Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: BykZRP8GoAqFeYaTs6FCsrk3AW3z3B/U+MGxoLPfTEc=
Subject key identifier: 7C:BA:3D:0D:B5:5E:C8:23:BC:A1:5F:F3:09:E9:A8:11:03:D4:0F:EF
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 0199FF226B092E06C1923EABD96F9B62E6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:09 +0000
Manifest this update: Mon 20 Oct 2025 01:01:09 +0000
Manifest next update: Tue 21 Oct 2025 01:01:09 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: fVjZthGCKcjLkGLsl79FHx1+z1/mjPSJNpS/nPDUT/4=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:6b:09:2e:06:c1:92:3e:ab:d9:6f:9b:62:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Oct 20 01:01:09 2025 GMT
Not After : Oct 21 01:01:09 2025 GMT
Subject: CN=7cba3d0db55ec823bca15ff309e9a81103d40fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:24:d7:3b:59:80:f1:84:65:6b:9c:f3:ac:
87:fa:40:e6:1d:66:08:c7:75:34:7c:2f:76:12:24:
6b:91:8a:cc:71:f2:f6:4f:5c:cf:0f:63:95:79:7a:
91:3b:9e:9f:54:4b:dc:82:a2:24:b3:65:6b:a5:91:
f5:18:61:58:50:c8:ca:13:29:c7:aa:5b:bc:d1:a1:
51:d1:1a:ea:a0:11:a3:2d:99:27:e4:eb:29:b8:29:
5f:69:2f:61:df:4f:92:b3:60:52:16:df:6a:ce:1d:
6f:d0:4d:88:66:d6:0b:bc:48:b0:28:a1:d9:a1:1f:
27:ef:03:09:a5:df:20:09:80:ba:a5:b2:04:1b:1a:
a8:3c:52:47:bd:15:67:65:44:7d:4a:f5:ea:52:91:
4c:06:e1:63:88:c0:9d:58:ae:b5:03:9b:9e:67:33:
47:ca:d3:94:1c:25:7b:bb:c0:12:95:2a:ea:8e:8b:
df:f1:5e:00:91:93:2a:38:80:f4:b1:07:f0:70:4b:
8c:8c:05:b5:87:f9:51:5e:eb:59:32:e6:1d:92:a7:
d4:66:f8:23:64:92:17:f3:35:2e:ba:9e:ac:f4:73:
5d:de:90:35:fe:98:c1:f8:f2:e7:c8:59:24:9b:55:
fd:64:32:a5:3d:bb:c4:53:cf:02:a0:61:c5:79:b1:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:3D:0D:B5:5E:C8:23:BC:A1:5F:F3:09:E9:A8:11:03:D4:0F:EF
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fa:de:af:58:7b:88:82:74:96:47:1c:e8:70:5a:a2:12:72:
f1:10:d8:02:73:9b:90:43:f7:90:71:cd:77:1c:d8:74:51:4d:
13:0e:99:7b:14:15:1d:4d:a5:0d:2c:78:d7:c4:b2:64:ca:b1:
f2:a7:bd:7b:24:4a:54:39:23:ea:b9:7c:f3:c3:73:78:03:4d:
9e:a9:52:ac:ad:35:56:e1:0c:6e:78:bf:d5:17:d1:51:15:36:
ee:3e:cd:21:09:f6:86:b6:78:7c:72:6b:35:1d:90:19:e1:5d:
a7:b7:0d:45:48:d0:94:a6:81:0f:9a:a4:49:33:98:f3:53:26:
55:ed:73:62:bd:37:d8:92:7e:89:94:68:96:6e:1e:56:9d:89:
10:e4:43:b3:d1:2f:cb:01:0d:98:88:83:b5:91:7a:ad:d6:7e:
bd:62:04:d5:b4:91:bf:d1:00:c8:89:44:77:40:76:de:0d:7d:
16:83:66:e4:af:c6:1d:0e:ab:7e:08:9c:68:0c:aa:31:42:ca:
6e:90:7c:4a:26:a8:ab:05:02:87:64:e8:12:18:44:d8:dd:10:
74:49:1f:c7:99:73:be:e7:24:a8:1d:b5:f1:a9:16:41:60:0d:
09:b1:5f:70:38:ab:8a:12:23:07:70:a9:ce:17:6b:b5:69:76:
d5:ad:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:43 2025 by rpki-client