Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: KYQc+ZvOe+D6aL3zJ/3lBxMkuXV5zZLLRNIidnHDzpI=
Subject key identifier: BA:03:E6:B4:73:A8:23:FB:3F:CD:AD:A7:C3:45:79:87:CE:ED:8E:F5
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 01989524BA8874AF46214E03C40725DF58D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 0165
Signing time: Sun 10 Aug 2025 18:01:08 +0000
Manifest this update: Sun 10 Aug 2025 18:01:08 +0000
Manifest next update: Mon 11 Aug 2025 18:01:08 +0000
Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: E228YNajUnlSpP6BL6c24m1zYoqYD62d9jo9vkCm/mA=)
2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:ba:88:74:af:46:21:4e:03:c4:07:25:df:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Aug 10 18:01:08 2025 GMT
Not After : Aug 11 18:01:08 2025 GMT
Subject: CN=ba03e6b473a823fb3fcdada7c3457987ceed8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:36:85:78:75:b9:d0:f3:35:1d:be:62:30:
89:9e:d7:2b:c0:00:63:6a:d0:7d:74:79:b0:f9:a4:
95:30:85:f1:07:e3:a6:f4:0b:7d:8b:e5:36:e1:4a:
e4:9f:ea:8f:bc:14:f9:b3:21:60:49:26:d3:0e:44:
36:32:1e:1b:ce:d6:c2:aa:fa:10:51:ec:b1:67:e9:
2d:2e:14:fb:c8:dc:9e:a1:db:b9:29:a4:98:c1:b7:
3c:cb:63:4b:7d:dd:66:ca:99:48:4a:66:bb:b3:96:
dd:8a:6b:11:e0:d7:e1:ae:da:8a:0e:07:6d:de:79:
08:2f:20:61:a9:a5:a8:e4:d0:ba:e5:5a:fe:da:bf:
ab:ee:de:b2:71:8c:8e:bf:37:82:f0:3a:e1:d2:4d:
2e:b9:9c:6d:c2:29:0a:94:80:96:51:f5:c8:98:94:
d5:eb:e4:5e:c4:69:95:17:99:9b:90:89:24:6e:b2:
4d:47:de:75:80:50:6b:f3:74:43:a5:86:9c:9d:1c:
45:d2:fd:a3:e6:9b:a0:d7:f7:cb:91:1f:c4:80:06:
d8:24:ff:8b:2a:d8:e1:89:98:e9:7a:c0:52:1a:2c:
26:b8:7f:fd:15:e9:88:dc:ff:b5:cd:41:41:cb:08:
73:62:2f:ec:30:75:7e:32:e9:b5:52:08:ae:bf:8c:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:E6:B4:73:A8:23:FB:3F:CD:AD:A7:C3:45:79:87:CE:ED:8E:F5
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:08:fc:35:c3:78:1e:68:a4:2e:04:4a:d5:86:a1:2b:fc:
f1:7a:8f:61:fa:2b:e6:70:29:75:54:b5:a6:f1:07:15:a6:05:
cd:f6:99:04:27:69:2c:1f:a0:e7:f0:dd:4c:e1:8f:fe:47:31:
09:c8:46:59:54:6a:51:52:1b:87:8c:63:60:ee:a2:cf:a1:f0:
a2:b6:17:ca:5e:20:66:a8:13:de:d0:6d:95:e6:fe:12:27:7e:
02:c5:f2:2a:f6:12:fb:f1:ca:56:41:a9:e1:5f:a1:89:9c:ec:
cc:7a:89:bf:f5:fd:d0:12:99:95:49:64:fd:dc:02:f1:4e:b1:
89:a0:8d:54:5f:09:3f:fc:6c:19:b3:01:98:83:52:d9:b1:c8:
4e:05:53:d7:aa:28:6d:ba:ec:d3:3a:57:17:39:34:a3:1f:46:
16:a1:a1:1c:84:77:58:10:cd:21:e8:9b:7b:2c:b8:48:b3:21:
87:db:58:d3:05:27:e6:fc:6b:75:49:60:4e:65:47:ba:73:ee:
9a:45:e9:a5:34:96:80:2c:25:fc:ed:24:ab:d2:3a:66:c9:cb:
9b:a5:9a:aa:61:ae:2a:d5:04:9e:4d:11:71:47:e1:a5:ed:81:
f2:8e:8d:53:00:21:41:80:38:8e:9a:02:e1:dc:9c:21:98:32:
b2:c7:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:28 2025 by rpki-client