Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: BxE9iLtwGv5IbQGYj1M8qR82JNn/H51BAqBHodPzLBI=
Subject key identifier: 62:60:71:D2:02:9C:D5:A8:22:A5:CC:0A:D5:D0:7D:B7:E6:10:8C:C6
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 019A236510EE401D5E72F014F0AE87E8A115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: BC
Signing time: Mon 27 Oct 2025 02:00:17 +0000
Manifest this update: Mon 27 Oct 2025 02:00:17 +0000
Manifest next update: Tue 28 Oct 2025 02:00:17 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: vjod1pCmL+PPsiHN9fDEB5jwskid8rwkUu3c/sLUhPo=)
2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:10:ee:40:1d:5e:72:f0:14:f0:ae:87:e8:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Oct 27 02:00:17 2025 GMT
Not After : Oct 28 02:00:17 2025 GMT
Subject: CN=626071d2029cd5a822a5cc0ad5d07db7e6108cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:da:e1:5d:a5:f4:7a:f7:72:77:91:9c:0f:
a0:14:2b:fc:f2:a1:5a:d1:33:f0:d2:c6:d5:5a:b3:
6b:2d:fb:be:c2:2d:79:a1:ba:92:42:d1:98:04:84:
9d:f5:cc:ec:7b:3b:4a:d3:96:82:a9:e5:7b:c6:4a:
5c:7e:11:91:77:7b:23:9f:af:47:13:b4:a2:c9:4e:
ab:73:cb:00:3b:7b:d9:53:bc:97:bf:d3:11:76:eb:
04:2a:f8:61:75:75:8e:66:d7:14:da:87:4e:bf:2a:
8b:d6:59:05:ed:60:4f:c5:41:41:8c:28:b1:d9:94:
aa:ee:62:1e:d2:d9:10:da:4b:aa:d3:cb:ac:8c:a8:
1d:da:80:58:1f:96:6b:b7:e8:c4:5e:ba:de:1f:f2:
28:4c:41:61:fd:e1:24:c7:ad:45:ae:9d:60:98:69:
86:59:f4:1a:06:8f:9b:f7:97:05:19:55:20:09:a1:
5c:6d:86:08:a8:45:53:ce:1c:89:7a:7e:6f:6a:54:
c7:65:80:f5:a5:24:89:17:8f:e1:4e:66:db:6f:f4:
df:ce:5a:db:e1:b8:e6:8a:38:16:d8:dd:03:97:81:
0d:53:6d:56:5b:dd:53:09:6e:fb:d6:53:35:38:2f:
ad:d6:a3:3e:c7:e0:95:5b:5c:eb:cf:8c:9e:30:8d:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:71:D2:02:9C:D5:A8:22:A5:CC:0A:D5:D0:7D:B7:E6:10:8C:C6
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:8e:f7:b6:7e:7c:5c:c6:7d:6e:7e:d7:16:29:0d:cb:97:
43:bd:dd:23:9c:70:0b:9d:4f:bf:cb:df:e2:f5:8b:cc:5c:ae:
d1:20:fc:4a:5a:32:78:f1:1b:a1:89:fc:85:d7:67:a2:5b:2f:
31:b4:52:42:9e:86:21:49:6c:ca:f7:85:d3:63:f8:6a:ec:59:
6c:93:0a:3a:fa:21:20:05:af:c8:78:6e:ba:43:8a:76:39:42:
e9:20:3d:3c:8f:25:94:ec:38:fa:5c:a0:04:7d:24:1f:ad:84:
cb:06:52:93:fd:c6:23:0b:04:c2:bd:a8:fd:9f:72:b6:f8:8d:
6a:d0:12:2b:9f:09:da:56:9c:c7:e9:6d:ed:93:a1:0a:d2:43:
85:74:33:f4:d8:83:4c:a7:4d:3f:60:2c:40:5c:67:ef:46:84:
e3:e6:8f:15:2b:ec:7c:8b:24:e3:c9:f6:b0:b9:74:c8:a2:86:
0d:84:a4:20:9f:c5:81:ba:4e:28:94:bf:0c:00:e3:2d:50:45:
70:fa:eb:ac:db:6e:ec:4d:aa:09:34:72:ac:7a:20:08:5a:cc:
6e:16:80:5c:d1:7b:28:58:a9:98:24:72:e3:9a:77:c6:18:9e:
ce:87:3c:c4:9d:33:a6:93:c2:fe:2d:6e:43:f5:e7:9d:f6:b8:
5e:e7:8d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:34 2025 by rpki-client