Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: JD04yZN0Xs27yATMQLeSYfJojTTNwOvfwkmm1uS4UEs=
Subject key identifier: F7:F3:30:8B:E4:AB:43:06:5A:07:CD:72:66:7F:77:38:C5:9C:07:5C
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019A72258C3350C358F4FF63D41F397DB4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: /H3IjIE/N0ooAMFzp/SF5XS8qzno9HRI1CxiILyGKvA=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8c:33:50:c3:58:f4:ff:63:d4:1f:39:7d:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=f7f3308be4ab43065a07cd72667f7738c59c075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:61:9a:db:df:a7:f7:e1:9e:0c:59:5f:a7:
a1:3a:bd:9f:57:88:db:bb:ee:1e:b9:d8:81:1a:b6:
1a:61:9a:a4:fc:ca:ba:68:64:d3:04:e7:e2:ee:bd:
d0:ca:5d:66:30:6a:79:7a:df:d4:8b:78:04:27:ab:
5d:3c:79:3d:77:6c:95:50:42:cb:a4:31:ac:d1:21:
65:a3:12:48:87:df:a3:c0:25:f4:99:fe:a2:22:5b:
e1:40:4f:cd:35:c6:17:03:c8:cf:84:f9:01:89:0e:
ee:0c:5f:d2:da:fe:04:5b:46:b4:01:9e:35:03:63:
cb:5e:3e:57:7c:8c:ec:4e:b0:1f:29:87:5d:c7:02:
f1:13:4f:17:86:5a:86:64:6a:e6:df:97:c9:69:61:
eb:35:c6:a6:77:a7:42:ce:c2:1e:d9:37:3d:44:c2:
8b:87:d1:5e:51:6b:3b:29:66:e1:b6:eb:0b:0d:55:
e2:78:47:14:ec:00:4d:7c:17:e8:bb:df:53:00:13:
1e:ad:1c:29:d4:13:e6:d5:08:b9:26:b9:ac:b6:d9:
1a:55:49:11:f1:6c:92:38:ab:93:d1:bc:3e:be:d7:
56:33:23:18:05:9b:5a:8b:03:eb:23:85:ae:97:0c:
4a:fc:33:90:e1:5a:8f:b9:9a:5c:1c:07:6a:d7:12:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:30:8B:E4:AB:43:06:5A:07:CD:72:66:7F:77:38:C5:9C:07:5C
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fa:ec:f9:6a:b6:2e:c1:1d:6e:59:9b:eb:23:51:44:4a:66:
fc:20:41:c1:9b:91:10:57:b7:e4:be:3a:cc:58:49:83:b7:7c:
c0:f1:2b:97:89:ef:5d:7d:af:2f:a0:03:53:04:c5:a5:b6:fa:
bf:df:5f:07:41:03:44:49:2e:e1:b2:7d:61:24:04:74:2c:f2:
bf:8b:aa:3e:4d:86:21:a7:f8:13:49:3d:d8:a5:b1:2e:ef:26:
ae:76:56:2b:1c:85:ca:56:6b:52:ba:45:0d:4c:fc:81:e6:89:
f9:fa:aa:5e:56:53:a4:12:d5:b5:68:67:ac:8a:a4:12:0b:59:
85:af:83:06:ff:93:fb:1b:23:a6:32:b9:be:c3:b1:53:64:5a:
90:e4:00:31:5d:52:fc:e8:f1:86:e4:42:62:e8:53:a7:ac:d1:
8d:fc:1d:40:f9:9d:cf:5b:6e:ad:95:54:14:2d:01:7a:16:10:
25:df:ec:a8:fd:05:60:2f:43:1f:36:00:82:17:a6:99:49:39:
90:93:f0:8a:4a:29:e3:f0:54:07:58:5b:86:0e:00:b4:55:57:
f5:e9:3e:81:66:4c:33:76:e5:48:29:18:cb:dc:5a:9c:6e:22:
41:37:e6:6b:a3:9e:2c:fa:d9:31:7f:af:e5:dc:89:6d:16:e1:
57:be:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:14 2025 by rpki-client