Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: A3qKfhR8dISULVNIZq0KCpjLdzsccXSyfwRIkIEBHhU=
Subject key identifier: 00:4F:D2:76:0D:83:54:20:94:AA:9D:92:F0:C7:CC:93:CD:57:98:74
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 0199FEB4DFC74008B72B3E4A2F575DBE8479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:30 +0000
Manifest this update: Sun 19 Oct 2025 23:01:30 +0000
Manifest next update: Mon 20 Oct 2025 23:01:30 +0000
Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: lysACkQCTjMOgWOFsbjpw97bMMZzP8a3J7gwzxuScK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:df:c7:40:08:b7:2b:3e:4a:2f:57:5d:be:84:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: Oct 19 23:01:30 2025 GMT
Not After : Oct 20 23:01:30 2025 GMT
Subject: CN=004fd2760d83542094aa9d92f0c7cc93cd579874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:63:1b:5a:32:90:ec:11:e5:d0:5b:a5:bb:
0b:b6:a2:78:4a:88:55:94:a3:57:6c:70:15:82:e0:
33:44:39:f8:43:a5:3d:1d:88:e4:a6:cb:af:90:0c:
e2:50:b6:46:32:31:27:e3:0d:43:b0:58:b8:fc:b1:
b6:c0:53:5c:4a:23:61:0c:ff:47:26:59:f9:d5:00:
c7:e7:23:4b:37:c0:47:d1:0d:36:7c:e6:24:c2:01:
e6:d1:be:3d:f7:dc:b3:03:f0:c5:cb:19:34:76:cc:
0c:5c:b1:7d:ee:3c:66:ea:d4:09:d1:6f:6a:f3:ec:
d3:fc:4c:59:57:87:8a:ed:26:6a:14:71:8b:58:06:
b7:86:89:45:f6:91:21:80:04:e0:90:64:e1:4f:17:
b7:b8:a5:a3:42:bc:92:db:6e:37:ba:a7:b0:82:3c:
2e:fc:51:b9:14:60:31:03:9f:42:ef:64:88:9a:b7:
e2:a7:f8:e0:04:8f:2c:63:3a:2c:04:3c:97:ce:25:
1a:17:d5:13:a1:ed:6e:62:45:98:16:4d:ef:7e:cc:
88:c7:f8:88:42:aa:77:fb:bc:65:61:09:54:70:70:
5c:2e:9b:c8:4d:bd:9b:a0:93:06:44:e6:fc:20:e8:
45:70:b0:7d:61:07:35:9e:93:78:57:8f:0e:5b:8a:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:D2:76:0D:83:54:20:94:AA:9D:92:F0:C7:CC:93:CD:57:98:74
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:ab:91:c0:1c:0e:a2:43:a2:da:b7:0d:bf:d8:b4:85:09:
66:44:34:42:55:2f:21:9e:90:cf:24:43:f6:f9:dd:a0:89:66:
a7:ee:e4:ab:41:ba:75:e5:5b:f8:37:75:a1:09:75:9d:50:b4:
07:79:1a:88:a7:47:2d:2f:3a:3b:f2:c4:04:90:8d:f7:51:1b:
ff:2e:30:c3:04:95:0e:43:4f:c8:19:c2:04:96:d1:b9:6d:1f:
93:2f:e9:6a:60:f0:76:f1:71:8d:4d:e6:e0:d2:6e:ee:c5:9b:
36:b9:ef:54:9f:4f:c8:9e:89:e6:f3:43:64:80:89:b9:d2:39:
ca:8d:a3:a9:0b:3f:37:36:51:43:aa:9c:a6:bc:71:0b:1b:2f:
65:aa:ce:a3:f8:13:4b:c3:b7:53:12:d5:65:b4:f8:06:18:27:
95:fc:d1:d0:2e:39:57:c9:fb:db:2c:1e:72:5c:b5:3e:84:d3:
f2:4b:ea:15:fe:00:0f:bb:a0:36:30:43:6a:11:50:73:fb:eb:
40:c8:9f:0a:d1:e9:d2:ae:cb:96:3d:db:87:0c:17:15:db:81:
30:64:96:eb:20:cc:1d:65:a7:10:67:8b:7b:0d:95:c8:01:69:
27:11:16:14:26:c5:70:0c:16:6c:d2:ee:4c:e9:0d:8c:1c:aa:
24:05:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client