Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: ixKMssgKSM5Z1YbciyWR5EAy/rBs3LtBINyrH9cbIqc=
Subject key identifier: 34:42:61:14:23:4E:0A:8F:00:4A:ED:03:28:7C:ED:1B:AB:5D:4E:13
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 1D19FE3599C38F4A8D86F0E37F4B7CC4034F0C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 84
Signing time: Tue 04 Nov 2025 11:52:06 +0000
Manifest this update: Tue 04 Nov 2025 11:47:06 +0000
Manifest next update: Wed 05 Nov 2025 15:38:06 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: lbNXdGRc8Y2dvwnw21XTVjhKgCJxuwbGuoHfzvDD9ZA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:19:fe:35:99:c3:8f:4a:8d:86:f0:e3:7f:4b:7c:c4:03:4f:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Nov 4 11:47:06 2025 GMT
Not After : Nov 5 15:38:06 2025 GMT
Subject: CN=34426114234E0A8F004AED03287CED1BAB5D4E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:b9:fa:cb:4a:c6:61:f2:eb:85:d6:8f:f9:
f3:5a:1f:07:cd:f0:e5:9f:9c:1c:7b:dd:9e:db:0c:
bd:23:18:74:01:51:8c:71:4f:ad:f6:29:00:12:1f:
13:80:bb:14:18:40:34:32:fb:00:08:85:ec:b3:b7:
f0:e0:d5:5c:8d:d3:dc:d2:a0:91:ba:af:89:a2:ab:
78:1c:91:c6:b7:b0:b5:39:99:6d:26:60:96:fe:fa:
5e:2b:d9:77:2e:ff:67:80:63:e0:30:b8:35:98:32:
4d:a1:85:55:67:90:ce:fa:2c:ec:c5:49:3b:56:0a:
87:b6:0d:86:6a:03:6b:5a:2c:b0:8d:b4:b2:4d:d2:
6b:59:91:64:f2:a8:4e:e2:48:5a:dd:73:20:78:87:
be:f2:b3:16:9d:66:0d:b3:f1:6d:75:01:11:ab:cd:
8a:a0:15:1a:06:a5:7e:34:d7:d7:10:93:9b:60:b1:
71:ad:fc:cc:75:fd:60:d7:e2:1c:84:ee:21:bf:53:
04:8f:dd:b4:a5:40:59:8b:1b:6b:71:d6:b9:7a:ca:
61:ca:4e:f9:37:29:16:a6:82:75:05:c4:9a:84:60:
39:bc:e0:00:20:fa:99:ce:32:af:2d:d9:9b:9d:79:
e2:2a:7d:77:4f:aa:db:13:c6:79:e1:b5:d9:17:53:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:61:14:23:4E:0A:8F:00:4A:ED:03:28:7C:ED:1B:AB:5D:4E:13
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:2c:de:fb:02:e2:93:10:68:1d:2c:8d:30:6f:a5:01:d8:
c8:0c:25:3e:b9:5a:f7:cf:7b:59:ec:4d:f9:f2:95:5e:62:f8:
ae:32:e3:12:e3:6c:c9:e7:9e:e0:d4:b0:36:d0:d1:02:26:1f:
ca:b0:92:fc:55:d4:35:c3:46:e4:e2:47:17:bd:e6:89:84:bc:
c2:77:24:a4:7f:a0:50:84:d8:5e:30:81:a8:72:0a:aa:df:08:
78:b2:d6:91:6d:12:f6:bb:11:64:ef:8a:07:e9:8b:5a:4b:7f:
6b:0c:bf:21:2e:5d:c8:d1:03:dd:29:02:11:80:b9:60:b4:a3:
c1:89:ae:a6:08:ec:5e:7f:42:01:44:90:b3:da:e6:84:3f:69:
b7:67:b8:c9:ea:06:d0:a3:98:1f:98:46:eb:ee:17:af:ee:52:
c3:0c:2b:af:e7:79:71:19:02:10:8c:98:5d:5d:22:27:09:e5:
c3:7c:f0:10:db:47:21:80:8d:d4:65:49:35:38:e0:f7:1b:fd:
e0:06:44:5b:23:2f:47:ca:92:a3:cd:d4:8a:7c:6a:8f:9d:f8:
87:c1:27:8c:42:68:dc:72:26:01:c9:94:0c:0e:5d:d0:ac:4f:
cd:76:f1:eb:21:cb:75:ab:ac:aa:ac:fa:fa:f3:8a:71:a3:f1:
01:7a:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:18 2025 by rpki-client