Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: r5KgiUwiR4rEMSAbDY5zhWf9viJu9An0euHhAacqh24=
Subject key identifier: F1:83:2C:24:27:7B:AB:06:0B:EF:D3:E3:D7:2E:D9:62:94:B3:4C:9E
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 0197CEA92D42B8B569FC726E21AB1F0E75E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 05:01:22 +0000
Manifest this update: Thu 03 Jul 2025 05:01:22 +0000
Manifest next update: Fri 04 Jul 2025 05:01:22 +0000
Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: Pk2ERYBp3U9m7BOB6ZesOvDA7vYh36FyBNBS+f2vBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:2d:42:b8:b5:69:fc:72:6e:21:ab:1f:0e:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Jul 3 05:01:22 2025 GMT
Not After : Jul 4 05:01:22 2025 GMT
Subject: CN=f1832c24277bab060befd3e3d72ed96294b34c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:b7:6e:6e:d1:0c:15:d4:31:d8:e8:62:7a:
34:28:e3:08:0e:8a:51:60:62:55:0d:f8:77:c1:a4:
09:d7:12:45:dc:06:01:aa:a2:93:e3:bf:81:c9:05:
00:a6:fb:a6:97:6e:72:47:e0:ed:aa:7a:93:3d:68:
47:0a:97:1e:4e:68:82:df:65:28:eb:39:aa:35:2a:
bf:08:5f:02:6f:a2:27:8a:27:5e:a8:c0:a2:cf:b3:
20:00:aa:81:e8:e2:b1:85:c5:16:76:8a:88:10:60:
fb:ea:2f:7e:ef:f7:83:cc:d8:14:22:7e:54:91:33:
84:13:6f:db:f2:3a:f4:83:07:98:53:c9:e9:1e:7c:
5e:c0:32:d4:92:bc:3d:28:b1:de:4a:d8:3f:96:d0:
5b:58:8e:91:d4:03:ce:c3:d8:f7:80:00:67:cd:09:
4a:62:89:60:46:4a:f1:8a:2d:89:4c:71:b4:dc:df:
e9:09:6e:97:62:6d:a8:df:8e:cf:fc:0d:49:0d:bb:
3d:5d:f7:79:9f:96:7a:c3:c3:67:f2:01:7d:0f:cc:
84:71:95:6d:f9:a0:5f:a4:ac:21:a4:83:e4:34:d3:
07:ce:a4:89:ee:58:2a:fa:cb:52:c2:28:5f:3c:f4:
cf:30:29:65:42:38:5f:6b:52:95:17:e6:65:1b:c4:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:2C:24:27:7B:AB:06:0B:EF:D3:E3:D7:2E:D9:62:94:B3:4C:9E
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:96:a7:13:c7:8b:39:ea:6c:10:ab:7f:e7:1a:c8:7d:6e:
66:29:86:de:e6:41:3e:68:3b:8a:0d:dc:bb:d1:09:11:17:1c:
95:1e:61:59:8c:e0:35:91:68:6a:92:a2:12:32:88:0f:31:ce:
7a:d6:ee:3f:48:db:d0:8d:17:de:69:67:68:3f:20:6c:15:6e:
f4:e9:08:f4:8f:f8:49:11:f8:f9:be:57:ac:86:16:be:23:31:
8b:c6:c6:57:f3:75:5b:f4:08:4e:6f:64:58:a0:e2:c2:9f:d4:
a5:9b:3f:8f:ec:18:89:bb:09:df:c9:42:1a:ea:c0:14:ee:1c:
8c:07:8b:a4:e6:d2:bd:81:21:05:e8:58:22:7d:c3:80:0d:20:
d9:bc:7a:ee:c0:80:bb:1a:18:10:0a:88:00:97:0f:ab:30:34:
07:28:39:ce:13:8d:05:58:a2:a3:e6:5a:8e:cb:67:e5:20:5a:
2e:d1:fa:ba:1c:d1:5b:b4:1f:0d:e0:60:02:17:8b:e2:63:43:
c0:48:78:01:9a:af:ee:94:e0:d7:e5:a5:05:49:8e:fa:1f:63:
0f:14:7a:b4:e8:3e:3c:0f:b1:1c:52:48:2b:9e:1e:66:34:c1:
02:2f:21:bd:a8:5e:21:7a:18:a8:b8:06:fe:7b:3d:79:28:b0:
5d:24:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:15:11 2025 by rpki-client