Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: zjycrZQLS+9sr0NZCSB3jIyllf5r8iMJ9HtbmgccJZQ=
Subject key identifier: 97:DA:30:6B:7F:A1:84:64:F8:3D:FC:C8:75:6F:B8:60:02:38:23:CE
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019A54C083E3ABBD1C6EF42235073F1D71C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 02CC
Signing time: Wed 05 Nov 2025 16:01:34 +0000
Manifest this update: Wed 05 Nov 2025 16:01:34 +0000
Manifest next update: Thu 06 Nov 2025 16:01:34 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: GEfxS5JTS7d1m60aJw192ZCxbalv8OmLVl3WrZG4vWo=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:83:e3:ab:bd:1c:6e:f4:22:35:07:3f:1d:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Nov 5 16:01:34 2025 GMT
Not After : Nov 6 16:01:34 2025 GMT
Subject: CN=97da306b7fa18464f83dfcc8756fb860023823ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:e7:60:46:ed:f3:58:23:c1:25:cf:9b:8b:
ea:f2:b5:74:0d:8e:bc:08:be:81:d2:77:f0:8f:ed:
0a:36:48:af:ad:66:34:2d:9c:1a:45:78:16:ae:26:
02:c4:d6:91:75:3e:8f:7d:c5:ea:47:01:5c:1f:3b:
3f:ab:fa:3f:0a:47:ef:ea:17:53:b6:14:de:97:d3:
a9:26:20:dc:7f:a5:6f:72:f0:f8:65:a5:f4:0d:48:
04:c6:6b:b1:07:77:d0:5e:76:b8:c0:90:0d:59:93:
53:c5:d3:7e:5d:b8:4a:5f:9d:b4:ba:5f:60:eb:28:
05:1f:3c:fa:47:8d:ca:f1:7a:cf:3b:4b:73:f1:b3:
63:1e:ff:68:9d:3c:7c:0f:a1:60:66:eb:e0:56:19:
5e:e9:71:6d:a3:db:d0:96:2a:52:7d:f8:d0:e5:49:
36:f4:22:15:b3:e8:fa:af:f8:48:11:63:7a:73:20:
05:65:a6:ad:13:84:b1:03:7f:0c:f1:c1:eb:b4:67:
54:23:d7:32:27:c6:6b:de:9f:61:99:3a:2b:ea:6b:
02:65:91:0b:32:e3:ac:cd:e5:09:f4:e6:38:e0:99:
ec:c5:86:5c:79:84:66:57:2b:d4:b8:1d:4f:c7:41:
e8:82:31:ee:62:ea:a9:85:40:88:12:65:35:c8:21:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DA:30:6B:7F:A1:84:64:F8:3D:FC:C8:75:6F:B8:60:02:38:23:CE
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d2:b7:c0:40:18:3a:b4:a7:de:3a:cb:4d:3d:93:ed:ac:9f:
21:af:a9:86:22:db:b5:4c:98:13:3d:8e:60:29:f0:74:7d:3d:
54:6d:37:63:46:ca:f9:4c:6a:51:f9:ac:e6:4e:bd:dd:de:95:
6c:3f:36:68:66:d5:b3:e7:6a:d0:1f:89:44:12:7b:c0:ec:8a:
3b:0f:16:f9:8e:db:06:1c:8f:dd:9a:68:35:de:f4:8b:58:ac:
64:b2:11:f9:ac:d9:85:55:4d:cc:81:82:ad:ac:a6:3a:9d:03:
13:4c:da:34:5d:8f:35:c1:4d:58:0b:37:2f:2b:7d:e7:19:bf:
ce:1d:8e:e6:14:3c:33:9b:81:ba:89:99:7f:6c:74:4e:7b:d2:
bb:88:16:ee:d7:73:11:1d:7b:56:5c:8c:bc:63:36:ca:b1:bf:
4a:9b:48:70:17:73:30:20:ad:ac:b4:24:6f:c7:b0:89:d8:ab:
33:67:a3:f7:5b:b2:1e:33:7c:82:af:21:a4:b7:e8:fd:38:92:
9d:2d:c9:66:81:ae:38:a5:92:5f:84:e1:0a:5f:1d:38:35:02:
00:67:2e:22:37:a9:31:9b:82:de:dd:e7:05:4b:40:9c:6a:b1:
f0:60:11:7d:91:ff:4f:4c:00:2e:7b:e3:da:01:bd:a8:a7:d1:
1f:02:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:33 2025 by rpki-client