Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: jXH1Qne2b1LPUC55/OEpXUDoroFLyS+8aZ0ln9bQKeg=
Subject key identifier: B9:1B:17:8A:DE:62:5F:45:7C:E0:F2:82:85:47:A6:F4:97:86:FA:7C
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019892C90AF1203FD0C6012D1A35FC6F8A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 1594
Signing time: Sun 10 Aug 2025 07:01:45 +0000
Manifest this update: Sun 10 Aug 2025 07:01:45 +0000
Manifest next update: Mon 11 Aug 2025 07:01:45 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: TlZy92OGasy+3JJ5Av43p2KSfhloASfb43TZ3AdO4u0=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:0a:f1:20:3f:d0:c6:01:2d:1a:35:fc:6f:8a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Aug 10 07:01:45 2025 GMT
Not After : Aug 11 07:01:45 2025 GMT
Subject: CN=b91b178ade625f457ce0f2828547a6f49786fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:e6:68:6b:c6:9f:e0:71:89:fd:aa:cf:c2:
75:93:14:4d:6c:c8:af:03:32:69:22:26:0b:95:40:
4d:cc:d2:bc:98:78:ac:e0:48:b3:c8:b8:ca:d7:fc:
9c:bc:e2:84:e6:97:31:a7:11:29:7e:ab:3f:e8:d6:
d6:64:32:23:9a:13:12:d4:f3:f9:8a:66:35:58:34:
50:6d:00:66:60:c0:e6:80:5d:a3:dc:e4:80:0f:ae:
61:a1:06:bc:ad:36:bf:3c:a9:80:f3:64:08:0f:90:
97:42:36:e9:a2:c2:ba:3e:83:c9:b0:5b:fd:75:ca:
69:88:5f:4e:2f:c6:99:c0:81:0f:51:59:de:08:de:
04:0b:67:9d:6e:1d:4e:6f:6b:4d:b4:46:f9:5f:e1:
d6:05:8c:81:0d:bd:4c:e2:e3:79:88:30:05:d8:ea:
fa:77:03:a5:ab:4b:c7:ea:f8:55:9d:bf:91:df:0c:
19:21:84:bf:df:92:f7:c2:ac:27:0f:32:40:64:b7:
bf:3d:7a:be:f2:7e:56:55:e3:b2:96:c6:f8:18:4f:
46:79:4d:87:ac:48:b5:ec:ff:83:29:3a:b5:c2:56:
d0:aa:9c:b8:58:ba:ac:76:63:87:1d:ae:fa:67:2f:
52:e9:21:2a:71:e4:75:4e:1e:c1:a6:e8:8c:b2:9c:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:17:8A:DE:62:5F:45:7C:E0:F2:82:85:47:A6:F4:97:86:FA:7C
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d5:55:5b:22:39:f7:4d:7c:8d:d9:cc:6c:79:60:1d:b3:f3:
02:00:7a:b6:1c:11:87:b0:26:79:c3:c7:25:ff:d2:3d:8a:62:
fe:e8:89:68:f4:55:86:91:39:37:ba:ca:9b:24:4a:bd:37:cb:
1b:e9:1b:a2:97:3c:e0:e3:11:71:00:a1:71:dd:74:60:5b:34:
6a:ba:3a:c1:17:b0:45:d1:05:1c:68:2e:89:f3:4f:a4:d4:0e:
ff:23:c7:7b:ad:63:b8:f3:41:1a:ee:b2:fa:c8:1f:0b:8c:5c:
24:8f:92:2c:75:68:1e:14:ea:f0:5a:70:28:35:fd:ca:12:42:
31:28:f8:1c:6c:b1:c3:25:d7:8d:71:ea:77:ea:a2:ea:ba:8d:
36:f1:e3:43:0e:5e:08:1c:d0:37:fa:17:b8:b6:b9:3b:e8:51:
27:f0:6e:8f:45:95:3c:0a:7f:c9:29:6d:f3:e9:45:5f:03:3e:
66:f3:68:c7:e7:02:3f:5e:29:4b:1b:0c:4d:66:d2:42:88:f2:
75:03:ad:d1:5e:3d:e0:bd:b8:79:a1:ff:c7:fe:54:5d:fb:98:
ba:03:a7:98:41:d8:e6:16:1a:ab:2e:0b:d8:3b:bf:44:6b:72:
3a:55:29:e6:a4:36:e7:0a:5f:95:bd:25:54:81:8c:7e:2c:a1:
ec:48:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:57 2025 by rpki-client