Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: KdzhXUcrXT7Kb5brGnM6Hk1uoH6qEg7QIxMjIDFsPsQ=
Subject key identifier: 57:9F:32:DE:8C:83:76:28:0D:30:C4:A1:6F:7E:B5:E3:A2:BD:A3:90
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019A4DE169158871581FF3C3654BE359171B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 0676
Signing time: Tue 04 Nov 2025 08:00:09 +0000
Manifest this update: Tue 04 Nov 2025 08:00:09 +0000
Manifest next update: Wed 05 Nov 2025 08:00:09 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: tR05LmIpB7g07vJDZ4PcY5DWPn10/hwNMgf8ooZrago=)
2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:69:15:88:71:58:1f:f3:c3:65:4b:e3:59:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Nov 4 08:00:09 2025 GMT
Not After : Nov 5 08:00:09 2025 GMT
Subject: CN=579f32de8c8376280d30c4a16f7eb5e3a2bda390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:74:17:01:77:8e:09:11:4c:b3:56:27:cc:
dc:cf:ac:f7:a4:b3:c4:d6:07:4c:e8:ef:8d:2a:65:
0d:d3:cd:3e:5e:32:a7:09:bb:3f:8a:9c:1d:29:cd:
c5:d2:f4:89:fa:b7:29:21:bd:c2:6e:b3:25:86:0f:
05:8d:15:df:23:2e:34:2f:9e:d9:70:c3:01:60:3d:
13:70:95:a5:1b:8d:39:16:21:c6:1b:62:21:f1:39:
8d:8e:c6:47:c3:b8:12:92:b1:51:40:c1:b2:84:5d:
f9:dd:d1:87:ee:bf:9e:eb:80:b2:f1:5f:a3:ac:12:
88:2a:d7:40:b7:0f:f0:9e:38:28:89:72:ce:9d:63:
d5:1f:11:25:37:18:42:66:48:17:eb:96:b0:2a:01:
3a:3e:ce:b8:44:65:92:9d:05:43:a1:68:e9:5c:1f:
68:80:e7:bb:95:1c:dd:ba:b5:b9:3b:50:2c:26:ba:
b4:a9:80:b5:99:75:38:97:c9:71:15:26:f4:18:e9:
3f:7e:31:c7:15:76:a4:c2:9c:d4:fb:ff:1f:f5:d8:
59:64:e2:54:c8:76:2f:31:df:f6:16:bc:5e:aa:bf:
22:dd:2c:4b:3d:df:22:d8:2e:8e:ab:86:72:e1:bc:
06:20:74:de:b9:ed:7f:9b:12:cf:8b:5f:d2:2b:8f:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:32:DE:8C:83:76:28:0D:30:C4:A1:6F:7E:B5:E3:A2:BD:A3:90
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:48:8d:ec:f3:d8:fe:59:bd:5a:e9:7e:e4:a2:c9:9e:c6:
1f:5c:32:bf:a9:31:93:85:09:04:f2:ec:d5:ee:38:de:86:99:
6d:db:8b:d0:3c:9e:ad:29:f7:e3:91:14:d0:b7:c9:e6:74:51:
d1:49:b6:09:a3:6b:9e:b5:34:71:38:ab:b0:2f:2a:82:d2:c3:
c9:da:02:21:0a:9f:92:77:01:4a:ab:4f:84:96:e6:68:81:8d:
6f:4e:3b:79:f5:8d:21:02:f2:b0:60:d9:10:10:73:e9:2e:30:
97:91:d2:8a:22:0d:b1:28:60:9e:58:43:4a:31:4f:07:98:c8:
dd:d2:7c:a8:f9:f5:f2:6f:78:a1:0e:85:33:ee:d6:33:eb:0e:
3f:ea:01:b0:2f:a8:2a:09:bc:3a:7f:67:69:67:bb:f5:3e:25:
49:2e:31:80:9a:c6:19:66:7a:69:2b:ee:38:74:15:18:4b:da:
59:d0:50:a2:1c:8b:17:4a:04:d7:ce:7e:a9:f8:93:f9:77:77:
ed:b4:b6:71:3d:8c:93:a9:76:11:53:6f:06:2e:93:ec:ef:c0:
9c:e6:f0:63:61:d0:e3:23:26:fe:2c:b4:20:87:cb:17:16:6d:
fd:25:54:32:a8:39:5b:ac:2c:23:45:a1:94:21:8c:de:e2:ec:
a6:cc:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:04:34 2025 by rpki-client