Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: SV+x7tT+tZ+JpBo044PQLOwqQ8hBF/GebXBszn3Nos4=
Subject key identifier: F0:34:C0:ED:50:6D:70:09:B7:E6:22:53:A0:B1:D2:40:DC:2C:5B:CB
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 0199FCC6632CC5BC81FCF79A3AB44CE28693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 119A
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: 7HNuFsg/qFsk0Vc44bC0HAGsAVGbfX5SjjzKuNr68F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:63:2c:c5:bc:81:fc:f7:9a:3a:b4:4c:e2:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=f034c0ed506d7009b7e62253a0b1d240dc2c5bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:96:78:d3:2a:65:7c:be:c6:22:56:28:bc:
26:12:60:e0:7b:f4:22:d3:1b:2e:e5:38:4a:d0:af:
6e:0c:24:90:3b:c9:cf:43:0e:8c:d5:90:c4:9e:33:
91:5e:a6:fd:af:ea:fa:43:70:17:8e:20:3e:a2:72:
ff:2d:19:40:ce:8a:f6:4e:4c:04:6f:b8:7a:d1:9b:
9e:7f:f5:7d:88:b4:d3:3c:b0:d1:70:f2:37:30:1f:
8c:a1:ed:69:37:71:9b:5f:65:6b:4b:7c:12:a7:d4:
15:71:b4:b8:bc:c4:c0:22:c7:35:df:56:86:73:2c:
77:55:fe:3d:99:56:78:b2:b0:cb:6d:da:b9:15:de:
2f:50:fe:c3:ac:60:97:4f:9b:04:46:d4:1f:e0:7c:
df:dd:63:a5:60:4f:b2:1a:22:bc:58:3d:2f:fd:8f:
ab:94:63:e5:6c:76:8a:b9:f6:c8:61:9b:73:3a:1c:
5f:c0:67:96:28:60:79:06:e8:d5:9e:e3:df:1c:c1:
f7:d7:49:e8:e2:c3:1f:71:e0:6e:7e:28:a4:dc:d3:
5f:36:31:28:1f:40:3e:65:32:66:0a:15:b1:5a:02:
c4:d1:7e:c7:db:54:4c:24:56:2a:b2:af:10:35:9f:
82:d1:ed:99:67:b8:39:6c:bf:77:d4:1a:2a:db:a5:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:C0:ED:50:6D:70:09:B7:E6:22:53:A0:B1:D2:40:DC:2C:5B:CB
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:73:c6:68:33:4a:3b:e4:ff:20:0b:05:49:5d:53:38:5e:
52:65:68:40:f7:7d:5b:9d:50:49:f7:f9:00:86:df:76:7b:0c:
8f:db:64:28:3e:9c:80:90:34:19:d4:3e:8d:1f:e7:a5:c0:1f:
5b:55:b2:d5:be:80:a1:36:66:05:e3:a0:05:bd:18:45:6e:60:
4e:60:f4:5b:c5:b1:c2:24:cf:60:a7:a7:8c:2f:19:ac:b0:c5:
74:00:ed:9a:1e:4f:fd:d9:ed:81:a1:99:11:e9:a0:24:f4:1f:
43:b7:88:37:d4:b4:63:40:8c:24:5f:ee:37:70:45:42:ca:10:
2c:1f:fd:e4:6f:9a:e0:16:cd:4e:c1:d8:f3:b9:cf:eb:fb:c9:
7a:59:0d:92:3e:b7:f1:79:68:04:09:41:20:6f:48:86:d4:53:
4f:98:2f:09:3f:33:c7:0f:f4:67:1c:29:ba:26:c6:a3:39:6c:
55:da:90:9e:6e:33:11:43:e0:0f:a7:bc:fe:4f:e5:d3:3f:04:
97:18:68:71:ad:24:75:7a:68:46:b2:e5:16:39:43:c5:11:99:
e3:57:9b:35:fd:32:84:2a:37:a0:ad:cf:39:f7:43:08:09:f4:
f5:f7:c0:15:15:cf:da:e0:6c:b5:09:64:77:46:23:ab:29:9b:
7e:64:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:28 2025 by rpki-client