c:d3:
e6:c4:94:6e:2f:85:9f:b4:23:46:c4:54:74:54:ad:e2:df:56:
b7:38:f6:1c:42:7d:34:04:9e:d8:82:21:a8:da:16:bc:ba:ea:
1b:94:e2:6b:41:77:94:df:40:ed:62:0b:e7:88:e3:f1:ba:72:
1b:0a:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:17:28 2025 by rpki-client