Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File: ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier: 24FrBIRTjmQJMqazGOeqTW/ryHivHi4DvafrAMr+Vt0=
Subject key identifier: 02:81:5F:74:26:9E:24:7E:42:62:23:3E:48:3E:DA:7A:98:20:DF:28
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 019872624A851571FFA933891D5B4E93D95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 00:01:40 +0000
Manifest this update: Mon 04 Aug 2025 00:01:40 +0000
Manifest next update: Tue 05 Aug 2025 00:01:40 +0000
Files and hashes: 1: d1djO8IkOk-DAQF-B5CVMX1fEOA.roa (hash: ObQ/agHgncZ7LWNprlr11FO8JEBhRFid61XXKnLc8Hc=)
2: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: JWzIa638VATfyG7kpqdToE5CQfdWByF6WPZ96AZMBcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:4a:85:15:71:ff:a9:33:89:1d:5b:4e:93:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Aug 4 00:01:40 2025 GMT
Not After : Aug 5 00:01:40 2025 GMT
Subject: CN=02815f74269e247e4262233e483eda7a9820df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:4a:c6:09:e0:87:d9:06:8f:af:ef:bb:43:
37:f4:4b:e3:69:50:9b:3e:39:a3:64:46:6d:ed:14:
81:09:b2:3a:9c:1f:8e:b7:fa:26:38:3d:82:bf:84:
c6:66:27:bb:02:98:d7:00:d0:15:08:87:d7:2e:7d:
fc:2b:34:34:35:a4:7c:f1:e9:b8:6d:b1:24:35:2b:
ff:d1:c4:57:6f:db:b4:26:6f:5a:54:32:3c:4a:9e:
a0:c8:10:66:3d:13:74:5f:57:f5:5b:57:b6:66:bd:
54:83:72:bd:9a:f9:be:ef:e9:94:e0:e2:45:a5:5c:
f1:a7:e6:c8:73:c0:54:61:ae:dd:a6:ce:b9:c4:8e:
bd:4b:6e:19:27:93:75:69:e4:93:08:a2:27:e9:ac:
24:c5:82:4e:a3:25:e5:9b:ec:b6:b8:9b:fd:ef:78:
3e:2f:4d:99:5f:ac:4d:22:19:31:25:ba:28:9b:0a:
9e:57:ba:2e:cc:be:87:35:63:18:ed:1a:81:93:a2:
3a:14:f7:b5:35:59:d9:d6:c1:31:b8:95:c4:94:4f:
98:86:51:3e:1d:c2:09:3d:f1:9a:86:9d:bc:3b:4a:
ea:bb:59:41:1b:a7:80:d6:dc:6d:13:4c:a2:b0:bc:
cf:ce:0b:ed:60:49:dc:8f:75:38:52:52:13:0c:6f:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:5F:74:26:9E:24:7E:42:62:23:3E:48:3E:DA:7A:98:20:DF:28
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ed:0c:1c:4f:29:7f:af:3b:07:78:22:a0:67:4e:7c:e9:0f:
65:76:c5:60:42:c2:55:29:1a:1a:8d:29:8d:44:4e:f1:05:37:
76:73:2c:35:df:65:86:d7:f1:73:e3:ec:9d:32:eb:a1:70:0d:
54:9c:48:38:6f:4c:eb:fd:f4:f8:87:97:ca:06:bc:23:48:2c:
95:35:4f:f2:f4:d7:df:c1:57:1a:02:cd:59:e6:94:5a:a2:7b:
85:bb:57:fa:45:db:f6:4f:20:66:26:ac:19:18:19:52:c0:55:
31:9e:15:d7:2c:89:00:57:76:f8:83:36:80:4d:ed:61:0a:2c:
c5:45:81:04:66:56:6e:00:ae:87:a2:ed:af:54:8c:0b:ee:07:
e5:37:ed:d0:f8:ee:4f:98:da:f7:48:1c:42:e6:a6:08:94:94:
d2:0e:8f:11:9a:aa:b0:22:17:b4:11:73:12:c2:be:a7:56:55:
50:6d:df:c2:1f:9b:8a:a5:b1:e6:93:04:94:6a:83:4c:a3:3d:
58:c8:fd:6b:92:8a:78:4a:c9:61:0d:87:b2:30:d8:73:5e:3d:
cd:8f:27:d1:8f:ad:f0:74:e8:94:61:89:48:01:3b:23:49:12:
e3:8b:45:36:f1:f6:66:af:9b:15:41:87:9c:dd:ad:e2:80:01:
1c:ad:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:19 2025 by rpki-client