Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: 4bA8JhsfV7Gf8HSIPKGck4XDKMwfOkTMpYNL8mmpzYg=
Subject key identifier: 1E:34:A9:FC:3E:82:9E:FD:C3:31:D2:29:EB:F1:C0:4E:D6:A6:52:38
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 0199228C5BE73EDF87116FB19C0FF57959D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 37
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: eIFRjHQ7VErroXlufiHE+Wcgm1a/wOEf6SgauIyF9HQ=)
2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5b:e7:3e:df:87:11:6f:b1:9c:0f:f5:79:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=1e34a9fc3e829efdc331d229ebf1c04ed6a65238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:f9:0d:e9:cf:94:53:3e:9e:fd:22:e1:96:
28:fc:7e:6b:7f:e8:97:f9:4a:89:c3:4d:3d:7b:8a:
33:1b:de:d1:cf:23:03:31:3c:a7:81:c5:ca:34:07:
e4:f9:35:37:a1:39:27:4f:68:e4:86:e9:50:6d:f6:
7e:7b:98:0a:a5:80:f8:93:75:08:d4:e1:42:fe:80:
cd:5f:13:2c:f4:5c:bb:f2:81:54:cb:75:40:9b:bc:
b3:13:75:5a:6a:b3:0d:3d:37:f6:48:10:dd:d3:0e:
4a:5e:60:03:95:f7:e9:83:84:4d:4d:2d:f6:4a:b3:
62:87:b8:a5:3a:fb:de:1f:43:56:f8:1c:6a:c7:66:
7a:ff:eb:45:2e:08:f0:76:0b:cb:a2:f1:93:22:56:
a0:7c:18:5f:65:52:8b:4d:9d:d2:1f:75:f4:f7:b5:
67:e6:8e:f9:fe:d1:b5:f7:62:13:60:fe:a0:3b:3b:
f8:26:07:c3:b4:00:42:f4:4d:12:85:8a:ad:b7:54:
3f:68:c4:e6:72:53:bb:c9:87:84:f6:59:75:a5:fc:
7e:13:3c:7c:25:a9:dd:7f:06:de:31:7d:dd:cc:d6:
93:5a:1d:35:db:f0:26:00:36:7c:af:ab:7e:94:b4:
c5:8e:b3:fd:59:ae:aa:84:00:6a:da:9c:5f:70:83:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:A9:FC:3E:82:9E:FD:C3:31:D2:29:EB:F1:C0:4E:D6:A6:52:38
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4f:8d:81:5c:a5:77:1c:c9:46:2b:54:c5:91:7f:f1:45:52:
c6:eb:9d:15:75:ae:24:53:7b:ca:e3:d8:f0:39:5b:d4:17:8a:
72:17:a8:75:2b:1f:65:09:5d:9d:dc:64:be:0d:b4:92:05:d9:
7b:56:6d:ff:5c:61:e1:a5:48:c7:0e:36:ef:29:c3:77:35:a8:
f2:b5:23:c7:c0:da:79:69:bb:3e:5e:5d:af:99:f4:74:8e:b3:
7d:6f:0d:6d:89:64:e0:2f:00:a2:d3:16:7d:d4:90:8a:be:94:
0d:70:64:4d:c8:8c:c2:26:8e:d6:32:b2:98:15:bf:48:fe:eb:
4f:d0:03:d0:8f:c6:7b:1f:c1:2b:09:99:de:dd:2b:48:5a:9f:
b8:39:ab:4d:2f:ae:f0:4c:d9:d1:13:ef:af:2a:15:48:88:f2:
b6:ee:b5:ef:53:b7:0f:53:f2:b4:2c:a3:82:db:3b:db:6b:90:
d5:3d:58:84:be:61:d5:91:c2:7b:50:72:46:55:3d:cb:71:4d:
38:cc:1c:86:6f:0e:fc:04:3b:a6:89:2c:2d:d4:8d:00:6e:1f:
a6:c6:31:39:20:52:8d:4b:84:63:b2:b6:31:9d:9c:aa:2b:81:
ef:ec:b0:dc:b4:50:fb:16:5f:3a:af:9c:85:85:c9:af:03:ac:
c5:bb:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:17 2025 by rpki-client