Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: wqk03aSvRe+LsFf12kyMx6R9UmbO2nZSiIvhzmfAkvQ=
Subject key identifier: D2:A6:B6:5A:EB:14:1A:B6:29:35:A8:B3:FA:30:0E:3B:C9:DA:16:A6
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0199FE46E59D38AF48FB36E92B896C32A6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0CF7
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: C/3F6KCREbYXhPJk+ZlcdXckNLP5Ou4D8CXqTeUeRS8=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e5:9d:38:af:48:fb:36:e9:2b:89:6c:32:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=d2a6b65aeb141ab62935a8b3fa300e3bc9da16a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:fb:46:1a:45:e5:e6:c8:b0:c7:a0:0f:79:
7a:1f:e4:5f:5c:b6:81:14:ea:33:a5:04:e0:c3:7c:
20:95:4f:ab:9e:3e:fc:b1:a6:ea:2a:ff:7b:fe:8c:
08:88:05:1b:b1:68:ac:da:65:04:d8:fc:bc:11:ba:
54:2f:cb:10:29:b7:c5:cf:3b:0c:b5:3d:c7:06:fc:
f2:b4:60:11:21:92:bc:97:6d:9b:56:08:b0:62:6c:
e3:69:cf:c3:02:48:9e:2a:d1:c0:fb:10:4a:9f:4b:
71:49:b1:60:fa:53:8f:6b:75:94:ed:95:12:d0:67:
d8:f2:f6:78:0f:ff:6c:20:e8:50:a7:7e:6b:4d:16:
9e:08:ae:fe:19:5f:eb:dd:f7:d5:85:10:1d:dc:58:
1c:c8:eb:33:71:75:98:ea:22:a8:35:be:be:91:93:
cb:de:ef:e7:a2:b1:ed:79:a5:96:36:b7:eb:47:79:
73:ef:be:9d:11:0f:cc:75:cd:d2:33:5b:d7:26:e6:
ca:f8:c5:4f:10:e9:22:c4:d3:c4:f6:3b:8b:6e:0c:
e9:64:ec:0d:83:a3:c8:7a:38:98:62:bb:75:1e:33:
70:0d:d8:fd:77:d2:33:ab:af:c5:e1:fd:d0:6a:a1:
8e:aa:ec:30:29:d8:b3:50:3f:16:44:e2:d7:d5:fe:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:B6:5A:EB:14:1A:B6:29:35:A8:B3:FA:30:0E:3B:C9:DA:16:A6
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7f:a9:1b:9d:29:c0:18:bd:2f:de:4b:84:e1:6b:07:6a:a4:
a4:cd:b0:12:81:69:fd:35:a3:43:fa:12:f6:a2:fe:f5:0d:2f:
87:56:de:d6:1a:01:ff:9e:f7:ef:92:58:6f:6b:d7:84:20:12:
ed:c4:ff:a8:1c:e0:aa:40:e8:2d:9c:c1:27:5f:98:b4:87:91:
dc:87:64:6a:9a:89:31:81:c7:a0:e3:c4:ba:1a:2d:7a:37:c8:
21:47:5e:ae:84:4f:ef:b1:be:62:0e:54:67:eb:c2:5f:66:46:
81:7f:e1:29:21:c8:01:c3:8c:b5:0e:4c:b2:80:e9:ed:cf:d9:
98:2e:e8:62:dd:75:e2:74:3a:87:19:92:9b:30:c2:6b:0a:1a:
49:d8:7d:19:14:72:64:ef:a6:60:dd:c9:84:1e:ab:56:95:c2:
75:2e:08:90:f6:87:89:1c:8e:dc:8b:1d:3f:27:ae:13:0b:bc:
9a:a8:78:4f:59:cb:26:70:61:7c:a2:a6:4e:c0:2d:e6:39:33:
14:44:d2:19:96:11:59:c4:7e:a5:2a:11:a9:75:07:47:ea:dc:
67:9e:7d:16:e5:3d:52:ea:4f:04:69:6e:14:9f:6b:83:94:a0:
87:d9:74:72:ee:d5:41:9d:c8:cf:a5:3d:b2:5c:2c:84:58:ad:
36:be:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:07 2025 by rpki-client