Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: Oom6W2s3kX2eitlJcKJMTbJIs6uvNQT5srepm9P7aMA=
Subject key identifier: D5:8A:C8:A8:43:EF:76:95:F5:33:16:38:7B:8E:A2:79:F3:E8:39:2E
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 01988E4678BC9751E5263E78AAB0401F16AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 10:00:39 +0000
Manifest this update: Sat 09 Aug 2025 10:00:39 +0000
Manifest next update: Sun 10 Aug 2025 10:00:39 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: C9+6r33rPfZUg4wDvN8ePB+KB1fguANBNHMM1G767qM=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:78:bc:97:51:e5:26:3e:78:aa:b0:40:1f:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Aug 9 10:00:39 2025 GMT
Not After : Aug 10 10:00:39 2025 GMT
Subject: CN=d58ac8a843ef7695f53316387b8ea279f3e8392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:81:0b:69:e3:95:53:e2:e4:58:02:d8:3a:
d9:3a:30:0c:b0:33:fc:cf:cb:d4:ca:20:0f:f7:e2:
e5:48:fa:a9:70:b3:ce:41:c2:ef:af:73:e2:ea:cc:
4e:1e:e5:48:c4:eb:34:6d:77:8d:92:26:7e:9b:38:
16:4c:fe:45:6e:c8:91:a1:98:1a:1c:ca:83:02:f9:
94:3b:7d:bf:0f:c4:24:dc:1e:bf:e0:4a:61:63:5b:
8c:66:da:86:64:ec:be:7c:90:ca:c0:e5:2c:9b:0c:
72:ad:9a:bf:0b:84:a0:7b:a1:92:af:49:a2:26:56:
f9:eb:92:5a:90:74:5a:67:3d:b3:f0:ef:df:69:72:
1f:cf:0f:4d:34:60:40:03:c9:af:db:a9:3b:46:77:
50:e3:9d:cc:3a:07:48:23:46:4f:13:9b:e4:1f:c2:
1c:68:60:d3:f0:ca:e8:79:55:02:b9:2d:84:23:69:
5d:2a:ab:96:01:9c:3e:11:66:4c:72:34:f0:2d:b5:
30:da:b7:9e:a1:88:90:11:38:87:6a:71:5b:b9:93:
d6:a4:68:e0:55:ae:91:bc:1b:16:c8:20:3a:8f:4e:
7b:ec:30:1c:05:9f:a5:a2:17:f4:64:02:95:2e:6f:
ba:e2:08:ea:35:28:d5:b3:06:89:4f:8e:95:43:89:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:C8:A8:43:EF:76:95:F5:33:16:38:7B:8E:A2:79:F3:E8:39:2E
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:de:b2:a2:50:63:00:bd:01:2a:31:b2:09:4f:92:28:03:
5f:76:f8:ea:fc:6a:36:6d:ec:90:56:c4:50:27:6d:62:88:10:
6b:86:85:e0:53:77:25:fe:1c:1f:3a:6e:10:0f:71:d4:88:1b:
3f:1b:97:f8:8c:bc:8e:64:27:e8:29:38:70:f4:8a:8c:db:2a:
26:4e:25:1f:a8:e7:82:12:9b:44:69:e9:75:15:1a:53:1d:85:
c3:d7:ef:8e:6d:c6:a7:fd:d4:ef:75:5e:bb:e5:cc:6c:4a:84:
b8:6d:b9:6a:66:24:9c:a6:b4:6a:ae:f4:8f:63:6b:a2:78:c7:
4e:14:74:11:e4:e6:f0:47:87:91:37:94:2c:ba:b6:cc:ff:3a:
40:ff:2b:a1:65:77:7a:fa:ee:43:5d:8d:09:05:92:dd:a7:c9:
ff:1c:d0:b6:3b:51:53:8e:92:de:5c:1f:51:e5:1d:ef:b6:a5:
01:1b:b2:27:b2:1c:52:48:91:1b:2a:5d:1e:a3:1a:ca:9e:fb:
f6:35:a3:fe:ea:d6:8e:23:54:2f:c9:c0:98:06:44:3c:92:10:
1b:e3:49:97:9e:ab:51:21:00:33:e2:cf:85:e6:ed:8c:62:18:
b3:42:13:21:d0:7f:14:9b:0d:7b:3b:c1:70:2d:db:1a:ea:e6:
7f:ec:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:02 2025 by rpki-client