Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: q8aXNPMKJI2nJB2bNC3GVGE7zXvgatVMqG08o4ZhfKE=
Subject key identifier: B7:8D:5E:9F:18:4E:63:83:2B:8A:93:D9:C2:23:A6:43:58:B7:A4:57
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 019A4EF47472CDC27849B314D818B6310152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 1611
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: y7f8u9wwF+tCq1gHKb7LFZ0V9N1SxybHRS5axvNUpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:74:72:cd:c2:78:49:b3:14:d8:18:b6:31:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=b78d5e9f184e63832b8a93d9c223a64358b7a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:4b:35:d8:45:3e:fc:03:1c:ae:48:1b:f2:
ba:fc:45:b3:f8:75:37:69:c4:a3:e3:8e:5f:b5:13:
99:fe:55:09:9f:43:cb:2c:49:77:97:a0:7c:37:71:
8c:72:22:7e:f7:2c:1d:5a:88:67:69:2c:5e:df:0b:
25:b9:8b:f7:f2:7f:f8:c4:1a:c9:04:19:91:ed:1f:
61:46:bf:dc:f2:00:1c:98:22:fb:05:24:76:dc:8f:
8a:0b:36:73:53:63:f7:10:c8:e3:8a:35:0e:d3:0c:
58:6d:d7:bb:7d:4f:9b:57:6f:e6:69:0f:21:0b:41:
b7:2b:8d:9d:6b:22:57:b7:f4:3e:c1:42:9c:e4:4b:
22:d9:14:8f:de:c5:1b:f8:d4:8f:d8:ab:b7:2e:f5:
69:80:46:13:ae:82:d2:2a:ab:35:1a:53:53:73:cc:
94:68:ba:c0:a0:62:55:21:8c:69:4a:6a:2e:bc:2f:
59:82:4b:19:04:b8:5d:b3:05:8a:0f:2b:4e:ce:dc:
92:58:4a:22:ff:f8:a8:18:38:6e:3c:23:7a:cc:ef:
66:d8:89:74:b1:72:17:a5:35:69:e7:1d:ed:c2:fd:
63:ea:58:6c:4f:33:be:30:a3:97:fe:89:4d:7a:08:
e2:90:c4:93:e9:dd:97:b6:1f:ac:5a:5a:77:3f:fe:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:5E:9F:18:4E:63:83:2B:8A:93:D9:C2:23:A6:43:58:B7:A4:57
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:80:9d:cb:c8:9d:65:fd:08:18:6f:b5:81:61:f8:54:cc:
db:34:38:d8:ed:81:d5:c2:d5:4b:5f:1d:29:3c:df:a9:91:59:
99:b5:93:9e:e3:7c:ca:69:a5:17:fc:09:9d:50:b7:fb:05:a5:
ee:e4:1c:5e:a3:50:25:8d:15:d8:9c:f3:b9:c0:71:54:5b:e4:
be:e6:10:4d:2c:6e:e3:f6:68:e5:3c:1e:a1:14:49:6d:f3:2c:
0f:6b:10:ea:1b:85:09:99:b1:fc:de:93:18:72:19:90:3f:e6:
f7:a0:19:56:68:4f:3a:3b:6e:6f:cc:21:7c:f5:2d:e2:7a:66:
58:8e:11:22:65:33:ce:5a:11:74:0b:43:1a:c9:c5:d8:4e:b8:
96:c2:0f:4e:c9:4b:56:08:3b:94:c2:ce:38:33:df:98:c5:f4:
39:7d:15:f1:90:43:5f:db:f8:d1:45:a4:62:c2:9c:31:32:bb:
c2:00:2a:32:75:0d:70:a3:b5:67:c0:ad:77:30:34:e9:1e:57:
59:75:20:4d:d0:1c:21:bf:1e:39:4b:3e:43:77:3f:3f:50:c9:
b7:f4:79:c0:f7:7c:af:5c:cc:16:78:80:bb:74:68:9d:e7:ee:
19:74:2c:69:ad:0d:f0:e5:74:39:10:9d:82:ff:c4:2e:b0:ed:
78:19:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:01 2025 by rpki-client