Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: nub1+xDSbO/sICix+Jg8Ymgdv6w3P28upe7+NEJsuws=
Subject key identifier: 21:1D:41:07:2A:98:B9:17:B0:FC:E9:53:C2:72:DA:D1:7F:68:B0:3E
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 019873E43800F304AEB0766B7CB1A6CC0B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:03:12 +0000
Manifest this update: Mon 04 Aug 2025 07:03:12 +0000
Manifest next update: Tue 05 Aug 2025 07:03:12 +0000
Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: 3kWNNv2UbHh+NvdAUk9v6XL1mv8ffGI44Fv2SU8vuFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:38:00:f3:04:ae:b0:76:6b:7c:b1:a6:cc:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Aug 4 07:03:12 2025 GMT
Not After : Aug 5 07:03:12 2025 GMT
Subject: CN=211d41072a98b917b0fce953c272dad17f68b03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:11:69:16:6a:6d:18:c8:52:11:5b:f4:26:
47:e3:d0:75:e4:ab:a5:65:53:b3:bc:7b:4d:b8:19:
45:20:09:c7:7d:c0:23:39:6a:f9:3a:81:75:c1:43:
d9:38:64:ff:db:8c:69:d3:68:a5:b5:f2:6b:64:f0:
1b:dc:0f:bd:39:4c:ba:4a:33:d9:88:77:8b:08:6e:
64:d9:c9:ab:3b:4f:98:1e:89:bd:62:e5:d4:05:f9:
15:e2:a3:36:9d:29:c3:0c:7c:08:d5:ff:9f:0b:b4:
7d:10:01:f8:8a:45:0e:71:11:62:48:8c:55:bd:b3:
a0:5e:02:79:31:1c:2d:78:f4:47:1b:43:5e:f8:99:
30:b9:a8:4e:c9:27:21:a0:9e:e7:0b:05:9c:ba:95:
23:7b:68:b8:59:62:69:cd:84:b2:d0:d4:27:8b:94:
98:89:dd:7f:76:0d:19:0e:a5:b9:c0:cd:11:ee:ab:
80:9c:9a:cf:16:1d:28:c1:98:0e:b5:8d:1f:a3:47:
68:41:d7:2b:6e:20:cb:90:fc:f0:35:de:d4:c3:4b:
be:cc:80:2e:a4:26:8d:3c:21:c5:52:e9:f5:95:7e:
68:47:0c:fd:d4:39:dd:47:db:df:85:42:ac:06:86:
1d:5c:68:be:f9:d1:22:f0:ed:91:03:9f:9f:ce:6a:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:41:07:2A:98:B9:17:B0:FC:E9:53:C2:72:DA:D1:7F:68:B0:3E
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dc:be:b7:74:c4:00:94:7a:64:87:53:85:8c:58:2e:e5:ac:
e7:4a:ab:a2:95:6f:13:27:07:b8:52:2f:0b:10:40:29:da:2d:
01:7d:c0:f0:50:e6:d6:d5:49:20:6d:93:4e:8c:20:5d:28:2d:
e5:95:ae:04:e5:6c:13:61:9d:e7:79:57:da:b5:fa:e3:67:fc:
57:37:2e:c8:5c:35:0c:06:34:92:3e:e9:4a:3c:f8:9b:dc:6b:
da:96:f6:a2:b2:63:7c:71:e8:ff:cb:2c:56:2f:db:df:4e:22:
cc:58:6f:be:7d:65:bd:fe:06:8a:12:60:7c:60:70:33:2f:d2:
dc:5c:d5:79:b4:3b:c2:88:7c:7f:4a:8b:e1:f2:6b:1d:7a:c5:
b2:67:18:49:6e:37:d5:4d:db:75:b8:da:9b:22:ba:77:ad:65:
ed:aa:cd:68:ce:13:36:b3:56:80:0d:44:76:f9:cd:f4:43:a3:
ba:76:89:9d:57:44:19:40:ed:d1:8f:2e:d1:b4:15:27:a0:e4:
e9:4c:7d:f9:fe:59:59:e7:af:06:93:63:73:20:08:1b:12:a8:
33:3a:69:0b:8d:4b:eb:1d:18:4c:10:89:d1:c0:5b:3a:a1:a5:
8a:ae:be:7d:a7:67:da:bb:8e:fb:7e:c1:98:89:8c:5a:77:7c:
05:7e:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:30 2025 by rpki-client