Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: FbOrOlj+LQEGL6uITk7WGCp5xSLQ4xsZhAXePXSkJbg=
Subject key identifier: B2:B3:6E:7D:CA:A3:71:3E:63:26:D9:3D:FE:52:52:2E:E9:7C:CA:AF
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019A4F62A2E75F0CB22D07C80726E3C71FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0D21
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: q5GHVktpKfi4mVL37I3UFw3ngv9VSIFtCy3jUyOoQ44=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a2:e7:5f:0c:b2:2d:07:c8:07:26:e3:c7:1f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=b2b36e7dcaa3713e6326d93dfe52522ee97ccaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:80:e6:3a:7a:09:f5:ed:8c:65:fe:8c:2f:
36:f4:77:61:79:cc:02:f6:9d:c1:0b:9c:08:5c:fd:
26:9d:0d:11:0d:f1:8d:80:6d:b5:e3:d1:d8:2f:fc:
30:c6:09:d9:0d:e6:7c:a5:95:91:ff:a6:fe:02:ab:
05:5b:5f:1f:a8:fb:ba:b6:03:b9:22:f7:c8:17:b0:
53:e3:f7:ea:61:0f:b9:a0:2c:7c:c6:68:f3:17:bb:
73:b5:6d:df:f7:d5:07:e5:54:3a:8e:f1:5f:12:2b:
0d:5b:25:dd:b4:a7:67:ff:ae:41:b6:c0:3c:39:2a:
d4:86:34:bf:bb:0b:9b:51:7a:c9:52:61:e0:23:71:
fc:c9:19:f7:f6:6d:14:83:32:73:db:69:b9:af:78:
7b:40:ed:5d:2e:d2:56:25:57:0d:e1:23:19:ba:44:
f4:78:29:78:f6:f7:1c:60:ed:4c:ea:67:ea:76:3c:
65:e2:f7:86:a2:d0:6c:45:e6:b3:c4:58:7e:cd:10:
5b:54:c0:b5:f5:03:72:8c:cc:98:14:51:56:be:4e:
31:94:ed:77:1c:6e:5d:37:0e:f9:37:60:39:2c:be:
ed:ef:c1:40:bd:8e:75:6c:2c:31:dc:ea:92:56:44:
42:07:ac:0d:b2:db:fa:1e:bf:6a:dc:95:c0:70:b1:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:6E:7D:CA:A3:71:3E:63:26:D9:3D:FE:52:52:2E:E9:7C:CA:AF
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:da:30:78:d4:6a:99:0c:7f:6b:79:1f:92:e1:52:5a:4f:
cf:83:d6:78:9b:38:da:ab:79:3e:de:af:05:af:28:5e:96:cc:
db:eb:c1:dc:7c:2f:7c:f8:31:e2:f3:6c:8e:8a:8a:79:17:d8:
d6:4b:17:e5:76:2a:7d:e1:0f:a4:10:61:f9:cb:df:aa:ec:38:
ae:3e:0b:61:0b:d3:0a:b4:e4:40:fd:42:34:0a:75:7a:88:b7:
54:2c:19:21:b3:96:2c:8d:0f:29:e5:9d:5d:2a:64:e0:9a:6b:
90:c3:df:ec:e4:e6:34:73:7a:d3:67:87:c6:f7:9d:31:2f:15:
2d:25:eb:7c:1c:90:f7:34:98:d8:7f:a3:ed:4c:39:5f:78:49:
62:05:42:76:13:d9:6a:14:0b:b2:6f:43:f8:55:ed:5d:38:13:
2e:df:73:3e:88:be:45:b0:0b:fa:bf:d7:9b:b5:09:a5:24:d4:
91:dc:3e:8f:7f:0c:2e:72:e5:9e:a3:91:dd:f0:17:e6:ea:c5:
ba:26:bb:c0:a0:94:a3:3a:e7:75:c8:37:60:e5:9c:14:55:66:
99:52:a9:2d:c5:af:bf:00:ec:2a:be:ea:bc:a8:8f:da:f5:3b:
5d:36:51:c2:18:ac:10:ca:77:7d:9a:4e:b4:3b:25:e4:f7:7d:
db:27:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:51 2025 by rpki-client