Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: GMQpCVpfFNf/w1Jqkg2yKcd/qQ23z9VoPL2z61TONv0=
Subject key identifier: 55:45:A3:F0:D8:EC:50:5D:FE:32:B6:0E:C6:38:61:9A:40:A9:B5:2A
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 019A541B259DE543453AD46E9AABD541D731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 13:00:56 +0000
Manifest this update: Wed 05 Nov 2025 13:00:56 +0000
Manifest next update: Thu 06 Nov 2025 13:00:56 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: gKv/RfeHktZJIuzk0vIdTT/Y0/Q2jhoBCo3al8mO2Ts=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:25:9d:e5:43:45:3a:d4:6e:9a:ab:d5:41:d7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Nov 5 13:00:56 2025 GMT
Not After : Nov 6 13:00:56 2025 GMT
Subject: CN=5545a3f0d8ec505dfe32b60ec638619a40a9b52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:c8:6c:5b:8b:2e:3e:8f:15:73:bb:9b:38:
14:eb:4d:e6:24:61:db:c9:b7:cf:d7:d6:b8:81:56:
61:f2:e0:58:3e:20:92:03:89:92:df:38:54:f2:84:
28:f6:c3:a9:f3:89:d7:00:53:bd:6d:54:2d:d8:d4:
d1:41:48:50:9e:52:bf:95:7a:95:f5:99:24:48:c8:
cb:60:c9:f9:dc:a2:71:c1:0d:d1:72:1b:6a:77:86:
18:8f:34:31:64:c7:0c:db:3e:60:11:7e:20:74:b0:
b8:7e:af:19:5d:34:e6:b9:cb:9d:cd:26:25:97:7c:
99:ba:3b:d5:d1:ff:74:67:bf:1f:57:bc:b7:aa:4f:
7e:e8:07:94:a0:60:a1:6f:87:51:77:78:13:aa:74:
8e:70:d0:58:80:1c:12:ae:13:62:78:13:a7:a2:f6:
be:22:58:c8:ea:46:be:b5:01:e3:45:f7:a5:3b:8a:
8d:d9:bc:27:1d:56:4b:77:3d:db:05:c8:56:c8:5c:
14:ea:a4:49:5f:57:2a:77:ad:d8:fa:e7:cc:27:98:
10:ec:c0:90:b1:ca:b6:10:cf:91:1c:4c:74:a2:56:
41:20:f5:77:1f:f3:e1:59:e2:ee:f3:25:78:d3:b9:
29:12:25:3f:08:40:7f:d4:9c:6a:40:d8:5c:1c:72:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:A3:F0:D8:EC:50:5D:FE:32:B6:0E:C6:38:61:9A:40:A9:B5:2A
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:20:92:44:da:d3:85:f1:d1:53:83:a6:19:e7:f1:e8:46:
de:28:f8:d5:c8:24:a6:8b:bf:ab:7e:8e:c1:53:6f:38:09:b4:
9a:76:ff:d2:ab:a6:2a:ea:c0:94:a4:f5:7d:7b:42:e8:9b:93:
b1:16:5d:ed:fa:22:a2:5e:f8:5f:7f:a9:a6:d6:42:c5:dc:18:
54:45:00:58:2a:a2:ef:2b:26:7d:9a:b7:3f:b7:99:83:e8:ec:
47:db:54:70:a8:6e:77:77:33:4f:c1:09:2c:69:3d:97:59:54:
e0:3f:f8:cb:ff:8e:c2:95:a6:44:c7:ba:fa:b5:26:80:df:4f:
b5:51:b7:04:81:fa:e0:35:d7:b8:ce:82:c3:33:60:75:6c:8a:
d1:05:38:02:71:5f:88:0b:7d:d0:79:9b:39:f7:c6:a0:2b:ba:
ff:73:9a:3c:97:68:4d:c4:03:cb:9b:92:bd:7b:61:b1:c4:97:
1a:61:6c:71:63:bb:af:7d:66:c3:be:85:58:6e:a9:b3:35:4c:
da:3d:a0:68:f0:df:8f:76:0f:73:e6:2b:b9:5f:72:14:79:f5:
b8:a1:0b:0a:36:87:cc:82:19:49:2f:a6:cf:53:55:a5:47:05:
a9:8e:b9:11:94:c8:b7:39:1a:68:b5:1d:46:54:ca:42:65:64:
8a:0f:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:14:02 2025 by rpki-client