Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: qma4NbsjQRXcURZM5NJvt/u34/2Xv159hL/H5Uh0xqE=
Subject key identifier: 6F:B4:CA:74:00:21:7C:3B:FD:94:43:10:FD:55:D9:84:BC:38:F4:39
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 01987C781D271EA2999829CEC1F7377EF871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 10D3
Signing time: Tue 05 Aug 2025 23:01:43 +0000
Manifest this update: Tue 05 Aug 2025 23:01:43 +0000
Manifest next update: Wed 06 Aug 2025 23:01:43 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: 0VJlW4Jq4ZtfycJZqQwBB+OQuAMQasV67UHyXgmhhiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:78:1d:27:1e:a2:99:98:29:ce:c1:f7:37:7e:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Aug 5 23:01:43 2025 GMT
Not After : Aug 6 23:01:43 2025 GMT
Subject: CN=6fb4ca7400217c3bfd944310fd55d984bc38f439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:9f:2d:5f:06:86:e1:ff:35:f1:37:71:5d:
5a:b7:a1:75:fc:21:27:bd:56:b8:06:6e:8c:e7:0e:
ee:a2:3c:77:6e:a7:ac:42:84:73:dc:15:0e:a7:e5:
42:53:b3:84:8a:0e:f5:ad:4d:17:83:61:1c:09:ff:
1d:c7:25:a7:23:26:7e:ce:6d:1e:21:26:57:e7:dc:
b7:a8:ff:11:f8:b8:84:f4:30:2c:b2:f8:29:04:a1:
e7:7d:07:b7:a2:94:0a:c9:74:80:39:9a:b3:ee:80:
e9:df:06:cc:53:d6:48:9e:b8:df:af:48:6e:0d:26:
a8:57:c6:8f:67:f5:51:de:66:9d:7f:fb:c6:3e:99:
a4:cc:19:26:78:16:c1:d4:2e:70:c6:72:28:80:8f:
34:72:1b:18:3e:e0:82:35:30:34:ca:ca:c1:e0:5f:
cd:bf:b6:35:88:a2:7c:c2:36:7c:89:99:4b:61:f8:
20:6e:ab:cc:35:d0:89:0f:7e:18:fd:24:2f:81:af:
c2:c7:b3:09:3a:86:ff:e2:37:da:8b:9a:06:21:f3:
4f:c4:97:26:f9:cc:ee:0c:d3:d7:d6:be:48:34:8c:
b6:f9:a2:96:0e:65:bc:cb:a7:5e:b1:b5:78:2c:47:
92:b7:04:33:1e:0f:07:1c:24:23:e6:9f:47:42:73:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:CA:74:00:21:7C:3B:FD:94:43:10:FD:55:D9:84:BC:38:F4:39
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4a:ed:2f:c4:11:3e:64:39:bc:15:d1:65:1c:16:5b:bc:1f:
0a:93:45:35:7b:14:e4:b4:a2:b2:bb:0c:4c:ad:8e:27:64:c6:
4e:7c:ae:78:ab:5f:65:17:a5:76:cb:db:99:b4:b4:15:6f:a8:
46:32:ce:c6:2d:ce:02:30:ff:06:1d:53:3c:df:73:be:8e:b5:
cf:6b:40:c7:3e:6f:3a:06:cc:18:ff:b4:ab:ba:f7:4e:38:4b:
ca:d0:74:2f:7b:96:f2:dd:57:09:e6:2c:22:a1:c1:16:06:d5:
79:c3:36:eb:a0:17:45:c2:6a:81:b6:de:a6:f9:da:23:0d:46:
a5:5f:27:05:b3:9b:a3:e1:7f:48:25:11:be:7c:41:ca:75:8c:
5a:ab:5c:22:20:23:4f:af:97:da:89:53:8a:e1:d2:cf:e4:fe:
3a:f5:2c:68:43:d5:14:dd:56:64:15:87:74:09:15:e0:2d:e7:
bf:7d:88:39:49:17:e8:45:1b:35:17:c8:d0:a4:b3:03:57:22:
b2:77:13:dc:e1:fe:73:4c:c4:85:67:f4:f3:cf:2a:4a:b6:d3:
5f:51:37:3f:27:dc:10:f3:87:df:16:18:d0:fe:61:a5:56:3f:
fe:1f:c7:7a:bb:ee:65:1f:90:27:37:e3:be:8a:c5:55:66:48:
95:f0:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:03 2025 by rpki-client