Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: W3QAF3mYYzICqnQmMwS/gPePJHtKKDBbD6k/f7xFPNw=
Subject key identifier: F4:22:04:87:F3:85:4E:2E:87:2F:C2:83:AE:3C:1E:53:21:2F:B3:3C
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019887A06B9EC4A17584C088BB2ABCCC2678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0454
Signing time: Fri 08 Aug 2025 03:01:34 +0000
Manifest this update: Fri 08 Aug 2025 03:01:34 +0000
Manifest next update: Sat 09 Aug 2025 03:01:34 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: tavlGGb7mah9T/uucYOInorkG+qhkADT3vjTRlM55XA=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:6b:9e:c4:a1:75:84:c0:88:bb:2a:bc:cc:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Aug 8 03:01:34 2025 GMT
Not After : Aug 9 03:01:34 2025 GMT
Subject: CN=f4220487f3854e2e872fc283ae3c1e53212fb33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:29:c1:81:d1:d8:c4:98:0a:d7:82:92:f1:
39:ef:e4:77:06:1e:24:64:83:5d:27:70:6f:98:a6:
35:c2:df:aa:20:53:62:41:6a:30:b8:08:2b:2f:c7:
de:45:38:ab:a2:7a:6f:e9:bf:59:93:7f:5d:3b:14:
ea:78:1e:9d:e1:ad:ec:41:44:74:d0:2a:20:89:f6:
77:d0:51:18:18:f9:96:ca:82:7c:c1:55:b9:ed:91:
69:aa:04:5a:09:4b:14:15:13:ca:a1:35:6e:88:49:
c7:78:fe:18:21:7e:fc:0c:4f:ea:c5:44:f6:63:b6:
4a:a2:d8:8a:1c:cc:b2:a4:8b:14:d3:d5:c8:99:fc:
dc:e0:9c:6e:15:dd:10:de:41:f9:cf:88:68:77:51:
c1:7b:d5:73:4f:12:f1:9c:18:27:6d:9d:11:5e:44:
de:a7:f0:f3:86:e5:70:29:db:32:ab:30:05:44:b4:
c3:98:f8:7f:7f:73:2f:78:ff:8b:78:8e:c0:29:93:
8e:ad:83:cd:9f:40:58:2f:b2:95:ae:31:02:0c:d4:
6c:99:33:1b:5d:7f:0b:08:da:18:08:b2:40:20:76:
58:85:97:67:02:af:eb:be:73:22:f8:d2:24:4b:93:
fd:c3:8a:64:0a:20:11:fe:6e:af:f0:6c:f3:85:87:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:04:87:F3:85:4E:2E:87:2F:C2:83:AE:3C:1E:53:21:2F:B3:3C
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:54:4d:b2:60:f7:a4:e4:84:d3:d8:95:7e:ac:4a:3f:1c:ad:
80:55:49:6a:dc:a2:ee:4b:39:ab:c2:a4:56:b3:6c:b7:a6:2b:
bf:f4:cf:be:4b:52:b0:7a:72:4d:9a:e9:96:18:56:f1:8f:e9:
0f:a5:79:99:0c:75:a1:60:5b:9f:71:b7:2f:39:28:2f:fa:08:
b1:cb:bd:a7:dd:8d:86:01:f7:38:ac:d6:dd:6f:02:1a:71:32:
30:bc:8c:e1:53:73:0a:ef:63:18:da:c7:ef:11:5b:aa:e0:e8:
0c:78:35:f5:73:2c:80:91:83:4b:0e:7c:52:95:be:df:39:ca:
a1:02:39:7b:d6:8f:d7:c5:ac:cd:31:27:f5:e6:3c:f2:9a:7e:
04:81:c9:c2:37:20:03:93:86:6c:3c:c7:02:37:41:66:ce:23:
63:3f:fe:37:37:49:8f:41:e5:6b:eb:47:17:84:66:f2:8b:f0:
79:f2:76:bc:e9:b2:5b:6f:c7:61:a6:fc:16:d6:82:93:e8:19:
40:7a:97:68:fc:00:9a:5d:37:c4:5a:f6:f2:7e:8e:be:b3:f4:
27:64:30:86:1e:83:93:bd:b7:52:7c:da:bb:42:f2:7b:e6:14:
d4:85:b2:1d:7b:80:0c:2e:7a:d8:36:84:39:56:66:d3:5a:5e:
8f:73:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:56 2025 by rpki-client