Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: HRK23Vb6RrJu57iEmtLwlXPc5aJnZRXxUbnNxd9qpeM=
Subject key identifier: E5:80:2E:9C:E8:5F:75:75:58:DC:45:8B:9A:89:95:5C:FC:14:29:62
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 019A70A57BB2B9437A60C1A232D28D70766F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 02:01:24 +0000
Manifest this update: Tue 11 Nov 2025 02:01:24 +0000
Manifest next update: Wed 12 Nov 2025 02:01:24 +0000
Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: O+XllqJrq8eq7bwHU2CMaVNxfSaVE2RiwlA9Ar1g73w=)
2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7b:b2:b9:43:7a:60:c1:a2:32:d2:8d:70:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Nov 11 02:01:24 2025 GMT
Not After : Nov 12 02:01:24 2025 GMT
Subject: CN=e5802e9ce85f757558dc458b9a89955cfc142962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:31:19:e4:9c:9e:88:de:ff:be:e3:78:88:
67:83:06:ca:d5:37:57:5a:01:d0:3a:04:45:d4:d2:
5a:a6:83:42:21:24:65:fd:24:db:be:e9:3b:9f:f2:
49:e6:d6:e9:ab:6e:fd:c6:f6:ea:74:cd:4b:8e:ac:
35:28:00:d6:16:aa:4c:11:a3:28:c9:1d:ad:4e:2b:
8f:3a:df:a6:6e:03:35:64:8a:ec:fa:6a:20:cf:d8:
b7:15:57:46:bc:fe:34:9a:34:3c:ec:7d:ca:cb:b1:
c6:45:f1:30:32:6d:15:ec:92:14:2d:da:d6:7d:55:
23:f6:c7:26:0f:c2:9e:3e:e8:50:25:54:7c:09:35:
75:ba:ff:9e:ce:52:70:64:0e:f8:e6:ce:6f:63:f0:
29:78:13:b9:f2:6f:7b:39:a6:f0:c9:63:65:84:33:
f8:27:01:d5:29:74:41:6c:5f:08:0c:61:d3:fe:1b:
01:84:4a:22:fd:0b:ef:e2:ac:f0:e4:32:a7:4e:f7:
08:76:90:f1:ec:f5:61:27:dd:0e:9b:50:6f:e7:8b:
f0:22:f7:d7:59:25:17:43:87:9b:93:ac:ef:0d:5e:
7d:ff:6e:b1:f7:63:06:4d:62:70:14:0e:0e:15:83:
4e:9b:5e:d2:75:ef:08:a3:a2:f7:71:d9:5a:8d:f4:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:80:2E:9C:E8:5F:75:75:58:DC:45:8B:9A:89:95:5C:FC:14:29:62
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:9e:b8:ba:a4:ae:3f:61:24:fc:d0:8f:0e:d5:c3:e3:8d:
d8:e2:28:c4:0b:3b:cb:06:4a:2e:71:57:87:c0:a1:6c:d6:cc:
c8:76:87:0c:a5:db:f5:56:9f:b3:c8:21:69:af:db:6c:b5:03:
d1:f8:71:aa:ce:cf:31:bd:ea:23:aa:85:35:fe:2b:65:4b:b1:
1f:52:9f:87:64:16:ff:6d:f3:a1:c0:56:e3:28:19:1a:d5:cf:
fc:0c:c7:38:e2:f9:40:f9:b4:1f:2c:a5:52:3d:bc:65:25:3d:
cf:22:c9:0b:c0:fb:22:8d:5f:4b:59:9b:b1:f6:09:a2:e2:81:
70:43:fa:a0:b8:22:77:f5:f3:5b:b3:a9:9d:3e:d2:5f:b6:9a:
c2:e5:b8:de:82:7e:e2:0d:33:b2:4a:54:a1:9a:57:b7:96:0c:
3b:86:f1:08:57:b4:06:c9:7c:24:eb:4f:55:7d:10:d6:b7:09:
3e:a8:85:cb:02:b8:6a:e5:0c:c8:df:09:15:dd:6f:2e:6c:63:
16:04:7c:59:b7:93:fe:30:a9:4b:72:39:94:c8:57:dd:8f:4b:
1b:67:b6:e9:ac:b8:43:96:dc:98:9a:83:2f:8c:b0:44:11:5e:
66:59:18:55:f6:f0:18:4a:b7:d9:db:b5:63:a4:0a:59:64:cb:
84:40:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:39 2025 by rpki-client