Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: 5ZjK+LYIJO6RPsvbqwtADd/0jog57BfqvJD7PzXeL8I=
Subject key identifier: D6:FA:0E:1C:C2:C7:E1:9B:37:8A:ED:1C:A2:8C:05:B9:87:58:57:FF
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 0198D660B53C64E1724D6DF15ED9F720E702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 15B7
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: o7a+SAVlg6w34XlUb4oHJK5CUKo0WIpPAD81AlEjIgo=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b5:3c:64:e1:72:4d:6d:f1:5e:d9:f7:20:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=d6fa0e1cc2c7e19b378aed1ca28c05b9875857ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:60:95:5e:3e:6e:bf:8a:80:09:00:78:77:
cb:f4:2a:d1:0d:00:a3:d8:70:9f:b8:3b:b5:82:53:
87:12:93:ea:02:0c:8d:3e:ca:60:f1:72:15:24:37:
b0:3d:97:d4:04:af:84:89:df:73:e5:ae:81:16:19:
7b:bb:7c:7e:0e:5f:fa:b5:df:76:b4:7d:47:e9:1e:
11:35:da:01:1f:90:8f:76:7a:69:ff:56:ff:49:43:
98:44:98:87:a0:47:40:43:47:7e:59:e2:c6:34:d8:
a8:a2:95:7e:54:9e:c3:10:0a:cd:9c:0f:71:24:42:
69:7c:15:a3:60:53:70:85:08:8e:c6:83:7f:19:e2:
7c:2c:f9:cd:f8:39:6c:62:d4:ec:e1:9f:71:ff:5d:
18:74:05:7c:95:01:d1:e6:8c:23:a6:e2:2d:bd:a5:
ea:c9:ea:a8:2c:ed:df:c6:13:b9:1d:a1:f1:b7:1f:
f8:19:eb:68:98:0f:bc:f4:19:2d:d3:5a:de:bc:31:
47:19:ae:d3:fa:89:36:eb:6c:06:ab:d2:99:ee:fe:
43:73:3e:c7:60:92:e5:6e:18:04:53:4e:a1:8b:8c:
66:c1:12:bf:5c:53:65:dc:60:8d:b7:aa:c8:a3:0f:
60:55:49:86:1b:96:74:7b:a4:a5:e2:db:8b:65:f0:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:0E:1C:C2:C7:E1:9B:37:8A:ED:1C:A2:8C:05:B9:87:58:57:FF
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:61:15:3f:ff:a0:9c:fc:e9:2e:2e:b0:9e:f9:5f:01:1b:c2:
f9:f2:49:64:6e:de:70:0d:83:cd:f7:15:43:98:84:0a:e4:93:
12:3e:50:d6:a2:2e:14:b4:60:44:4a:49:4c:b4:4e:fb:f9:ef:
7f:5d:b1:aa:b6:ae:6a:f5:f5:2f:20:7a:67:94:49:f6:39:d3:
ef:94:10:39:40:9c:e7:ed:dc:95:8a:51:76:fa:ca:72:fc:ef:
df:b3:12:3e:fe:d0:ec:59:60:0c:c5:ce:04:cf:44:3e:fb:e6:
20:b3:a2:16:fc:71:02:cc:1a:7a:30:14:66:ed:47:d2:ce:a6:
fe:67:ad:ca:6f:e4:dc:b9:94:73:ad:8c:c8:72:7f:a7:b5:70:
3b:c5:e7:6d:15:e7:4f:79:11:aa:c5:39:37:de:1c:16:a9:a0:
f3:2d:8a:3a:aa:6c:5b:20:19:53:0d:29:b9:3e:2d:86:c6:e9:
d7:bb:b3:34:04:10:15:26:e3:6f:8e:8f:a1:13:d4:d1:32:cb:
e9:15:5d:01:8d:68:93:d8:50:0c:e3:1a:65:46:b9:86:fd:69:
0e:d8:49:cc:99:11:5f:b9:9a:4a:13:72:68:31:62:98:4c:aa:
13:88:af:74:16:84:9a:14:00:94:3b:6e:86:f9:ed:62:71:4f:
57:e2:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:35 2025 by rpki-client