Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: dvlHSrllqRPPigKQ3/YYep+zhpjw5q/+s+r4LwnONuA=
Subject key identifier: 05:EE:D7:E5:EE:30:C4:59:BF:5A:CB:F7:BE:46:E4:A9:B2:7A:ED:3B
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 01992255E86C459DC2D6D3EE002326F403DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 04:01:19 +0000
Manifest this update: Sun 07 Sep 2025 04:01:19 +0000
Manifest next update: Mon 08 Sep 2025 04:01:19 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 9N1nW4kSM+IzT8cqERnKfwLW4pYhg1uuV4uQJWMkn38=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e8:6c:45:9d:c2:d6:d3:ee:00:23:26:f4:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Sep 7 04:01:19 2025 GMT
Not After : Sep 8 04:01:19 2025 GMT
Subject: CN=05eed7e5ee30c459bf5acbf7be46e4a9b27aed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:d0:c5:42:27:e1:7c:ad:a2:77:53:46:40:
a8:b4:38:2e:8c:12:27:a0:db:ec:89:54:85:ad:92:
c0:a1:5f:29:93:e2:a1:87:b2:38:61:0c:b0:16:f0:
10:4e:a1:17:bf:86:34:e0:e6:f3:25:e5:11:2e:13:
ac:e7:4a:3c:74:5a:4b:b1:5d:43:4c:a4:90:24:c7:
ef:f7:c5:f9:43:63:c2:05:56:0f:11:64:ca:07:ee:
35:e5:3e:ec:29:30:ff:97:79:25:92:a1:c8:59:40:
12:f3:4a:2c:65:a2:c0:6d:84:05:c6:e9:47:eb:38:
d4:29:fc:e4:a0:2b:32:94:03:62:b6:06:d7:c8:dd:
33:18:74:b0:c5:5f:1f:d8:82:9a:ad:a6:8f:b6:bf:
5e:dc:de:8c:ea:f9:15:88:5b:c5:9b:d5:0e:12:b5:
dd:f9:5e:47:f7:b3:2a:e3:74:31:39:3b:2a:17:1a:
04:79:7c:e3:df:91:e2:d9:71:70:d5:75:54:05:77:
f9:65:45:3a:df:78:0c:18:11:a1:2d:6f:44:39:b3:
69:1e:fa:7a:c4:38:b3:f2:d8:22:ba:d2:5f:8d:30:
d1:ba:9a:1b:f8:b7:f1:4c:4f:0b:cc:e0:6d:7e:61:
92:27:58:6a:f2:73:3c:15:3e:d6:1a:30:91:cd:1a:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:D7:E5:EE:30:C4:59:BF:5A:CB:F7:BE:46:E4:A9:B2:7A:ED:3B
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:52:91:eb:cb:19:82:2c:9d:b2:b9:b9:6c:2b:64:0c:54:
92:d0:9a:0e:33:e9:5f:b1:bc:42:25:02:b0:7b:96:33:a1:87:
86:87:ef:a2:e0:c1:97:db:87:05:2b:5d:a1:c0:b0:d2:4f:94:
dd:3e:10:fa:76:09:14:ea:8f:b0:5b:c7:8c:35:ad:64:4d:f1:
33:c1:d0:99:8c:f8:e2:e1:2a:ae:42:d0:cf:17:e1:4a:22:d5:
ce:9d:11:5a:29:15:6b:67:00:fa:1b:99:44:e8:28:ef:8e:a2:
02:7c:0c:cb:29:53:c8:1c:44:5e:bd:83:ae:4e:90:6a:cc:99:
8b:5b:49:59:b7:52:6b:79:95:11:41:4b:0b:f5:b9:27:5b:35:
19:56:3d:d0:ba:fc:35:d2:de:6e:a0:34:4f:63:43:50:65:40:
4b:a4:95:37:f7:e6:b2:86:6d:84:ff:93:aa:f5:a8:35:24:64:
7a:13:26:1b:f4:36:6c:d4:5a:46:3d:e3:41:be:b0:16:c6:eb:
54:b7:23:9a:bd:8a:46:87:38:dc:09:ed:3c:ed:08:b2:8b:88:
55:d9:26:8b:4e:4b:ee:f9:8a:97:a4:f9:8d:33:3a:c1:ae:87:
fd:80:81:66:ce:5d:3d:25:ea:74:6a:33:11:4f:93:14:de:f5:
3f:2e:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:52 2025 by rpki-client