Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: OhXQEfD9mVaknaPzByI3Gfw26IB9otiUxTSV/iDtzEQ=
Subject key identifier: 2F:C6:B5:63:29:95:48:17:8C:17:BE:09:F0:1C:D8:3B:33:D8:57:AE
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 0198D47498F2EC3F210C35724120ED6200AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:27 +0000
Manifest this update: Sat 23 Aug 2025 01:04:27 +0000
Manifest next update: Sun 24 Aug 2025 01:04:27 +0000
Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: llyf2SMNs0sQx087A1sJhAslIF3lIovbu3gMx3w0zNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:98:f2:ec:3f:21:0c:35:72:41:20:ed:62:00:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Aug 23 01:04:27 2025 GMT
Not After : Aug 24 01:04:27 2025 GMT
Subject: CN=2fc6b563299548178c17be09f01cd83b33d857ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:aa:65:d7:a0:48:72:5d:8d:54:ea:c6:b8:
85:15:e5:de:58:83:e7:a4:55:04:b0:70:19:25:b8:
9a:b0:9e:98:d2:c1:00:0f:15:f3:4d:57:01:bf:64:
a6:da:91:02:bf:6c:1a:d6:cd:c0:f7:ca:0c:56:6b:
ff:7a:5c:fc:1c:17:77:ad:18:0b:d8:f5:a9:10:00:
b5:5e:02:62:e0:b1:92:ab:1d:ce:f2:10:3e:77:4f:
a1:d7:99:5f:bd:15:ee:35:8c:1d:ba:46:fb:2b:d0:
3d:79:de:0e:08:d2:59:2e:dd:69:24:a4:6c:89:c3:
25:46:ac:fd:59:ff:50:bd:dd:c2:aa:17:d8:85:da:
ed:c4:2f:ee:f8:99:6b:e0:35:0f:d5:3a:7a:af:65:
0c:94:2c:eb:b9:8a:54:81:cb:a2:72:a1:b5:2b:25:
25:70:eb:34:22:86:18:d3:10:5a:b0:a3:a3:cb:a5:
1d:ba:04:4e:c8:05:81:3a:67:34:36:aa:90:52:d8:
7f:ea:5c:d4:b6:ad:80:05:b4:07:dd:a8:5f:9a:df:
0c:3c:76:b1:aa:e1:d6:fb:75:26:3e:e9:5d:bb:b0:
a1:7e:9e:35:00:5f:9a:e4:5a:91:2e:91:5f:08:ad:
93:c2:30:9e:00:73:cd:ea:13:b8:a1:24:d7:d3:88:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:B5:63:29:95:48:17:8C:17:BE:09:F0:1C:D8:3B:33:D8:57:AE
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7a:87:1d:25:31:ca:dd:8b:c7:88:85:b7:21:a7:36:39:1e:
cc:8b:a7:6c:3d:97:3a:2e:72:f3:df:82:e7:a9:92:de:6d:9d:
af:0b:b1:07:fa:a2:f3:79:5d:95:64:5a:00:b5:5a:00:24:48:
13:1a:8b:be:a3:a5:09:63:e6:6f:87:46:e1:b2:7c:c7:91:ee:
c8:6b:dd:a5:fc:40:8c:53:58:98:8e:15:1b:4b:60:84:42:40:
fb:3f:6e:58:dc:1a:bc:79:ef:25:d5:53:fa:81:f2:74:21:59:
54:af:4b:d8:f6:6f:bb:59:47:42:fc:21:c3:71:c9:32:ab:46:
34:9e:2b:1a:5a:90:1a:58:20:39:3c:ef:ce:6f:dd:cd:85:cc:
07:bf:b9:d5:72:b2:e0:ee:56:39:59:f7:d0:a1:e2:b1:f9:c7:
d2:0a:30:60:f5:88:a4:07:43:75:30:0f:c7:17:92:8c:c3:3f:
b4:b5:09:73:f3:30:18:e8:b9:6a:18:f9:eb:db:00:9e:30:7c:
41:5f:c2:04:83:af:56:65:4b:cf:5a:e6:23:ef:e4:98:97:b6:
23:2a:f8:22:e6:2b:bb:0f:b4:57:78:2d:4b:bb:90:b1:5f:95:
56:c5:85:49:5b:ff:4e:c1:86:30:fa:8d:d3:06:47:f3:1e:d1:
1d:eb:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:22 2025 by rpki-client