Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: 9cv5EcW172iYHvUTp0DAIZu536b0lOvchOcz/PsBUy0=
Subject key identifier: AF:4F:50:E3:40:34:8D:F8:09:5D:3D:C6:E0:42:DF:E1:46:8C:44:37
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 0198D6CCFCF81316F67A9EB514315FBD9961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 0187
Signing time: Sat 23 Aug 2025 12:00:14 +0000
Manifest this update: Sat 23 Aug 2025 12:00:14 +0000
Manifest next update: Sun 24 Aug 2025 12:00:14 +0000
Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: QlonWpdBf3MXZtRee9oxfdJ2asik8ZZgiDAxgEhG/NY=)
2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:fc:f8:13:16:f6:7a:9e:b5:14:31:5f:bd:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Aug 23 12:00:14 2025 GMT
Not After : Aug 24 12:00:14 2025 GMT
Subject: CN=af4f50e340348df8095d3dc6e042dfe1468c4437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:34:a8:c0:a6:80:af:18:3d:53:b6:7c:f7:
4a:a5:0d:0f:c0:ba:4c:49:3e:23:d7:ce:c4:a1:c4:
3d:bf:42:07:19:22:31:a4:fd:9f:18:de:55:6d:a8:
85:ed:65:9b:e4:d5:0b:40:4e:84:6b:01:e8:53:25:
02:25:80:21:10:4e:20:b7:18:2e:15:a9:8b:a1:13:
18:9c:46:15:4f:17:b3:98:9b:82:4e:1c:26:36:c1:
86:26:2f:d7:ef:cc:06:5f:df:f3:4b:e7:2a:fd:6e:
5a:bb:33:f3:a0:c5:c6:8c:39:0c:94:64:ab:9b:27:
78:0e:34:cc:e8:e7:5a:45:df:4e:e8:12:60:17:64:
a6:40:72:15:15:ab:ab:13:66:e1:32:e4:64:82:89:
e4:5e:3d:ff:6c:89:ee:e1:b0:d4:5d:da:9d:61:bd:
08:76:0b:3b:38:8e:56:81:30:65:61:11:9e:c4:a0:
94:3c:1f:20:1c:69:fe:b1:97:e6:68:48:62:4d:5c:
e6:b9:a5:dd:7f:a9:76:3a:92:2e:e5:22:de:8d:4b:
e5:e6:0c:ef:4c:a1:f4:fd:30:f6:47:b9:8a:c9:f3:
fe:da:48:ec:94:08:e0:41:96:b2:54:58:7a:57:11:
62:3b:c2:b4:b1:7f:00:25:d4:4b:ed:d1:cb:07:97:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:50:E3:40:34:8D:F8:09:5D:3D:C6:E0:42:DF:E1:46:8C:44:37
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:34:1b:0b:82:38:ac:70:0f:80:0c:25:1a:c3:f7:9d:0d:
93:8f:b4:8c:0e:cc:cd:3f:22:45:af:25:91:80:c2:d1:c2:06:
41:30:7b:c7:87:c6:21:b5:b0:e3:ff:5e:f8:73:1a:7d:40:8b:
08:87:96:6e:d3:92:2f:3d:03:22:a2:90:1f:ad:5b:86:17:dc:
d2:ee:8e:77:35:6d:e1:ed:e8:e0:6b:a9:3f:73:9a:ab:b2:f4:
1a:52:e0:df:04:19:4c:f4:09:10:99:09:e9:af:45:27:08:03:
8d:d2:c4:5b:28:db:c6:57:f0:f4:67:9b:ef:e1:26:fc:95:7c:
1e:a6:a7:71:90:5a:f2:45:09:24:f4:b7:9c:76:12:64:4d:89:
ce:c8:d7:1b:32:79:9d:2b:f5:bc:d3:07:99:22:c0:ad:d9:11:
59:dd:29:81:11:de:40:bf:55:0e:1b:40:24:bc:97:cb:4b:2f:
0a:53:ba:a0:79:0e:de:85:1c:e4:44:2f:a6:50:e1:88:32:0d:
83:dc:bb:f2:50:a1:70:b0:98:6b:42:17:37:99:a8:79:e2:cf:
2c:6a:c5:f0:64:58:78:7b:23:37:25:31:4e:54:39:c0:fa:da:
9c:73:2a:6e:31:1c:e1:33:6b:f6:2e:cf:ac:7c:40:ba:4c:c3:
dc:03:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:35 2025 by rpki-client