Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: TWQhtHB8y6MvpI/uHrZ5S6yCYNjCKoMJM2Gn6JErlY0=
Subject key identifier: 54:43:D4:5D:B5:6B:1F:4B:6A:53:79:3C:04:65:3B:1B:B3:06:6D:68
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 4204E44338AF688748EB34A866D44384AFF24C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 6F
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:56:39 +0000
Manifest next update: Mon 20 Oct 2025 15:47:39 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: Pr7xBL2YfM5j4MIQgLq6TKsIoZPVhgWeYONZS92WF7k=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:04:e4:43:38:af:68:87:48:eb:34:a8:66:d4:43:84:af:f2:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Oct 19 13:56:39 2025 GMT
Not After : Oct 20 15:47:39 2025 GMT
Subject: CN=5443D45DB56B1F4B6A53793C04653B1BB3066D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:a5:aa:34:61:d1:b1:a0:e6:cd:8b:5c:37:
87:78:92:0f:1c:53:dd:10:45:27:39:4e:fe:96:08:
10:08:a0:7a:b0:50:ad:a9:4c:1f:1c:33:5a:45:5b:
bd:cd:55:d7:77:0d:b1:dd:2e:5c:c6:10:6f:df:95:
0f:e9:0e:96:a8:f6:7e:23:38:17:47:10:ea:f1:c5:
15:30:73:dd:42:45:77:8b:77:07:4c:10:05:dd:26:
00:28:5f:68:4d:ab:56:4f:ab:2a:52:a5:f0:39:31:
46:bb:69:c1:5a:85:58:2b:e6:86:21:10:db:62:c6:
c4:1c:01:10:53:d0:f8:77:7b:3a:e4:d1:5f:ce:a0:
1f:7a:a9:d0:50:54:0b:e0:89:4a:97:2a:90:0f:d9:
98:ae:5c:d6:49:52:6d:95:e6:41:e3:1c:40:8f:69:
eb:16:27:b6:f5:d8:96:b1:c8:4f:30:b6:c3:3c:0c:
4b:1b:99:44:80:72:fa:68:b8:07:de:94:a3:14:57:
db:2f:43:7f:b2:28:c4:cc:8d:32:6c:4c:e4:3e:57:
63:15:3b:2a:a4:e5:5c:b3:8d:23:6c:33:e3:57:bb:
36:80:3e:b9:68:62:e8:3a:55:40:2a:20:43:93:35:
dd:65:b6:24:6d:9a:8c:02:85:ea:aa:7b:85:00:cb:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:D4:5D:B5:6B:1F:4B:6A:53:79:3C:04:65:3B:1B:B3:06:6D:68
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a6:b3:45:a2:a2:8c:e4:9e:26:aa:4b:41:38:07:45:ba:ba:
ce:f0:46:57:94:77:d1:e7:d8:f8:94:52:9f:76:ba:77:67:1d:
60:a1:01:09:30:4a:41:dd:6c:09:75:8b:d8:fd:73:31:af:db:
ac:bd:7e:a9:88:6b:3d:f2:08:c4:09:2e:d3:c1:7a:ef:20:4b:
92:a7:16:22:cb:75:b7:c2:46:b0:e5:43:0c:68:10:bf:0b:69:
70:44:39:08:7c:3b:02:1e:56:7d:cf:7d:09:3c:09:07:3e:5b:
8e:37:fe:6a:6a:5a:9f:ca:d9:1d:68:7f:65:ec:df:c1:8e:f2:
a8:7f:d1:95:84:eb:66:da:78:91:f2:f9:c7:3b:c7:85:1a:7a:
0e:ba:dc:d9:9a:76:7d:8a:86:d4:ee:e8:39:53:4d:d3:3f:14:
48:e1:d7:06:2b:51:9e:d3:76:27:30:9b:24:70:51:a4:fe:50:
19:2f:fb:ab:77:7f:23:55:14:71:df:02:16:02:c4:bb:d6:bc:
02:71:ad:87:c1:77:41:23:ad:6e:b3:c4:0a:bb:87:88:85:b3:
47:ec:be:7f:5d:00:a0:39:98:4c:6d:dd:e4:aa:4f:7a:fc:74:
9a:cf:c0:80:64:68:27:51:13:ae:87:99:60:dc:ce:56:87:e5:
3c:90:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:06:24 2025 by rpki-client