Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: 0L7LkrX7i0sMkropIGW43HtoAL9tzJa+epjhLbGsh/U=
Subject key identifier: 1C:7E:F6:60:B3:81:B3:85:E0:BB:6D:0D:B1:B8:38:54:93:F4:AE:70
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 0199FDD99052D49A852A3C5E8C4777377C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 029F
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: Eob3BrhtRuwAglW4d6iQkOdO/71jA1FYASOJ5dIF3Go=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:90:52:d4:9a:85:2a:3c:5e:8c:47:77:37:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=1c7ef660b381b385e0bb6d0db1b8385493f4ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:9c:36:fc:14:f7:dd:62:79:68:ff:70:1f:
d1:77:e2:72:d9:d1:43:72:a0:9c:4d:62:12:53:26:
96:2b:e6:de:4a:42:e7:9e:21:81:88:79:95:d4:07:
06:36:22:67:6f:59:68:57:f2:f8:06:66:c1:41:97:
7b:29:e4:27:a9:e1:14:dc:55:5f:17:f7:32:7d:f3:
89:ad:7a:0c:00:73:1c:e4:05:31:11:4c:ad:01:a5:
13:4a:60:71:bf:e4:68:82:9c:13:1e:a8:b4:40:94:
20:e4:f3:e4:f0:b4:eb:1e:02:12:23:c1:b5:91:1e:
13:7e:3b:13:52:f1:88:2f:c8:1f:99:eb:57:99:b4:
2e:9d:9d:49:43:fa:3f:68:e1:e1:10:5c:54:db:fb:
bd:e8:d8:c1:31:a4:1d:bd:89:51:15:a6:e1:6a:ab:
01:e2:8f:08:bc:1a:f3:d2:ad:3e:ea:3f:9c:1d:11:
73:99:89:f9:65:17:41:32:4b:b1:79:ab:6a:89:83:
08:a1:c5:81:6b:17:32:0d:07:a5:02:ab:b8:62:b6:
4f:7b:b8:2d:91:f3:ed:ac:2a:b0:8a:8a:d3:68:0c:
8b:97:21:98:1d:7f:87:a3:73:16:d3:40:c8:0a:a3:
8e:b5:2c:03:8a:54:c2:df:73:5d:b8:d5:a3:48:dc:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:F6:60:B3:81:B3:85:E0:BB:6D:0D:B1:B8:38:54:93:F4:AE:70
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:07:ba:9b:67:ce:dc:f1:20:6c:f2:ee:40:31:0c:27:25:df:
b0:a9:83:57:1b:cc:d4:d0:18:ef:e6:43:12:06:13:de:30:4f:
31:39:9b:b7:a1:75:87:b7:61:fa:51:6c:38:2f:7e:00:7f:02:
50:7e:33:17:0e:47:cc:34:97:55:dc:02:72:e4:a3:15:6a:0a:
6e:0a:88:52:e0:cf:77:3d:49:2c:3b:d1:f4:2a:31:08:97:ae:
15:b7:47:3e:f1:6b:44:ee:67:af:94:a2:49:ef:b2:fe:f2:32:
fd:ce:1c:f1:5b:eb:c2:e1:56:0b:33:95:ca:da:a0:4e:16:2a:
46:37:dd:f7:38:50:96:e5:5f:c0:a1:8b:8f:8c:55:76:75:68:
4c:49:0c:3a:37:78:55:4b:46:90:70:fc:07:0c:bb:76:78:8e:
15:1b:3f:83:79:a8:c8:50:ec:12:1f:9b:e4:43:3e:36:83:d3:
27:1b:41:34:b6:fe:02:a0:11:6a:25:c0:62:44:66:9d:cb:cd:
64:4c:64:94:9c:1e:4e:ce:31:cd:f3:78:55:39:68:8c:a8:cc:
52:0b:3d:24:99:7d:09:aa:26:56:2d:49:b1:e9:83:34:12:3a:
14:a5:09:ee:c6:62:75:a6:f6:67:27:2a:4a:70:75:77:7e:03:
34:98:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:14 2025 by rpki-client