Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: NPxWUmaK372Z2tGeJYNzqhn8vqxngZM9YQ9N3yRQSgE=
Subject key identifier: 0D:13:31:94:6E:9E:DF:9A:F7:87:E2:7F:14:EF:B1:31:77:F2:45:55
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019A71B9141173F1600E98349A9F07F87083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0CAA
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: 2OWmv+C4Aie5SuPzihDEoYjfXArq2UjSTwGoOMU3714=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:11:73:f1:60:0e:98:34:9a:9f:07:f8:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=0d1331946e9edf9af787e27f14efb13177f24555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:1c:f1:f6:3f:f1:f2:c3:88:9d:77:1a:24:
97:5c:83:a9:64:8b:b7:d4:60:2c:c5:68:87:1a:11:
47:42:95:60:da:17:a4:52:56:0b:33:80:b9:7b:cd:
eb:0d:3e:39:a0:23:b4:21:fe:8e:cf:f5:d4:d3:25:
d8:ca:02:31:6d:fc:3d:37:b3:79:43:69:ac:0a:1f:
6c:80:7b:af:69:76:e7:23:2b:9a:93:38:3b:10:28:
df:c8:a2:0d:1f:6f:c8:f7:c1:e4:c2:fa:da:da:91:
e1:59:e1:44:6a:55:e0:7a:6f:63:50:94:30:ba:35:
5f:0b:4b:22:97:4d:4d:1f:7c:d4:c1:62:3d:05:28:
22:fa:30:59:39:90:48:f4:87:38:8a:de:37:4f:ce:
47:ac:5d:fe:9b:50:c1:42:0f:04:78:a6:ad:10:20:
71:45:d4:25:71:d6:db:02:a7:f9:50:65:85:ba:bc:
10:64:0e:73:76:3b:0b:27:44:b3:a8:b1:a4:e0:5a:
4a:86:59:20:2b:38:15:ff:36:01:a4:9b:33:2b:5f:
b9:f3:c1:c2:99:4e:0a:7a:17:5f:fb:f9:3c:68:37:
5c:f0:7c:a7:53:3a:e6:08:ef:78:61:fb:dd:05:ab:
11:f9:f5:44:69:78:f0:4e:cf:11:8d:25:da:32:52:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:31:94:6E:9E:DF:9A:F7:87:E2:7F:14:EF:B1:31:77:F2:45:55
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ba:c9:50:4c:36:8d:12:fb:32:c3:46:7d:62:5e:d9:35:b1:
1c:bf:29:3b:aa:29:19:5c:41:fd:ca:ef:42:03:1f:2f:28:8c:
30:79:ef:76:79:a8:b4:e2:be:b2:d0:38:a1:1b:df:62:bd:1e:
eb:a4:78:47:a6:65:15:00:a5:e2:e9:73:9b:40:e6:44:ac:55:
b9:0b:3e:a0:14:5d:fa:76:ad:2d:9d:8d:d8:a8:a1:b0:44:11:
f5:b6:df:4f:6e:36:e5:12:50:a0:24:37:49:89:14:cb:1a:12:
e3:e4:ce:99:1d:46:70:5e:c4:f3:08:9e:6e:80:46:8d:00:e9:
1d:75:6d:cc:cd:99:2b:ea:a6:d9:40:a7:53:dc:cf:01:df:6d:
e6:b5:ad:be:72:90:37:89:00:f6:c8:02:80:3e:9b:0b:a1:ed:
16:4b:eb:0a:d4:ed:26:65:28:db:74:eb:07:a4:f7:d5:04:fe:
08:6b:19:40:22:f0:94:14:72:56:ce:f1:00:98:c9:ae:f9:8c:
0e:51:87:cb:a4:a8:7f:6c:9d:21:08:3e:11:d9:4e:f4:38:30:
8f:c5:15:6c:d4:8d:55:c0:35:2d:09:85:04:6d:48:28:a8:95:
c1:9f:ed:97:d0:c9:a2:26:a2:d3:d4:9b:b1:41:35:68:48:00:
1c:61:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client