Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: YKI41S3orGQGifrJUM4b9RLL1DxZywuxE6mcHpwJ4yk=
Subject key identifier: 2F:F8:E5:9B:CE:25:F1:90:CE:2C:09:1C:44:17:13:06:A8:C5:3A:FC
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 019A5609932AA048F72097160B937F9D7DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 22:00:59 +0000
Manifest this update: Wed 05 Nov 2025 22:00:59 +0000
Manifest next update: Thu 06 Nov 2025 22:00:59 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: wOIQzJYKH67hQDFC37cVhcx4wCzFBVS5TT4zl23qmD4=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:93:2a:a0:48:f7:20:97:16:0b:93:7f:9d:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Nov 5 22:00:59 2025 GMT
Not After : Nov 6 22:00:59 2025 GMT
Subject: CN=2ff8e59bce25f190ce2c091c44171306a8c53afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:db:92:a7:c2:db:35:af:cc:11:cf:6f:0c:
e1:c5:6a:de:fb:e3:a9:55:52:7d:97:f4:c9:d4:e6:
66:eb:ae:47:f6:e0:92:d6:44:90:70:05:4b:90:87:
99:22:af:00:85:f6:02:46:64:15:bc:55:7e:45:62:
da:5e:6d:03:0f:bf:22:2a:fb:75:34:ae:8b:de:ab:
d9:ae:52:45:10:5f:f4:d3:32:9d:a5:f8:b0:2e:28:
ed:ef:3f:c8:1d:34:d4:70:0c:ae:5e:04:11:28:87:
23:0d:b2:e2:f6:e3:58:5d:95:01:8f:d5:dd:dc:26:
62:d3:ba:2e:97:6b:24:95:64:41:d3:66:a7:0a:58:
87:8e:98:96:b2:5f:8c:50:61:e7:c6:45:c5:8b:df:
d4:9b:d3:e8:f9:b2:38:fd:4e:58:78:d5:74:84:8e:
42:79:f2:43:cd:10:94:bd:aa:64:0e:90:4e:5a:79:
c1:57:2f:b3:07:bd:8a:a0:53:37:c5:f3:fd:88:ae:
39:35:42:da:60:bd:ed:e6:2f:47:43:5f:5b:ca:f6:
93:62:b8:bc:0e:86:9f:b1:08:6e:ab:1e:98:72:4a:
0f:1a:a6:33:e1:88:a5:6a:a4:61:a9:64:b0:d2:11:
34:a9:3d:f7:5e:3a:2f:99:cb:84:27:ae:b6:2b:4f:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:E5:9B:CE:25:F1:90:CE:2C:09:1C:44:17:13:06:A8:C5:3A:FC
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:bc:39:bd:ee:56:81:39:9b:80:77:42:95:2a:aa:74:31:
a0:f6:a9:cc:1d:33:4c:07:72:f5:bc:cd:b8:1c:9a:35:3b:73:
da:1d:96:be:53:d5:76:d7:cc:81:b4:a8:bd:1f:a2:1b:6d:ea:
67:ce:92:be:a3:02:e5:9b:97:49:b7:98:ee:96:f5:31:f1:8a:
d2:ae:da:59:8c:e6:3d:3e:eb:29:ed:11:d4:3b:1d:0d:bb:62:
21:47:55:02:1f:0e:66:39:7c:22:70:9b:46:95:d5:86:af:01:
86:97:3e:52:a6:6e:f1:1f:f6:0d:df:58:ae:ed:c2:58:2d:1f:
c9:8d:2c:53:04:71:65:bb:5b:dc:fd:1b:01:7f:17:99:fb:b1:
7f:ec:6a:a6:d7:6f:44:ee:83:db:a9:fd:9f:b3:1a:07:dd:15:
80:57:e1:47:3f:79:f8:15:b6:85:e3:4d:22:57:a8:5b:fc:00:
7f:27:9e:06:38:2a:52:6b:30:6b:dd:43:fe:57:9c:d2:bc:e8:
5a:5e:66:59:fd:76:26:3e:2d:65:1a:5f:1a:43:10:9b:a6:38:
53:47:31:6a:08:55:88:a0:7a:c5:84:4e:0f:5a:a0:6f:7a:c9:
5a:36:5c:2f:fd:c3:46:32:d4:2a:54:1b:af:08:fa:80:c5:9f:
34:67:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:56 2025 by rpki-client