Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: ebX2Sqt2aBFgNV5qF/urTZjTHelMLTIYq09VBou8K1c=
Subject key identifier: 0C:C5:65:3F:3E:82:14:BE:32:0A:63:7F:3B:FA:2D:55:68:37:42:C3
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 0199FBEBB026D4AC785E2E7CE7D8B832449B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 164F
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: wvirC4IdHCma8sdcQfH4KoMY1zkO9LCdP4ghQrUZFMA=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b0:26:d4:ac:78:5e:2e:7c:e7:d8:b8:32:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=0cc5653f3e8214be320a637f3bfa2d55683742c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:a9:9e:7b:eb:e9:ff:84:03:0e:f7:98:da:
91:8a:c2:ee:33:d4:18:cb:a0:04:d1:c2:78:30:46:
eb:d4:38:07:cc:80:6f:55:ff:41:d2:24:6b:39:ff:
58:d5:37:e7:a0:37:46:6c:75:c8:f9:3d:70:ef:5a:
ca:37:8a:75:98:77:88:6d:dc:13:eb:76:0c:ef:2c:
b4:e5:03:c2:89:a3:ac:ef:d2:41:98:7a:52:e1:45:
89:63:7d:fb:de:4f:e5:f7:e4:19:95:ce:7d:bc:e8:
57:6f:3f:c4:82:0e:35:46:8a:da:7f:22:0e:25:3b:
37:30:c5:36:9d:0d:bb:b0:f1:c6:9a:31:37:df:3e:
b0:1c:ed:4d:ce:2c:4f:bc:68:36:a3:b7:79:9d:ed:
f5:0b:8a:f8:bb:06:aa:3d:d0:21:87:12:2f:d2:29:
ac:b1:9b:66:4f:c6:b1:fa:43:d7:b6:11:6f:9c:8c:
41:d2:40:41:4a:df:83:a3:42:af:99:25:e5:64:d8:
2a:b4:ef:3d:d4:95:c0:7b:93:5c:73:8c:3e:7c:85:
1b:22:cf:18:87:fe:a1:01:ea:da:24:da:54:0c:7a:
fb:51:0f:16:51:85:f8:6f:8b:9d:cc:f9:e6:73:89:
81:18:95:92:9d:36:7a:b0:13:c7:e4:16:c7:79:1e:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C5:65:3F:3E:82:14:BE:32:0A:63:7F:3B:FA:2D:55:68:37:42:C3
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:cc:59:a0:f4:d0:2e:83:59:87:72:ff:30:73:56:64:3a:
bf:ed:27:5c:d4:8b:6f:50:f9:41:84:e2:14:3e:b7:f0:2a:ee:
a7:97:49:60:ad:ab:f1:80:a0:33:d7:99:b6:cd:98:d8:f2:bb:
ad:df:1e:18:79:45:aa:8a:8e:67:d1:d6:9c:08:35:d1:0b:c1:
48:0a:39:7c:3a:39:3d:47:f8:b7:db:0f:7d:e6:c8:4f:1d:b2:
8e:ca:d2:3e:46:fc:b2:92:fe:f4:5b:de:89:a1:1f:fe:87:e7:
d7:47:f8:7f:c1:3b:06:00:cd:e8:93:57:e5:75:eb:50:7f:7e:
e7:fc:1e:a0:0b:d6:1d:46:0f:10:19:52:4a:65:de:aa:d7:7f:
91:bd:86:53:55:65:36:e6:77:32:bf:bb:06:0f:f5:d7:e0:fb:
24:01:c6:61:68:06:5b:43:cd:e4:61:98:32:3a:70:94:6a:50:
22:e7:25:6c:86:ed:ab:95:29:7f:43:fb:07:7c:4d:71:55:83:
94:90:b2:3d:2c:31:5e:a0:50:f4:42:40:f2:59:45:5c:26:63:
e5:7b:44:63:94:08:ea:9d:42:e4:03:70:47:9c:1c:d2:66:b0:
03:79:14:d6:e7:85:3d:0b:72:f9:0b:c5:5f:fb:64:14:63:7a:
c1:b4:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:09 2025 by rpki-client