Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: gvfAELD4xCXENWiJ65kfKunJ+N0LSntGAgFPaqILyGU=
Subject key identifier: D3:4B:4C:75:7C:30:2D:72:CF:AA:78:46:CC:72:34:CF:0D:E2:A9:4E
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 0199FF59BEE2C7B13D40FACAF62CAEB881E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 1279
Signing time: Mon 20 Oct 2025 02:01:35 +0000
Manifest this update: Mon 20 Oct 2025 02:01:35 +0000
Manifest next update: Tue 21 Oct 2025 02:01:35 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: fJysbNBEwlfwwEzYCopCTIb8jrD8u754jZkF1DjpYZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:be:e2:c7:b1:3d:40:fa:ca:f6:2c:ae:b8:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Oct 20 02:01:35 2025 GMT
Not After : Oct 21 02:01:35 2025 GMT
Subject: CN=d34b4c757c302d72cfaa7846cc7234cf0de2a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:d0:a9:8f:0c:f5:b7:07:6e:ef:a0:ed:db:
35:e0:15:b4:62:af:06:43:a1:86:68:2f:6d:54:84:
b1:11:27:ab:80:65:25:85:94:29:ba:10:58:48:ef:
38:06:8c:80:2e:c5:d5:8e:10:34:1e:ca:66:e8:86:
3b:d1:2d:2c:06:82:e9:b1:65:ba:eb:e6:8b:f9:b6:
43:16:3b:96:70:3f:c5:05:c9:76:e2:f4:b9:90:cf:
f2:fa:96:83:0c:47:14:33:a8:70:0e:a6:ab:fe:ef:
0a:57:c9:61:23:e7:86:de:90:63:a4:69:e5:fe:82:
7f:c4:0c:1c:e2:ec:15:a5:bf:0e:0e:71:61:ef:fb:
f6:dc:6e:43:21:ea:ae:02:34:56:30:1d:a0:15:cd:
7f:d4:f3:5a:96:1a:ef:cc:8a:8d:bc:ef:dc:49:77:
4a:77:96:6d:8e:d1:2f:2b:02:f8:7d:2c:25:d0:87:
e2:fa:14:f4:f2:c5:4a:33:d6:b7:ef:2c:7b:37:67:
c2:f4:0d:37:5b:db:44:20:18:94:6c:44:9f:0a:5f:
6f:16:43:f4:52:48:f7:25:32:1f:7e:86:a7:47:e7:
92:cc:3f:02:b0:85:d9:5b:44:ab:01:98:49:fd:9b:
58:ae:b7:8a:39:fc:95:c6:cd:a4:80:32:59:d1:c6:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:4C:75:7C:30:2D:72:CF:AA:78:46:CC:72:34:CF:0D:E2:A9:4E
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:78:5f:de:fd:71:74:a2:da:93:61:33:d0:ef:f7:05:cd:
70:73:50:50:89:d0:25:9c:6e:88:10:66:13:b1:f5:8f:02:8b:
6f:11:41:5b:0b:63:d5:57:5e:32:24:ad:a8:1b:0c:c7:b8:a8:
6f:06:67:0c:e1:8e:6d:5e:8e:2a:d1:b4:6a:56:ad:a4:95:88:
4e:35:df:d2:5f:0a:03:6b:da:ff:08:a4:f5:38:8f:a3:fa:0e:
dd:2f:7c:b9:85:69:25:96:50:31:b3:47:64:92:06:28:03:dd:
23:3e:ee:50:a2:b3:d3:82:be:1d:68:65:6a:48:d1:09:74:07:
a6:87:c1:44:6f:70:8b:f0:0f:b1:a9:43:35:bf:69:ad:8a:f4:
ae:39:2d:13:9b:a4:70:88:44:13:de:5d:79:d9:ad:27:8a:7f:
37:7f:f1:a6:19:c7:74:5a:db:c2:a8:c7:00:41:16:33:09:18:
6f:15:ab:b7:cc:94:cc:b3:a7:43:33:52:0f:9c:90:51:1f:53:
f5:e9:f3:75:6b:c3:93:b0:bd:7a:c0:75:fc:f6:c6:cf:18:f4:
9c:ad:f9:c5:0c:d5:3d:4e:1a:73:be:13:6a:fd:77:a1:c6:d6:
ce:e8:a2:4e:5d:d1:f7:a5:90:37:a7:34:2c:43:96:9c:62:e1:
d1:ca:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client