Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: 1LO4+UU+BCb2Kls2MWO2klcH6zpamPLH82kj+xxgmTk=
Subject key identifier: 55:35:E9:13:7A:60:C2:EC:F8:72:EB:A0:D4:D0:F2:95:F6:5F:4D:B4
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 4BC006BFF4B807888EEEBD3252650DB6F02746E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 22
Signing time: Sat 23 Aug 2025 01:27:33 +0000
Manifest this update: Sat 23 Aug 2025 01:22:33 +0000
Manifest next update: Sun 24 Aug 2025 05:03:33 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: BZlc2XT3KYHGs1jjR+3VWd7wmji6NCPWAF/6CKzg3x8=)
2: 3231322e362e34382e302f32342d3234203d3e203136353039.roa (hash: dFw6eMiHdkNiTVAeBFv17UaWeglb2wjbxw3SzLNr1IQ=)
3: 3231322e362e34382e302f32342d3234203d3e203230343733.roa (hash: bd7pfUAPd2iEntBrKkW4CYU1BhJJKWx1CGTXOchFWn8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c0:06:bf:f4:b8:07:88:8e:ee:bd:32:52:65:0d:b6:f0:27:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Aug 23 01:22:33 2025 GMT
Not After : Aug 24 05:03:33 2025 GMT
Subject: CN=5535E9137A60C2ECF872EBA0D4D0F295F65F4DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:40:40:e2:83:87:0f:d4:dd:82:72:13:a5:
38:ae:46:80:7d:27:ba:32:5c:1b:89:e2:ab:ad:9d:
72:d4:b5:3f:65:9e:56:9d:25:c9:f7:82:11:64:16:
63:26:07:4c:32:64:07:1d:33:e5:d3:c0:0e:17:cb:
2b:24:77:93:c1:78:71:84:48:bb:65:ee:12:86:98:
51:de:46:e2:74:57:5a:4d:64:bc:b6:3b:16:40:fa:
55:bd:10:dd:ee:6d:39:2c:e8:b5:9d:8d:14:e0:20:
bc:04:55:fe:77:4a:09:10:10:eb:5c:8f:c2:09:0b:
08:e4:97:be:48:b8:7a:31:f5:da:a2:3e:e6:ce:23:
f6:1b:ae:8d:cc:b4:2d:03:1a:a8:a1:c6:ab:e7:dd:
f2:a5:4d:e4:a8:5c:12:de:86:d6:f9:00:13:68:c9:
ee:a6:09:f3:07:bc:2f:2b:b2:0e:7d:d4:4b:c0:d8:
42:47:60:77:06:3f:e0:12:08:cb:db:91:b8:7d:cc:
8a:e9:f6:be:19:5d:9e:ef:3a:1b:51:51:81:21:a1:
7f:fb:c0:13:87:ee:b1:81:58:3e:f7:f8:cb:05:0e:
51:d4:63:35:46:09:bb:d6:a8:5e:eb:ce:40:48:d0:
02:9b:90:b7:3f:58:4b:e1:eb:9e:7f:dd:68:e4:72:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:E9:13:7A:60:C2:EC:F8:72:EB:A0:D4:D0:F2:95:F6:5F:4D:B4
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:e3:4c:b6:33:f9:7c:d7:a6:6a:46:cc:4a:1b:7e:94:05:
6a:c8:00:67:76:da:4a:15:16:ae:1f:bc:1a:f2:d9:a7:48:f5:
a0:69:98:15:ff:19:60:b1:25:e0:a5:62:86:e1:14:b5:95:b6:
00:8a:39:84:35:cc:c8:e8:cd:2b:fb:3a:c7:a9:7d:27:f1:87:
e9:48:95:25:de:0a:40:e4:cc:36:fa:e5:c3:f8:6a:ef:58:76:
7d:c6:ae:c0:98:b9:1d:d5:03:b8:9f:c4:20:29:c2:9e:4b:47:
93:07:fc:cd:ea:4c:2f:1a:2b:43:e0:78:55:58:f8:59:f4:3a:
e2:4c:25:e5:b1:8c:0e:de:86:9e:bb:9f:9a:85:b2:c8:74:1b:
de:12:ef:3e:92:85:4c:4f:2c:26:59:01:6c:28:65:9d:d2:c6:
00:cf:f0:16:43:26:d6:23:42:e7:93:79:64:9a:0c:63:db:1f:
af:0d:65:8e:c4:df:d7:0f:79:27:ba:30:e3:3e:80:7f:75:e1:
8c:af:99:b5:ad:36:fe:64:85:52:09:de:2c:32:dd:c1:7d:59:
45:78:61:d9:0b:66:ba:3b:c7:25:72:24:83:7b:5a:76:49:c6:
02:a6:30:bc:38:6c:a0:30:0c:e1:c4:5a:b1:88:7c:d9:3e:29:
9d:c4:12:5d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUS8AGv/S4B4iO7r0yUmUNtvAnRukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx
YTgxOTYwZjAeFw0yNTA4MjMwMTIyMzNaFw0yNTA4MjQwNTAzMzNaMDMxMTAvBgNV
BAMTKDU1MzVFOTEzN0E2MEMyRUNGODcyRUJBMEQ0RDBGMjk1RjY1RjREQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxEBA4oOHD9TdgnITpTiuRoB9
J7oyXBuJ4qutnXLUtT9lnladJcn3ghFkFmMmB0wyZAcdM+XTwA4Xyyskd5PBeHGE
SLtl7hKGmFHeRuJ0V1pNZLy2OxZA+lW9EN3ubTks6LWdjRTgILwEVf53SgkQEOtc
j8IJCwjkl75IuHox9dqiPubOI/Ybro3MtC0DGqihxqvn3fKlTeSoXBLehtb5ABNo
ye6mCfMHvC8rsg591EvA2EJHYHcGP+ASCMvbkbh9zIrp9r4ZXZ7vOhtRUYEhoX/7
wBOH7rGBWD73+MsFDlHUYzVGCbvWqF7rzkBI0AKbkLc/WEvh655/3WjkclcVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVTXpE3pgwuz4cuug1NDylfZfTbQwHwYDVR0j
BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi
NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx
QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i
MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2
NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz3jTLYz+XzXpmpGzEob
fpQFasgAZ3baShUWrh+8GvLZp0j1oGmYFf8ZYLEl4KVihuEUtZW2AIo5hDXMyOjN
K/s6x6l9J/GH6UiVJd4KQOTMNvrlw/hq71h2fcauwJi5HdUDuJ/EICnCnktHkwf8
zepMLxorQ+B4VVj4WfQ64kwl5bGMDt6GnrufmoWyyHQb3hLvPpKFTE8sJlkBbChl
ndLGAM/wFkMm1iNC55N5ZJoMY9sfrw1ljsTf1w95J7ow4z6Af3XhjK+Zta02/mSF
UgneLDLdwX1ZRXhh2QtmujvHJXIkg3tadknGAqYwvDhsoDAM4cRasYh82T4pncQS
XQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client