Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: u30/owfAZElbIT3mdhxgZK5L6hG4390ih7eOJCLcVNY=
Subject key identifier: 40:FB:EE:63:82:79:2E:E6:43:F2:7D:F1:DD:41:93:5E:73:6E:E4:A7
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 0198D54E6A04890D557B3F99EF620E9AFAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: q2tRU6ccogz3twbui3wa8F0EWSHB4PLu9T4987y+r9Y=)
2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6a:04:89:0d:55:7b:3f:99:ef:62:0e:9a:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=40fbee6382792ee643f27df1dd41935e736ee4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:1b:17:35:9d:17:19:1a:c9:26:eb:f1:55:
d6:38:69:74:6a:b8:24:59:81:42:a8:ef:61:7a:75:
bf:f0:ae:21:7a:ad:80:ae:b2:39:a4:15:63:b1:bd:
bc:36:4f:67:1d:82:57:25:34:e5:65:a7:d1:44:62:
f6:63:88:6c:93:13:c0:5e:06:f2:f7:29:82:f3:d4:
55:af:1c:9a:df:67:6e:bf:89:ee:38:ce:6e:cf:d8:
f6:a0:7b:fc:58:52:81:a4:5b:c5:c5:ca:fb:12:dc:
1e:0b:08:cf:04:13:4e:74:0b:82:54:45:ba:77:4e:
20:8c:b5:60:df:a8:d6:24:44:d8:03:4a:f3:f5:11:
ac:ff:58:9e:2d:0a:40:7f:20:a2:0f:0f:6e:36:2f:
d3:ef:20:7d:d6:7b:57:a7:83:30:af:6d:5a:df:1f:
a7:ee:05:3b:13:0f:7f:33:11:7e:0a:77:be:e1:c3:
e5:d0:1a:9b:a3:45:65:61:c2:0a:0c:e4:51:59:4e:
bd:7d:db:26:f2:46:fa:14:a6:2a:6c:2e:32:fd:00:
fa:9e:cb:3e:8f:38:20:9d:5e:af:48:38:60:76:4f:
06:3a:f3:9b:04:06:d7:54:46:a0:a0:91:d1:f3:5f:
93:e0:36:ad:aa:1f:09:36:7e:47:4d:ae:6c:8a:63:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:EE:63:82:79:2E:E6:43:F2:7D:F1:DD:41:93:5E:73:6E:E4:A7
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:8d:e4:b3:19:f5:8b:77:de:45:f9:20:3a:24:d7:79:fe:
11:43:c4:54:2b:94:9e:f4:5e:98:a5:3a:e9:38:b1:2a:99:a5:
99:eb:68:31:4f:e5:6b:be:4f:8a:3a:32:4e:01:e9:5e:b5:ed:
82:cb:45:8c:be:26:0f:1e:8e:f6:ab:5b:81:6d:85:a1:90:cb:
20:f0:a5:2d:c3:ec:9c:0b:34:8e:f6:1a:48:c7:44:52:f6:e6:
77:10:84:97:bf:6c:a7:20:60:ee:bf:d0:68:f3:5a:f5:03:c2:
06:0d:65:c9:6f:cc:21:e6:db:37:83:b7:51:a5:d2:a7:70:4f:
b5:2d:08:0d:dc:19:9d:84:11:94:e6:08:0c:51:1a:96:a5:ce:
6d:aa:43:2a:f4:19:ec:2f:22:48:2e:60:44:e5:9d:7d:f3:2e:
a9:60:10:f5:b9:a8:4e:95:6c:78:f2:df:5e:bb:c3:28:0f:b1:
32:fa:7c:6d:f5:a7:c0:5e:b3:6f:e7:c8:ee:8a:65:4f:08:6d:
3e:b7:d1:54:d3:08:4b:56:6d:e2:3c:74:71:af:bc:94:7a:2f:
9f:e4:00:bb:ca:bb:2d:a9:1b:53:f3:7e:29:bf:16:13:dc:52:
fa:39:48:6e:a8:55:a9:eb:07:10:14:6f:00:fe:39:17:0e:b7:
54:8b:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:36 2025 by rpki-client