Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: 8ubYwEiqlPuftC4RSVaXAVYZokhAB5TK9dmwGVS2msM=
Subject key identifier: 2D:DA:8B:E4:AC:43:E5:86:E5:0D:FA:C3:A1:A3:CF:0B:02:50:2D:1E
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019A0035E2F0556C27FF34A74BD1F32B4864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 0221
Signing time: Mon 20 Oct 2025 06:02:02 +0000
Manifest this update: Mon 20 Oct 2025 06:02:02 +0000
Manifest next update: Tue 21 Oct 2025 06:02:02 +0000
Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: G3r7Ut2VCAO7NvHL47+g7pWdZAVtM7LiAn6/+qViMys=)
2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:e2:f0:55:6c:27:ff:34:a7:4b:d1:f3:2b:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Oct 20 06:02:02 2025 GMT
Not After : Oct 21 06:02:02 2025 GMT
Subject: CN=2dda8be4ac43e586e50dfac3a1a3cf0b02502d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:23:e1:a4:81:03:f1:f9:03:8b:64:93:fe:
db:83:0e:86:34:6b:3f:8e:97:e0:16:d8:f8:70:5a:
07:8c:9f:aa:a0:92:b3:1b:77:81:9e:2b:31:6c:a9:
0e:f7:4f:cc:82:b3:c7:60:ee:59:2f:01:59:62:d6:
72:7a:4f:68:04:93:52:56:13:cb:a8:f9:6c:97:71:
99:c1:57:df:81:1b:83:6d:d5:ad:fd:8d:e0:a7:22:
2a:d0:02:0c:11:4f:51:cf:9a:a7:d5:5e:a0:c2:64:
c4:91:3d:0d:27:53:78:45:b0:12:75:c6:ff:27:3c:
ba:f5:7e:c1:71:41:26:55:bc:40:11:c5:38:39:6d:
5a:bd:8c:bc:2c:3d:fd:b8:02:09:8a:73:88:d4:cf:
a5:6b:f1:a3:fb:3c:dd:08:c3:4a:8c:94:1e:24:67:
96:80:b7:76:50:73:11:0e:10:4d:d8:c5:54:53:30:
92:26:51:cb:3a:fd:5a:10:d0:f2:9e:cd:ce:e0:92:
d0:de:af:2f:05:8a:62:2c:b0:23:4e:db:47:c7:23:
34:c9:74:10:b4:04:4e:9e:41:23:7c:3e:c2:ba:b1:
72:b8:fe:96:66:19:fe:35:41:9b:b3:4f:84:e9:e2:
d6:e8:ea:e2:33:4a:6a:17:79:17:07:e7:6e:65:c8:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:8B:E4:AC:43:E5:86:E5:0D:FA:C3:A1:A3:CF:0B:02:50:2D:1E
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:2b:9d:10:60:dd:20:a7:75:23:03:d2:50:74:1b:f0:39:
41:93:00:9e:70:c6:30:f2:d2:fd:d9:7f:62:33:07:9b:ef:a7:
be:39:9c:66:bd:ec:28:e3:de:c6:d8:9b:f6:6b:e3:c4:48:f7:
70:cf:50:67:d3:ec:48:01:e7:39:b7:e5:ac:ed:df:51:75:2f:
c2:23:76:0a:22:74:ed:bb:c6:84:b2:18:29:af:e6:82:1a:c2:
52:91:d0:8d:e9:d8:91:94:dd:f4:b2:e9:5d:f0:0c:eb:9f:e6:
0e:25:8c:03:d8:72:20:26:b4:81:66:a4:91:80:94:01:d8:1f:
a4:60:65:0d:da:bd:52:0d:b7:f0:4d:88:bc:b9:a5:89:f7:e9:
67:a3:5a:1e:1e:c6:e3:99:28:c5:6b:40:b1:de:4d:42:e2:32:
85:35:38:70:27:35:3e:20:0a:cd:9f:24:4c:55:e2:d2:6f:06:
f9:30:d3:6c:fe:0b:f9:bf:0d:f0:86:9a:be:da:8b:9a:f2:4b:
aa:ed:64:62:b0:7b:38:d2:74:f3:f0:a5:75:f5:de:61:c7:54:
41:b0:3f:41:17:9e:79:bd:11:47:b1:ee:62:44:95:9f:26:93:
16:0a:6b:4b:39:e8:ac:4e:7c:8a:6a:02:73:63:56:fc:c1:b8:
c6:cb:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:19 2025 by rpki-client