Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: 8zvqq6wlc1HfA+tTRhU0mz6xw/Mf6gboI8pk8JnGb1k=
Subject key identifier: 02:44:FA:4C:39:63:45:CD:86:67:D8:4F:35:F1:05:D8:2B:83:33:00
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 0198D73B97EB390EF32B959439A9A10FA153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 14:01:03 +0000
Manifest this update: Sat 23 Aug 2025 14:01:03 +0000
Manifest next update: Sun 24 Aug 2025 14:01:03 +0000
Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: 7qjwGRJvDUMjkoS6iAnEocOMT8V8U0K/HUZs+OeOPm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:97:eb:39:0e:f3:2b:95:94:39:a9:a1:0f:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Aug 23 14:01:03 2025 GMT
Not After : Aug 24 14:01:03 2025 GMT
Subject: CN=0244fa4c396345cd8667d84f35f105d82b833300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:85:c0:62:a2:c4:13:95:83:6b:4c:f7:98:
18:60:d4:5b:3f:3d:c2:82:f1:5a:6d:e4:e0:b8:8a:
86:8c:d7:23:eb:b5:26:09:49:0d:ee:f1:1e:52:66:
dc:f9:41:3f:43:d0:d2:2f:b9:8a:fa:6e:52:fc:9a:
9f:6d:e3:46:99:48:b8:e3:70:e2:2a:9f:28:62:ba:
05:05:17:b0:b0:e6:21:5f:09:33:d4:29:3e:cb:ad:
92:a4:ab:71:08:72:76:70:dd:90:fc:9f:27:f0:84:
ef:65:13:d6:d5:e5:f6:64:59:c5:12:a9:7e:e9:a8:
1c:ec:ec:b3:42:49:e9:e8:30:11:7f:c8:2c:c1:e3:
14:af:9f:f5:f9:46:6f:55:ea:33:5d:37:e0:49:68:
f7:fd:f7:21:73:cf:d3:f2:93:a4:bb:63:4a:56:23:
c4:3f:87:c9:12:cb:bf:ce:ff:73:ab:86:54:81:8c:
bc:d1:bf:d5:e2:e2:11:9e:28:d6:ef:b9:00:71:bd:
c9:b5:24:50:f3:45:6f:2d:2d:51:3c:2c:77:1a:fa:
c3:0a:15:cf:c1:45:ee:86:4c:50:92:c4:94:f9:e7:
4f:9b:a0:6e:82:b2:f9:69:e8:7d:1d:83:24:e6:7a:
15:11:1c:9c:cb:f9:ec:d5:04:7b:bf:3c:95:fb:58:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:FA:4C:39:63:45:CD:86:67:D8:4F:35:F1:05:D8:2B:83:33:00
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:7f:63:5b:7f:8b:f8:4f:10:c5:9c:4c:39:cd:ee:75:83:
eb:0c:c8:f3:ed:7d:60:bb:77:5d:75:c6:e4:90:4e:97:f0:9d:
da:1c:c2:6c:f1:37:65:74:20:42:58:bf:20:b0:9e:05:ec:3c:
45:fb:34:26:75:5b:a2:80:0f:42:07:01:38:13:e8:ba:59:e6:
73:02:b6:b8:96:8c:74:e7:1b:e9:a9:3b:9b:f4:ac:b2:18:03:
d8:e5:28:56:99:f3:da:3c:cd:47:28:bd:14:63:f5:e3:2a:1c:
3f:f0:24:9a:b9:dd:fe:a5:a0:cd:8e:f4:67:c2:0c:e9:7b:4f:
fe:8c:ad:2a:53:7b:db:3d:77:be:6b:b5:72:95:57:6a:ce:a8:
f1:37:21:b5:6e:09:d0:40:24:e0:3d:65:84:6d:03:a3:52:7b:
f0:e1:2f:0c:e6:70:8f:bb:4d:62:3a:3b:70:de:bc:8b:fc:9a:
38:01:be:b8:d6:aa:7c:f4:16:d5:43:af:e7:f5:7c:1c:88:61:
bf:08:da:b9:07:5b:80:08:78:a0:19:39:53:62:41:93:71:19:
f2:fb:b2:15:aa:f5:3e:2c:d3:21:9c:3f:05:f5:89:ea:43:a9:
52:a3:68:7f:25:80:79:86:90:7f:8b:6d:81:9b:36:2f:0b:76:
de:dd:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:09 2025 by rpki-client