Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: WvUYeBdFv2JacyKW+OC2rUHYy/MdYnagxip7OA5QQzo=
Subject key identifier: 35:65:52:05:DD:0D:4C:2B:F8:5D:AA:C8:F3:06:3A:E4:D1:77:61:56
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019A72259DA97A4C31FCDB2585AF06B1F208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: 2Wdc6/ksSuXaMEmSoxWJI16yDswZ4hV9wB0xmTI/awM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:a9:7a:4c:31:fc:db:25:85:af:06:b1:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=35655205dd0d4c2bf85daac8f3063ae4d1776156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:1d:c4:97:42:53:c2:70:4e:d5:46:27:51:
f7:f4:17:3f:a2:5e:2d:33:f9:e9:31:67:f7:f7:41:
a9:3d:1e:35:f5:a1:42:6b:af:ce:4f:da:35:34:69:
d7:6e:63:1f:aa:ea:55:1d:73:5b:ef:23:f7:f0:53:
eb:15:2f:68:c9:b9:12:5e:da:f2:30:4f:ac:16:2f:
19:1b:bb:4a:8a:34:b0:04:ba:b1:dd:41:7f:af:b8:
db:dd:41:69:f0:24:5f:30:cc:97:00:cc:88:6d:31:
52:fa:07:32:0e:65:a0:74:dd:9c:92:5e:f8:75:10:
a0:4a:29:b2:a2:f4:91:02:b1:b7:ff:b0:0b:d2:61:
c6:ab:58:5a:b8:5a:95:6d:83:a9:6a:16:51:17:c2:
f8:cf:ae:80:73:be:a2:8a:a7:52:b0:0e:26:77:62:
95:d9:d2:36:05:0e:7a:4d:4b:d4:a8:82:b3:2e:a6:
6b:45:04:24:9a:f3:5f:d9:4d:d7:39:7b:0a:02:02:
6d:b1:e0:98:34:91:be:e2:a2:82:1a:22:52:47:65:
1f:5e:36:72:91:9b:5e:a3:51:30:25:d0:de:ce:c4:
d3:c6:32:3b:50:ef:f6:3e:a7:a4:d6:26:b2:bb:62:
74:a5:01:21:8f:b1:fa:ea:87:57:1b:23:c0:5b:8c:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:52:05:DD:0D:4C:2B:F8:5D:AA:C8:F3:06:3A:E4:D1:77:61:56
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d4:ba:85:13:bf:87:fa:12:55:0a:ff:67:d3:f0:13:64:89:
a3:69:d6:dc:b1:c1:93:cf:4b:44:76:2a:65:e7:8e:7e:53:24:
b4:ff:fb:5f:aa:55:fc:ae:c7:fe:2d:8f:f9:0f:38:e6:cc:9b:
db:dd:6b:e1:08:24:b4:83:3c:e2:b7:fc:89:d4:0f:81:cb:66:
b8:26:15:a1:67:93:1d:72:65:b0:1b:7a:5d:c4:ea:7e:b6:c3:
b1:d0:b0:4b:fa:6b:f4:80:1b:09:2f:79:20:08:47:59:22:46:
2a:67:f3:8b:82:fa:04:b2:9a:e2:43:26:fd:08:23:d9:dc:5d:
3d:67:6d:2d:4c:4d:5e:a3:9e:f7:f3:dc:eb:eb:6e:a2:a5:4a:
51:2f:db:b8:ce:40:9a:4f:2c:96:79:ba:51:a8:41:32:fe:cb:
8e:8a:ec:a2:c4:48:50:06:ad:ae:00:41:45:48:4f:f2:79:10:
4f:65:f4:cd:24:8b:2b:44:2e:65:4e:26:b8:9b:52:ab:61:77:
cf:60:3a:03:42:31:ae:fe:ea:68:45:14:96:95:54:47:9c:d1:
e5:62:79:d9:fc:b8:f6:60:a7:6d:60:3f:a5:31:8f:d4:95:f2:
04:5a:7f:f4:b3:e7:37:85:80:d2:21:0a:15:e2:ef:0b:f1:de:
a9:97:69:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZ2pekwx/Nslha8GsfIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTc0ZDE4YzQwNDlhMmQ5YjgxMmMyYTU4NTVjZmViNzVh
ZmE2NjcwHhcNMjUxMTExMDkwMDU5WhcNMjUxMTEyMDkwMDU5WjAzMTEwLwYDVQQD
EygzNTY1NTIwNWRkMGQ0YzJiZjg1ZGFhYzhmMzA2M2FlNGQxNzc2MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mUdxJdCU8JwTtVGJ1H39Bc/ol4t
M/npMWf390GpPR419aFCa6/OT9o1NGnXbmMfqupVHXNb7yP38FPrFS9oybkSXtry
ME+sFi8ZG7tKijSwBLqx3UF/r7jb3UFp8CRfMMyXAMyIbTFS+gcyDmWgdN2ckl74
dRCgSimyovSRArG3/7AL0mHGq1hauFqVbYOpahZRF8L4z66Ac76iiqdSsA4md2KV
2dI2BQ56TUvUqIKzLqZrRQQkmvNf2U3XOXsKAgJtseCYNJG+4qKCGiJSR2UfXjZy
kZteo1EwJdDezsTTxjI7UO/2Pqek1iayu2J0pQEhj7H66odXGyPAW4yvNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVlUgXdDUwr+F2qyPMGOuTRd2FWMB8GA1UdIwQY
MBaAFA7nTRjEBJotm4EsKlhVz+t1r6ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMt
YzI1ZGViY2IxMTk3LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMtYzI1ZGViY2IxMTk3
LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtS6hRO/
h/oSVQr/Z9PwE2SJo2nW3LHBk89LRHYqZeeOflMktP/7X6pV/K7H/i2P+Q845syb
291r4QgktIM84rf8idQPgctmuCYVoWeTHXJlsBt6XcTqfrbDsdCwS/pr9IAbCS95
IAhHWSJGKmfzi4L6BLKa4kMm/Qgj2dxdPWdtLUxNXqOe9/Pc6+tuoqVKUS/buM5A
mk8slnm6UahBMv7LjorsosRIUAatrgBBRUhP8nkQT2X0zSSLK0QuZU4muJtSq2F3
z2A6A0Ixrv7qaEUUlpVUR5zR5WJ52fy49mCnbWA/pTGP1JXyBFp/9LPnN4WA0iEK
FeLvC/HeqZdp+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:25 2025 by rpki-client