Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: axdYB4rADvCfz+hs4y/SWWLPk3dHlUl2tb9dXYh085o=
Subject key identifier: FC:05:7B:C4:EE:EF:B9:44:FE:07:C8:AA:76:9E:98:30:FB:F0:57:A0
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 019A4E8655CD6C014DE9C2D396D056115E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 12A2
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: WZPuuRlts1xclDxT4ptUuefrDGb627roykESVsjxNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:55:cd:6c:01:4d:e9:c2:d3:96:d0:56:11:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=fc057bc4eeefb944fe07c8aa769e9830fbf057a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:ef:3a:0c:61:c1:63:6e:9b:09:f2:fd:95:
dd:16:c5:84:da:37:46:83:08:6d:5d:eb:f8:92:70:
7f:7e:22:91:fe:bd:85:23:10:53:5c:56:52:02:2b:
c8:3a:77:d7:20:e6:a1:5e:b1:f6:bc:4c:37:ba:74:
06:70:96:81:9d:0e:04:77:47:4b:97:1d:86:b2:f0:
69:51:65:5d:e6:38:bd:17:ea:ea:01:f6:0f:f7:74:
bb:a1:86:1d:f3:22:f8:2f:65:88:a0:e7:40:ca:77:
d7:5b:ba:fd:d0:02:37:ec:59:cd:c5:17:57:ae:c5:
9a:d0:dc:d8:6a:5f:4a:3d:52:b3:59:c2:bc:7c:aa:
66:a6:a7:f1:0b:8a:ea:5e:fb:e2:12:ac:14:66:e5:
46:5d:7b:10:5d:48:fe:c1:64:8b:e0:b0:17:a7:e8:
65:35:ff:a8:21:be:74:74:b3:ef:ff:0d:bf:d7:d0:
e1:1d:98:ef:5b:3b:2c:48:0e:56:5f:f9:57:a6:34:
05:6f:a3:d6:9f:1f:9d:bd:dc:19:a2:d0:24:65:23:
04:1a:02:f5:8e:7c:81:f3:8e:33:c6:02:6c:3c:d7:
61:89:10:9a:fa:1f:40:6e:c2:e7:3b:eb:e6:fa:5d:
a8:1f:93:2d:ee:ea:fe:a1:d2:23:28:49:f0:8b:ea:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:7B:C4:EE:EF:B9:44:FE:07:C8:AA:76:9E:98:30:FB:F0:57:A0
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9f:dd:c9:f7:ee:2f:31:3b:44:b5:fd:19:55:7f:84:8e:13:
2b:33:d0:31:bf:15:cc:14:09:e9:06:09:66:03:5e:94:78:f0:
9d:b3:43:63:ed:90:6d:aa:60:a2:e6:9b:92:1e:d7:b0:f8:0f:
a5:a9:38:02:b0:17:3a:a7:ee:18:ce:00:f5:83:62:f6:43:bc:
af:67:40:83:d7:36:ca:7b:e9:52:8e:45:60:88:f7:b5:f1:00:
70:6b:9d:bc:db:b8:b9:42:69:62:36:13:29:89:e3:66:79:f1:
14:db:d6:80:63:00:43:58:2a:eb:24:aa:83:e7:00:e8:39:ba:
98:d5:1b:6d:97:50:cf:68:84:f4:8a:ad:16:83:20:ee:bd:d3:
21:d4:af:27:8b:8c:12:b2:71:cd:b7:3b:8d:e1:15:a7:82:26:
e4:46:f8:5a:40:3a:5a:68:50:28:75:c8:63:42:b8:59:99:0c:
63:6f:b3:6b:d8:74:46:67:b1:22:d5:f4:c7:76:d6:c6:5e:f6:
29:e5:11:5c:55:c9:91:44:af:6f:29:bb:af:4f:51:8d:72:e3:
c1:f2:3f:44:36:ef:2c:c9:52:f5:94:bb:4c:96:02:7b:f4:70:
f0:7f:ad:23:ac:b2:b1:80:a6:ca:93:e6:4d:05:78:07:c1:dc:
34:24:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:19 2025 by rpki-client