Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: 7Iy3m8w7KsvrRGblArGVn97R4PYJhGRgzpVfolpN25o=
Subject key identifier: 1C:FC:A2:B7:B2:A6:DE:E1:9E:DF:7D:CA:56:EC:95:85:9A:14:9D:F3
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 0199FDD8FE18804BE392913A0D2185D27DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: lUuu/Ebk/2IQ6G1AjKXBl+Gn7vXhkZbAGBazN5ZHSYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fe:18:80:4b:e3:92:91:3a:0d:21:85:d2:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=1cfca2b7b2a6dee19edf7dca56ec95859a149df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:51:c0:f9:7d:2a:a7:5e:7b:dd:b0:49:dd:
f3:45:32:23:a4:96:51:8a:1e:5e:36:2b:f2:3b:ea:
e6:cd:e9:c4:d6:34:cc:39:a9:26:0a:7a:3e:fe:4f:
10:bf:72:bb:8f:25:36:f7:ca:87:de:30:65:2a:79:
11:14:dc:77:40:97:7a:5f:b8:b8:3c:7a:0e:dc:c2:
96:43:86:fc:ff:61:2f:8b:aa:f4:bc:ab:22:92:0c:
22:46:4f:11:7c:8d:04:27:dd:94:e3:75:c4:b6:f9:
6f:cd:5a:03:6f:6a:eb:f3:75:51:80:37:be:81:e1:
2f:e2:3c:60:19:74:ff:6c:cd:e8:d8:4c:47:1c:94:
da:2f:c0:31:a3:eb:9f:2b:ae:15:41:2e:f9:20:89:
72:8f:1a:09:1d:e8:9f:11:07:0a:9c:7e:96:4e:2e:
c8:f8:3f:86:e7:91:00:3d:e8:1e:a1:64:aa:cb:43:
cb:e1:74:a0:af:1d:53:cd:c6:75:b6:0c:db:c7:dd:
d5:22:e2:a4:05:e5:78:fb:56:ce:bb:9e:63:07:b4:
51:c3:eb:e6:41:c5:29:9d:e4:c8:e3:06:d0:74:1f:
21:7e:4f:50:a1:ea:16:b3:ac:3e:97:b2:8a:a9:cd:
d8:b2:dc:34:ae:9c:19:89:57:8f:df:09:13:2a:62:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:A2:B7:B2:A6:DE:E1:9E:DF:7D:CA:56:EC:95:85:9A:14:9D:F3
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:50:f7:5a:bf:29:e0:ec:e3:71:0c:0a:24:e4:1f:d4:d0:
27:6a:91:c4:f8:c1:77:31:c6:e6:c6:84:04:73:2c:52:5d:ee:
c7:ac:0c:87:35:16:49:e0:b1:4f:2f:99:8c:2b:19:74:6e:6b:
ac:77:dd:95:0f:56:4a:41:1c:98:07:cc:94:94:b0:2d:11:88:
e1:6a:d2:24:36:8d:bd:c4:12:8d:2c:db:5a:da:0f:35:37:a2:
2c:06:e1:31:e2:ae:1c:a4:1d:57:da:07:40:d7:07:b4:bb:2b:
7d:dd:0f:93:3c:a0:40:a5:6d:46:fa:4e:a8:f8:a5:af:69:79:
50:ac:7c:b4:91:78:04:dd:45:45:85:cf:e3:00:6d:ce:6a:08:
82:ff:46:ff:38:e9:c6:b5:eb:c5:18:b8:fe:72:82:9e:4a:f1:
72:0e:67:7e:a2:22:83:e6:48:66:a2:43:93:5a:72:08:30:39:
48:b2:9c:38:51:bd:22:05:89:fb:30:0b:bd:11:bc:7b:85:0d:
29:b6:b8:4d:e8:68:18:02:7d:ef:b9:c1:35:1e:3e:dd:3c:35:
e8:a0:c6:28:ba:60:c4:bf:66:74:a9:49:50:7c:d7:4c:35:66:
3b:96:43:90:9a:6a:a1:05:1d:ef:22:6e:a9:64:26:37:2c:e7:
df:3e:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:44 2025 by rpki-client