Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: teQeC01qsehKHwsx++tkoCRazaNAGFuVY8UvHUS3hnk=
Subject key identifier: 08:A4:12:08:F2:7D:FF:C3:95:44:39:04:74:D8:F1:3D:BF:97:8C:F4
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0198D4E0879F024647E0FF3AC2E8B4CC597E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: HWnidHQMG1JdA8iOXW01BnEx6w51DZrpdaHnc9d3kqQ=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:9f:02:46:47:e0:ff:3a:c2:e8:b4:cc:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=08a41208f27dffc39544390474d8f13dbf978cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:45:30:3b:20:5f:44:9b:b5:0a:40:98:7f:
ba:56:1e:1b:37:4c:c1:c0:f4:01:f2:7a:a9:51:79:
ae:1f:6f:9b:60:d8:4a:9b:8a:4c:bb:d4:79:e3:34:
b0:88:ae:11:65:4f:7b:04:d3:b5:f4:0d:e8:a1:1b:
c7:ec:ce:6f:c4:85:74:4a:3b:ed:59:0b:a7:79:21:
7b:c5:41:c5:2e:10:96:d1:2c:91:11:cf:47:23:f4:
46:8b:b3:71:a1:52:70:53:92:a7:83:3d:56:45:1b:
8b:0c:1f:b8:68:54:51:e2:bb:7c:21:90:f0:04:b7:
04:18:87:ab:d3:4f:f2:7d:1c:94:29:e2:fc:97:82:
38:79:d9:df:a8:9a:ba:02:47:72:53:5d:36:55:43:
94:d7:6f:e9:07:74:3b:c9:52:73:52:27:62:99:2a:
ac:7e:3a:e8:b6:4a:ce:d8:61:64:16:75:0e:d1:f1:
eb:a3:fa:68:8b:51:2b:a6:15:8e:10:01:40:9f:e1:
57:0a:c0:c7:db:a4:42:28:e5:da:96:1d:fb:88:d5:
79:86:08:22:fd:ac:ce:d2:b6:b5:33:ad:f0:ea:b6:
f3:e9:ae:61:55:fd:35:39:16:5f:a0:13:73:59:03:
d7:9f:3e:8f:ca:fc:7c:d7:a1:25:9f:9a:fd:b3:ef:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:12:08:F2:7D:FF:C3:95:44:39:04:74:D8:F1:3D:BF:97:8C:F4
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:bc:45:85:e3:17:d4:56:a1:4f:28:4b:4d:c5:b3:54:e6:
91:8d:1b:9e:95:05:2a:b3:1a:4c:38:f3:73:cc:29:f4:08:98:
76:1a:cb:b8:c1:44:44:a1:b3:eb:c9:96:97:26:c2:66:6b:ef:
43:c5:e3:f9:a8:e4:2a:29:7f:57:ed:1e:30:97:be:f7:d8:8f:
cd:83:b2:d7:99:b8:73:a1:1b:7a:82:94:5b:06:18:8b:a3:f7:
12:09:b6:ad:b1:6f:39:f0:57:a5:e4:cb:6b:5b:a2:ef:35:50:
36:34:6f:0c:26:9d:83:43:84:08:77:75:03:47:57:15:9f:17:
de:9c:1b:41:ba:b1:3c:22:d0:3a:3d:72:e3:50:e4:d5:22:71:
be:3c:54:c6:c5:1d:77:6a:43:ec:ec:1e:53:f8:35:e3:29:30:
cd:dc:08:5c:ec:92:29:62:42:d7:9d:15:31:06:73:69:65:94:
48:e8:41:13:99:86:c5:b3:36:7a:bf:91:57:16:f5:59:ab:71:
d4:91:ab:7f:7a:a8:e2:0c:67:e0:a4:13:11:40:da:8c:c2:0b:
36:d5:e9:13:46:4d:80:11:bf:d3:cc:55:b8:42:be:61:a3:26:
3b:86:31:ba:3a:dd:5c:e7:cf:73:44:b9:7d:22:46:6d:ee:cc:
ca:89:e5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IefAkZH4P86wui0zFl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjUwODIzMDMwMjIxWhcNMjUwODI0MDMwMjIxWjAzMTEwLwYDVQQD
EygwOGE0MTIwOGYyN2RmZmMzOTU0NDM5MDQ3NGQ4ZjEzZGJmOTc4Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvVFMDsgX0SbtQpAmH+6Vh4bN0zB
wPQB8nqpUXmuH2+bYNhKm4pMu9R54zSwiK4RZU97BNO19A3ooRvH7M5vxIV0Sjvt
WQuneSF7xUHFLhCW0SyREc9HI/RGi7NxoVJwU5Kngz1WRRuLDB+4aFRR4rt8IZDw
BLcEGIer00/yfRyUKeL8l4I4ednfqJq6AkdyU102VUOU12/pB3Q7yVJzUidimSqs
fjrotkrO2GFkFnUO0fHro/poi1ErphWOEAFAn+FXCsDH26RCKOXalh37iNV5hggi
/azO0ra1M63w6rbz6a5hVf01ORZfoBNzWQPXnz6Pyvx816Eln5r9s+8SDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAikEgjyff/DlUQ5BHTY8T2/l4z0MB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg28RYXj
F9RWoU8oS03Fs1TmkY0bnpUFKrMaTDjzc8wp9AiYdhrLuMFERKGz68mWlybCZmvv
Q8Xj+ajkKil/V+0eMJe+99iPzYOy15m4c6EbeoKUWwYYi6P3Egm2rbFvOfBXpeTL
a1ui7zVQNjRvDCadg0OECHd1A0dXFZ8X3pwbQbqxPCLQOj1y41Dk1SJxvjxUxsUd
d2pD7OweU/g14ykwzdwIXOySKWJC150VMQZzaWWUSOhBE5mGxbM2er+RVxb1Watx
1JGrf3qo4gxn4KQTEUDajMILNtXpE0ZNgBG/08xVuEK+YaMmO4YxujrdXOfPc0S5
fSJGbe7Myonl8A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:44 2025 by rpki-client