Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: vWpCymjs+dNdhZg1HSubMS/wB/sv3wcMJAhFTLhJiRc=
Subject key identifier: AE:38:5F:0F:97:29:FE:01:81:A5:CA:36:2F:4E:63:4D:E4:C3:9F:85
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 019931FFB1C5053EA486EA4E82BB5ACD3703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 1608
Signing time: Wed 10 Sep 2025 05:01:04 +0000
Manifest this update: Wed 10 Sep 2025 05:01:04 +0000
Manifest next update: Thu 11 Sep 2025 05:01:04 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: ogQZbd1e1NqR8VY+sqhpzV7arVdZaBu1+RN+epvBPjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:b1:c5:05:3e:a4:86:ea:4e:82:bb:5a:cd:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Sep 10 05:01:04 2025 GMT
Not After : Sep 11 05:01:04 2025 GMT
Subject: CN=ae385f0f9729fe0181a5ca362f4e634de4c39f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:59:2e:3e:5a:aa:65:c5:07:73:2e:58:53:
52:ce:b2:32:48:9b:58:4b:69:d3:b6:5b:3c:b5:9d:
0f:eb:83:c2:72:03:10:a0:4f:3b:fc:60:eb:37:6e:
58:ad:0f:56:c4:07:91:14:10:af:22:24:ec:79:0a:
57:4a:6a:3d:a8:70:45:d8:2a:41:dc:18:12:28:18:
53:7d:f5:d5:2f:75:06:ce:2f:f6:d1:2f:22:00:de:
10:8f:65:9d:7b:45:ce:24:0f:0e:70:d2:79:12:34:
ce:f3:c1:ee:6e:09:d0:b2:21:b1:5b:10:2f:7d:46:
af:fb:a2:3f:2d:8d:ce:09:c0:db:ec:02:1a:45:49:
fd:52:89:13:ee:fc:56:23:c5:97:21:52:aa:0d:75:
d5:33:5a:84:cc:7e:ee:24:f8:91:5e:e4:51:97:21:
e7:58:b5:15:55:d3:d6:e3:d3:82:72:f8:cf:35:71:
7e:80:cc:27:fe:1e:8f:2c:c4:2e:fb:7d:7e:0b:3a:
7d:c1:49:5f:96:30:e3:0d:c6:00:dc:df:f9:9f:c7:
11:e0:33:82:15:57:93:f2:4b:b3:68:6c:40:55:ab:
56:e7:af:1b:56:bf:77:ea:18:f6:9f:05:cb:7e:21:
70:48:78:5e:13:a6:fc:cf:2f:e3:98:97:7d:6f:f7:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:5F:0F:97:29:FE:01:81:A5:CA:36:2F:4E:63:4D:E4:C3:9F:85
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ad:80:98:08:b4:52:88:9f:97:ca:30:8e:13:6a:14:54:b9:
40:2d:91:92:82:14:d4:18:2d:dd:8f:77:de:9f:61:db:1f:73:
20:d7:a8:5f:4c:7f:06:1a:c2:51:16:ba:4e:c0:99:61:c4:af:
0f:42:d9:39:92:eb:9f:88:36:89:d3:7e:a0:f5:77:c6:d6:85:
1a:44:22:26:03:e4:5b:61:df:c5:a8:1b:d4:a5:7a:d9:b1:cc:
8e:42:d6:bc:e5:5d:94:58:1f:25:57:23:15:fd:aa:32:c0:2b:
7c:78:d7:b6:d8:73:29:61:f2:2c:ca:e3:ed:6f:94:ea:45:af:
86:9e:8a:7d:af:2e:24:cd:54:52:48:49:8a:76:15:fe:5c:6e:
38:ad:bd:62:a5:05:ed:92:6e:54:b8:af:9c:0a:fd:f8:0e:e5:
fa:ac:e7:bc:c3:41:81:1b:55:c8:1e:5a:b6:2c:74:21:66:a0:
51:5c:e2:73:85:d7:1d:f7:48:70:85:b1:e3:ba:e5:d1:fe:4b:
16:3f:25:ba:c1:fb:25:82:f4:f3:49:c8:36:04:9e:47:6d:d8:
e4:b8:e6:0d:6d:82:1b:33:f8:e1:eb:ce:a5:a3:f8:80:b0:72:
90:78:db:4a:90:2f:74:40:8f:ec:b6:3c:73:89:8d:35:7f:78:
c0:15:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:44:17 2025 by rpki-client