Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: lEwo2wLbYymxcAWb2/WGhyXjxsXpsyeoU6eYlDQvj6o=
Subject key identifier: B9:D4:41:B1:99:82:22:8C:4C:84:88:1C:D4:7A:05:99:6F:0E:30:33
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019895FFD39CB3251218AA9F0D6EB40E0259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 030B
Signing time: Sun 10 Aug 2025 22:00:27 +0000
Manifest this update: Sun 10 Aug 2025 22:00:27 +0000
Manifest next update: Mon 11 Aug 2025 22:00:27 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: gLSx/JBrGGtKWz15hM8dYG7ld7u79kSHy+mCjty6xTQ=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:d3:9c:b3:25:12:18:aa:9f:0d:6e:b4:0e:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Aug 10 22:00:27 2025 GMT
Not After : Aug 11 22:00:27 2025 GMT
Subject: CN=b9d441b19982228c4c84881cd47a05996f0e3033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:94:3a:65:8e:18:a4:5e:7f:6c:2b:ba:a4:
12:4d:6c:2b:4b:fb:8a:de:64:bc:b9:dd:ed:cf:62:
16:57:19:7d:8a:a7:bf:12:da:aa:4a:fc:a2:c0:00:
82:37:ac:83:ea:e6:27:39:2d:97:a8:5a:74:37:7c:
ec:98:a4:5a:64:92:9b:49:55:ae:71:cd:01:a3:e8:
a3:48:25:f2:94:40:ef:37:3b:ce:eb:63:20:25:1d:
e6:41:1a:b1:2b:75:bd:39:c9:2b:ae:fd:a4:80:f3:
3d:19:e1:00:33:11:51:fb:96:89:8e:d1:04:4b:32:
f0:af:b5:42:6b:62:49:67:6d:b5:06:2c:14:f2:14:
47:ef:46:2c:3f:3d:56:f6:9a:ab:27:24:f6:74:56:
21:30:0f:3f:7c:6b:58:4c:59:87:f6:c8:7a:cb:cd:
4c:4b:77:34:64:c8:08:23:fe:77:e1:f0:52:54:2d:
fe:d2:e0:73:52:f3:7b:28:b0:1e:7f:2b:8a:4d:7b:
5b:7b:21:31:b7:23:39:57:8d:17:f8:52:d2:b0:2b:
91:b8:37:51:c8:49:96:0a:5e:4c:5a:d7:2d:22:64:
3a:26:55:68:0e:ad:1e:2c:a4:e2:b2:23:0c:33:12:
cb:c0:74:c3:0d:48:16:15:62:a4:fb:95:09:88:f9:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:41:B1:99:82:22:8C:4C:84:88:1C:D4:7A:05:99:6F:0E:30:33
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:c2:dd:a7:c2:ff:d9:7d:a9:b6:af:a0:c4:c9:7e:8a:b2:
d4:48:c3:c8:c5:36:42:1c:78:c6:5a:6f:fb:d0:89:1b:53:d4:
a7:fa:bd:87:ac:b5:ae:79:4d:68:62:67:8a:48:a7:11:df:48:
04:be:7c:00:0d:94:b1:9b:1e:5c:66:de:be:df:b6:f9:23:35:
8a:06:33:78:60:99:1a:0d:e0:0d:13:c0:ef:a7:47:b8:4e:ac:
2f:58:1e:c7:33:64:ae:2b:39:b4:42:a3:ef:1b:cc:92:04:39:
bd:2f:0e:0d:ff:ce:16:d1:6f:10:f5:b0:6b:3d:ed:c3:b1:56:
a8:e1:83:5a:d4:e0:63:ef:79:ba:bb:31:d1:55:20:38:d6:ab:
63:18:0a:1f:79:a4:32:15:be:ad:8a:2c:04:92:f0:87:e5:f8:
55:30:c8:11:fc:0f:31:0b:2c:93:49:90:52:99:02:04:ff:9b:
ed:97:c7:92:ee:b3:9e:a4:7a:6e:8b:98:dd:df:98:19:41:ed:
58:45:66:2f:f7:5b:99:47:91:16:df:a9:0d:51:25:ad:3c:78:
1b:3a:62:7c:c4:1b:62:00:24:2d:6b:13:26:41:2b:05:cc:42:
4a:06:0e:50:f4:6a:ae:a1:72:b2:44:32:6b:01:58:af:60:f5:
32:04:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:40 2025 by rpki-client