
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: SuzHlO8UsZEF0N1TfLyHZxDoAdkC6rNmMMZemssgX2c=
Subject key identifier: 56:7B:A8:28:C7:8B:9C:5D:9D:22:74:98:7D:88:FF:38:04:5F:A3:CB
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019849D38B5395F7A8178A86467EF7120ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: G/hsnpVgZAt+V0bLgBNitk56YZB/s5O8EWKKAcbzIko=)
2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8b:53:95:f7:a8:17:8a:86:46:7e:f7:12:0e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=567ba828c78b9c5d9d2274987d88ff38045fa3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:f3:5c:cd:bf:d3:20:3f:64:3a:af:4d:49:
fa:cf:08:b1:cf:36:07:37:dc:28:32:4f:f9:ed:10:
f3:0a:ed:b4:7c:f3:26:b7:fd:03:49:27:97:8c:f0:
41:60:3c:ae:9f:9d:0e:31:5d:bb:ad:32:d1:95:fe:
dc:b3:5a:b8:b6:bf:00:69:91:90:c3:1b:ad:81:a3:
77:69:9e:bf:3c:65:22:f3:4d:13:14:1f:df:bc:97:
44:55:9d:c0:4a:34:25:24:b2:db:e9:22:cb:53:c1:
04:a4:1d:50:ed:4b:8f:4f:4c:f7:22:92:af:04:37:
d3:4f:cd:07:57:7c:67:35:52:b5:4b:1c:17:48:2a:
0a:97:0c:66:ab:36:bf:bb:20:de:be:54:61:67:d1:
62:12:4d:be:94:b3:d6:da:35:b2:37:d4:75:d1:08:
04:e3:9c:68:49:7b:97:e9:c9:c8:73:bb:4e:54:2b:
68:0d:45:74:5d:25:44:a4:0e:68:0b:ca:ca:39:48:
d2:e7:91:67:2c:55:19:94:a2:e7:c1:d7:c2:74:df:
f1:e7:1e:24:cc:a5:68:46:2e:b5:27:01:56:6b:10:
89:30:0e:93:96:f0:bb:10:49:08:dd:22:7f:0c:1e:
60:e6:58:0a:b6:f7:89:9f:4b:b7:d1:30:3a:0f:57:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:A8:28:C7:8B:9C:5D:9D:22:74:98:7D:88:FF:38:04:5F:A3:CB
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:12:ae:93:19:24:2d:8f:31:86:3c:a4:3d:96:ba:8e:a3:48:
e3:f0:4e:2a:ba:2e:f9:48:75:7f:30:95:b7:21:1e:78:4a:10:
02:23:54:80:e2:11:79:22:33:58:94:ce:4d:88:bb:f5:91:fd:
26:08:1d:94:7a:cb:e5:47:25:5e:2f:45:e4:85:67:41:e0:b7:
bf:d2:ce:e6:fd:78:d3:ff:2f:28:22:07:aa:fd:1c:4e:05:4e:
e7:c1:af:b1:52:0a:7a:7e:00:a4:a9:04:32:ca:29:01:ed:c6:
a1:1e:e3:38:06:45:5a:71:e5:17:5b:dd:c7:a5:8c:f5:4f:5f:
2b:40:12:81:cb:e7:01:5f:59:a1:39:60:28:41:15:d7:86:9a:
ce:3d:2e:2d:f8:13:94:f6:bc:17:21:20:54:1b:33:ef:10:14:
82:bd:d6:88:b6:34:66:97:50:8d:96:b2:ee:98:11:08:62:a7:
cc:b7:73:1f:55:4e:83:31:a4:f9:b5:55:f2:65:17:6c:61:fa:
59:71:15:b7:a9:27:aa:97:c0:20:8a:8b:f4:ee:3c:e1:72:ab:
b7:d5:31:06:0e:98:e4:a9:5a:d5:e2:21:e0:b7:b2:79:61:45:
43:b0:ea:20:5d:ef:03:2c:f3:42:bb:4f:b4:dc:46:f4:ef:ed:
a4:03:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:44 2025 by rpki-client