Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: UIQsD2o5UhiVUzXVe6M65U6rS/EgFGc7ts06TrJRKKs=
Subject key identifier: 6A:29:C1:CF:4B:A7:E4:12:D8:7F:7D:16:D4:C9:E0:74:C8:90:FB:A4
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 019A4DE212B484F309CD515FD78A41C20756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 11C4
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: MJPO+0EypdvOGDK0cAMk7HFrr8hQDp9fxY0n2RYHxBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:12:b4:84:f3:09:cd:51:5f:d7:8a:41:c2:07:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=6a29c1cf4ba7e412d87f7d16d4c9e074c890fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:02:f5:fa:bb:50:fc:a2:3d:88:03:65:d8:
f7:c4:b9:bc:63:c2:b1:1c:6f:ca:2a:cc:b6:2f:d3:
e7:de:f6:b9:4d:5d:3f:86:7a:68:8d:d9:1e:57:eb:
82:40:b9:1e:83:08:26:64:4b:cb:65:0a:ec:66:9d:
f0:48:d8:a5:ce:d7:4a:35:fd:c7:df:bc:2c:05:c1:
95:12:82:5a:06:66:d7:81:ec:85:96:3b:98:ce:b1:
81:a6:24:58:78:ef:f4:a9:88:d0:f0:28:b6:b1:08:
e5:7a:19:e9:3a:a8:6b:56:d5:a2:19:e8:5b:0c:b1:
4a:7a:b7:01:ba:e5:2e:60:20:26:0a:39:c4:4c:a9:
df:e2:b1:e7:9f:a2:9a:a3:03:1e:58:35:f3:02:1f:
42:39:0c:ec:04:b9:50:69:b3:aa:31:7a:19:56:df:
ae:c9:a3:2a:dd:05:6e:37:d3:ad:21:f9:f3:d8:8e:
8b:17:90:3a:8a:28:f1:61:e7:9f:5e:9b:1a:85:e4:
d4:6d:c3:76:f3:3e:2a:88:34:83:39:80:18:9a:57:
df:34:ab:e1:23:83:1a:89:79:b6:3f:74:f2:e3:ec:
02:4b:f1:f2:d8:95:80:ae:42:17:71:c9:11:77:bf:
ca:b6:d9:83:a4:c9:9a:5a:29:1f:8f:63:a2:1f:70:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:C1:CF:4B:A7:E4:12:D8:7F:7D:16:D4:C9:E0:74:C8:90:FB:A4
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:c1:38:be:c2:df:f7:0d:b0:29:56:94:e9:f7:49:03:d2:
44:63:08:d8:2b:24:52:a5:d4:41:e2:67:ff:aa:18:01:60:83:
68:72:69:d4:a5:62:5c:3b:88:4a:b9:60:ae:88:91:cd:2b:12:
e0:d7:fc:f0:ed:42:00:39:97:bc:1a:c8:64:95:4b:01:3b:08:
2f:2c:45:cd:b9:ee:ec:f4:6c:23:5b:f1:f4:0d:57:e6:d7:b4:
71:0f:17:7f:be:a7:00:c7:18:3c:8f:cf:a9:4b:d0:98:17:ad:
ba:30:30:6b:20:7e:1e:b5:c3:16:6b:55:83:fb:4b:38:ec:b3:
b3:35:a8:76:e8:3e:dc:03:0e:dd:b4:8e:84:45:04:10:59:31:
99:1c:52:a1:69:f8:f5:f0:3d:f7:d6:14:6d:5a:ac:5a:7d:86:
2b:08:d3:cf:06:c9:d3:30:94:6f:ec:06:83:0f:1c:3e:2a:c8:
2b:ca:51:cb:ce:01:5e:23:d7:4c:3f:29:f9:7b:a6:27:97:80:
cf:ec:57:51:2c:6b:6f:c2:65:55:ca:d4:f1:e1:b9:2e:9a:1a:
63:43:a0:0d:34:9a:0f:22:da:ac:02:79:3f:07:a9:32:db:5c:
4c:44:e7:39:31:f5:5d:4b:ad:dd:2f:10:f4:05:87:a5:3f:27:
2b:83:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:45 2025 by rpki-client