Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: 8FQyQkcyGWR56e5SfKF0Cp2bAJaaHrCOgF1jZXhRQic=
Subject key identifier: 89:FF:94:8E:50:0A:45:94:B6:A3:D0:79:2F:0C:08:94:9F:91:4D:CD
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 11B042FF520AE089C905F443E7ABBE1F4C44398F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 1E
Signing time: Wed 20 Aug 2025 00:52:30 +0000
Manifest this update: Wed 20 Aug 2025 00:47:30 +0000
Manifest next update: Thu 21 Aug 2025 02:42:30 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: MrwMEK90yYPExTHQmuimW4QQ2iWIpEKUKbCFIOTOHcI=)
2: 3231322e362e34382e302f32342d3234203d3e203230343733.roa (hash: bd7pfUAPd2iEntBrKkW4CYU1BhJJKWx1CGTXOchFWn8=)
3: 3231322e362e34382e302f32342d3234203d3e203136353039.roa (hash: dFw6eMiHdkNiTVAeBFv17UaWeglb2wjbxw3SzLNr1IQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 02:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b0:42:ff:52:0a:e0:89:c9:05:f4:43:e7:ab:be:1f:4c:44:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Aug 20 00:47:30 2025 GMT
Not After : Aug 21 02:42:30 2025 GMT
Subject: CN=89FF948E500A4594B6A3D0792F0C08949F914DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:1b:33:6e:f5:ae:a0:6c:6f:8c:63:ee:b2:
12:e7:de:e7:03:1f:3a:55:3b:15:04:32:3a:2a:52:
1b:1d:0d:aa:78:70:d7:74:a7:63:41:05:ae:88:b7:
d8:17:31:6e:dd:80:8c:30:bc:81:1a:68:97:4d:ab:
a8:95:78:57:ed:dd:96:ea:a7:23:f1:c6:72:02:85:
b8:1e:77:3c:61:bc:e1:8f:10:3d:aa:36:3f:31:bd:
ef:9b:c5:3f:83:ce:4a:74:97:d9:ab:b2:37:cc:36:
da:6f:37:12:81:7c:07:61:35:ae:12:6b:06:cd:2b:
28:9a:e7:5f:c9:5f:11:87:19:f2:d8:33:5f:e6:3c:
b5:8a:69:a8:84:43:4e:87:c3:c8:99:e1:e4:1b:a6:
9a:2d:2a:9b:c2:59:cf:94:9e:4d:0e:d7:90:f3:b7:
6a:da:bc:bd:13:dc:64:5d:ce:0a:6f:7b:9f:a1:fc:
7c:96:7c:b2:c2:57:1c:d0:cc:17:34:79:70:01:e6:
e3:f0:c4:22:b9:cc:3d:1f:49:b1:48:a4:8a:6f:81:
dc:8d:bd:51:69:01:84:da:63:f5:42:19:9b:22:85:
a5:01:3e:e6:73:bb:61:5d:9e:7b:b2:1c:0d:6b:dc:
09:d2:63:99:ad:00:37:fd:b6:2e:fc:ff:77:29:c2:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:94:8E:50:0A:45:94:B6:A3:D0:79:2F:0C:08:94:9F:91:4D:CD
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:02:c7:01:bd:4b:e3:c0:b8:71:4f:77:aa:af:d0:e6:dc:d0:
b3:8a:22:97:e6:cc:8e:2e:32:78:a6:04:89:79:2d:0f:6c:7f:
8d:ff:84:03:0d:05:45:44:61:c5:72:d3:c6:c4:bc:f4:90:b4:
c9:f6:a4:b9:6f:ec:a7:2b:a8:70:82:29:ee:d6:f1:04:6b:cf:
4e:1d:bc:5a:5f:e3:8b:10:4c:45:f6:fb:a3:ac:d2:22:26:d6:
51:85:b8:da:c8:87:b2:93:ca:04:21:71:1d:39:77:4b:d8:e3:
fe:fb:9b:2b:c7:1a:75:1d:b7:45:7e:b6:18:4b:b3:23:d2:b3:
5d:f2:35:0e:54:93:96:e7:58:ff:e4:61:df:a2:34:75:ae:40:
14:3a:40:09:6f:c9:b5:3f:3c:c7:d0:1b:3f:32:98:23:9b:c1:
20:8a:a7:27:d5:07:0b:17:29:5d:1c:a9:4a:73:95:56:94:eb:
bd:39:ed:2c:6e:b4:1d:6b:34:ff:cc:d6:e8:d7:5d:05:fe:93:
49:20:28:99:a0:03:9b:3b:0e:1e:13:1c:85:2c:df:51:0b:de:
f5:2b:29:2b:f8:99:c2:e7:b6:ce:d3:2b:7a:b0:68:1d:7d:00:
8d:6b:f2:e9:22:77:34:a5:de:bd:49:b5:7a:ce:14:c0:b4:c1:
93:36:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:35 2025 by rpki-client