Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: qfgZHKGpV4LYkRAXyPsUZnpCecM9fKXfjRrDZuuNVv4=
Subject key identifier: 0C:16:D1:1B:A9:F8:6A:FA:FF:FA:85:AC:60:84:ED:48:FD:27:97:42
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 0197B77CA6372C4E86E4082AC2253BDF4BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 106D
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: DPxByD+xUCU9DKu1/tFT3hfGaIOvY3MlX2HrOGFNDEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:37:2c:4e:86:e4:08:2a:c2:25:3b:df:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=0c16d11ba9f86afafffa85ac6084ed48fd279742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:de:8f:91:48:07:7a:71:77:98:03:4a:4c:
8e:35:2a:4a:8e:9e:2d:02:9d:95:02:10:7d:94:dd:
5e:de:d6:1d:71:c4:bb:f9:32:22:13:d6:b6:2c:95:
7c:3a:30:35:5b:09:17:39:89:26:02:80:f3:f1:e7:
84:fe:d8:cd:91:24:70:72:b0:c3:41:06:4b:46:a0:
d1:b7:99:58:ad:7e:80:ab:42:92:8c:ea:ba:5a:c6:
22:2d:41:96:09:6c:c3:05:83:78:03:ff:8a:c3:b3:
fb:8f:05:b5:95:92:7d:9b:c1:9f:0b:a7:83:ea:76:
bd:51:af:03:07:3a:67:31:9e:9a:75:c2:6c:c9:54:
75:09:72:4e:51:83:da:8d:88:8e:51:c9:8c:ea:c5:
29:2f:89:ae:6b:bb:82:5b:8d:4d:49:7c:fe:e1:f3:
23:7a:70:19:b8:b0:f7:5f:4d:73:76:a6:54:19:15:
01:d6:09:c0:86:90:2c:ac:9b:a2:81:f5:96:71:88:
31:ec:63:49:5d:a4:28:6f:b5:b8:f0:ff:10:97:21:
75:4d:6b:16:d4:55:9b:f2:9f:c8:c6:19:f9:19:65:
a5:37:06:e5:2b:0c:99:9c:ad:51:d6:18:a1:3d:d8:
63:cd:f2:6c:2d:f0:0c:22:9b:77:f7:74:dd:51:55:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:D1:1B:A9:F8:6A:FA:FF:FA:85:AC:60:84:ED:48:FD:27:97:42
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f7:06:3b:e3:5b:8b:a6:fb:53:e1:3c:17:25:91:5e:7c:18:
53:72:e2:d6:de:6a:ea:11:89:58:aa:3e:58:70:1e:b1:f3:94:
d9:8a:f3:73:cc:d6:01:67:77:38:02:6e:8e:47:f5:fa:3c:75:
75:47:f8:03:94:2a:ab:61:c1:26:9a:ed:f4:67:a4:80:d4:1a:
84:10:34:64:d3:e6:37:59:a3:f9:cc:ab:ed:3d:e9:30:d8:0a:
d5:72:9d:21:36:1a:49:5a:5c:94:46:9b:82:b1:b8:7f:17:91:
eb:1d:9f:83:0a:bc:18:92:e4:69:ce:23:1a:56:62:03:ef:bd:
3a:5f:0c:e9:92:95:86:e5:b2:ac:7e:61:75:f0:5d:d3:f9:38:
1f:69:56:2a:1d:3a:fe:14:16:d4:20:28:c2:48:25:cf:4f:f8:
ce:f5:e8:78:42:78:d5:26:6b:e7:6a:2a:36:1e:0b:75:fa:1f:
0b:a5:40:13:f1:4b:5a:4f:e2:ba:b1:9a:ec:7c:1f:cc:52:cf:
58:1a:e6:10:42:53:4b:c4:c4:8b:a4:12:c6:8d:76:ba:ff:49:
3c:b3:d1:d9:73:39:6f:19:59:f2:a2:aa:7e:49:da:46:8e:ff:
de:01:06:e7:0e:76:4f:21:79:98:bb:85:ad:f7:d2:7e:0b:1e:
46:2a:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:39 2025 by rpki-client