Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: 8ioKyyuDWY8qYmAOywR5EjKKfgVmMlCWFAQ1qfTnvR8=
Subject key identifier: 47:A4:32:B4:BD:6B:1C:D3:67:D6:36:0F:6D:E8:41:27:C4:EB:BE:F6
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0198744FF930C3DB2DFB0286D44CFADFBCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 09:00:54 +0000
Manifest this update: Mon 04 Aug 2025 09:00:54 +0000
Manifest next update: Tue 05 Aug 2025 09:00:54 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: cAUzOEK4J2OGLvf9O18hqaphusNU11wv5JV5JMgs9b0=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f9:30:c3:db:2d:fb:02:86:d4:4c:fa:df:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Aug 4 09:00:54 2025 GMT
Not After : Aug 5 09:00:54 2025 GMT
Subject: CN=47a432b4bd6b1cd367d6360f6de84127c4ebbef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:e8:f4:55:6b:a7:79:fb:01:af:da:ee:5a:
89:11:9e:7d:b0:fe:ee:8e:af:42:85:f4:36:06:ff:
bc:34:81:8f:43:29:d2:cc:2d:20:9f:e3:49:9b:d4:
99:a1:24:db:90:26:a4:e2:48:fd:3c:27:df:9e:91:
53:93:c7:22:15:40:a0:02:24:f1:33:55:6f:2f:11:
87:7b:3f:0c:22:75:dc:80:9c:6e:35:1f:31:ac:3b:
b4:27:ac:c6:67:52:2f:01:6e:fc:91:52:6b:57:b5:
7a:5f:85:6f:34:c3:28:59:f8:ac:32:a6:92:47:7a:
d2:d2:3d:12:d9:62:b3:8a:bf:37:a5:a8:72:93:bf:
2a:6d:8c:8f:7d:20:da:d3:b2:ff:79:ca:bc:57:fb:
a7:10:ea:c3:07:b7:93:d8:72:ad:4c:7f:42:e5:e5:
a4:0f:8f:e7:72:2e:a5:3a:12:48:a5:56:1b:b9:a0:
2f:22:36:a0:e3:f8:e2:95:c0:c0:17:9c:b2:61:9e:
8c:2f:7f:2a:d0:de:14:25:c3:5b:21:c3:a2:5e:39:
31:54:43:22:a8:88:e3:32:92:5c:e8:7f:a1:b6:a3:
1c:54:2b:b0:4c:60:42:ae:ba:58:54:2d:5f:07:5f:
d2:95:f7:83:c6:fd:d3:47:cf:e1:13:63:27:09:73:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:32:B4:BD:6B:1C:D3:67:D6:36:0F:6D:E8:41:27:C4:EB:BE:F6
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7a:11:35:79:52:42:14:db:c8:5a:5d:b3:0d:9d:56:f1:44:
35:64:f7:95:64:70:8d:cb:37:86:a2:72:b9:0f:d9:23:9f:44:
0e:98:5c:b3:97:01:46:ed:5b:9d:61:f8:5e:84:b8:59:47:35:
5d:ac:fa:46:f0:ed:d2:4c:21:d3:11:2e:ad:09:25:94:3c:bb:
43:a4:59:22:eb:74:03:38:19:77:ef:21:9a:96:a0:4a:e4:5f:
bc:a0:9d:c0:90:60:9d:5a:c7:01:a1:f3:2d:d8:bd:9d:64:19:
b4:75:5a:6f:76:ea:ec:52:0c:79:d9:27:59:58:7a:d3:29:30:
20:bb:fc:8e:a6:20:cd:ab:8a:00:47:4c:d9:e0:b2:ff:ba:7b:
8a:f9:0d:30:e8:02:89:6e:24:10:f1:65:ac:8a:f6:95:04:35:
8b:9a:fb:04:dc:7e:e8:3c:0e:fb:91:71:5c:43:ac:81:11:23:
6f:f6:c3:99:65:86:3e:92:de:71:0c:93:26:89:77:9d:b0:84:
9e:4e:82:44:3b:8f:40:1d:89:f2:2b:7e:c3:d0:7a:8c:f5:8f:
5b:3a:f4:32:56:3a:fb:ec:70:dd:52:06:dc:a6:e6:04:12:66:
16:81:d0:f8:8a:0e:15:1d:42:33:d1:bb:1d:e3:f1:97:d9:4e:
8a:65:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:32 2025 by rpki-client