Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: HAvcv2U56C35yznj2hOy3bnCG+vp56T/LtK1Fu7qFXU=
Subject key identifier: 86:4A:14:A3:72:08:EC:15:CC:54:5C:22:CE:A7:F0:17:57:D2:F5:88
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019A725C7BE9A79B3A3EB2A0378F8E7D28F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: iTUYIE4EkYL1cuRBFHKDP3YxxSGptMc9UY5eOSlbSpo=)
3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7b:e9:a7:9b:3a:3e:b2:a0:37:8f:8e:7d:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=864a14a37208ec15cc545c22cea7f01757d2f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:61:17:9a:05:39:e8:6a:0d:ae:0b:be:10:
16:cf:43:65:8d:5d:44:24:23:aa:e7:64:9e:dc:8d:
20:be:39:7b:20:80:73:dd:46:e1:9c:67:8b:01:b6:
ca:a1:5a:5a:32:81:b1:12:2d:33:35:64:ed:73:7e:
8c:78:02:74:14:af:2c:05:23:95:b6:0e:d6:88:e4:
ac:82:17:25:41:15:5f:31:b5:80:d6:28:92:bd:68:
47:42:50:2a:24:0e:cd:cc:8d:60:7d:64:33:39:e7:
87:47:71:c6:67:bc:d4:51:3e:b8:87:54:3b:50:51:
f9:c2:5a:0a:2e:d0:16:cb:b6:1a:89:6e:f9:db:c6:
51:20:cf:9a:3c:85:03:05:7b:7b:d7:e8:e6:6c:b0:
05:97:15:05:fb:9c:00:d9:8b:a6:0d:bd:d0:d2:8b:
45:6b:8c:4d:c8:fb:8e:1e:34:3d:a5:8a:52:9c:26:
fb:33:9c:9f:17:57:6e:4e:3b:67:cb:2f:26:b0:ff:
01:8c:4f:72:2f:15:cd:3a:3e:6d:df:41:c3:2b:81:
1e:df:6b:1b:3a:22:58:f5:b2:29:f8:d2:d1:b6:26:
87:e6:cc:a4:f7:8d:88:bc:06:22:c4:9c:bf:6d:72:
bc:4a:63:c5:8f:3b:eb:c1:d7:cc:7b:4d:8e:67:43:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:14:A3:72:08:EC:15:CC:54:5C:22:CE:A7:F0:17:57:D2:F5:88
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:8a:2c:55:1e:39:e0:ce:58:30:22:ad:2d:50:63:9c:07:
3a:2a:42:cc:4f:90:1c:99:a7:f5:93:61:f7:cf:18:4a:73:c8:
ec:25:ba:52:4f:52:0d:c2:ea:87:2e:55:ec:96:7b:81:e9:90:
70:44:e4:fb:2d:33:30:c9:99:64:fa:fd:e1:53:a3:91:ed:6d:
ae:dc:15:33:f1:79:de:7a:9e:e8:2c:dc:94:88:4b:03:75:35:
2b:cb:06:64:4a:46:f8:32:2b:59:13:25:d2:f6:e7:a8:20:d9:
5c:31:6e:35:f6:3e:09:c1:18:72:d2:6b:4e:0c:20:dd:29:f3:
e3:cf:20:62:6a:1f:d4:65:f5:28:4a:5b:d6:70:8e:5b:c5:00:
1e:f8:97:96:ea:61:90:9d:ae:f1:eb:a9:bd:07:d8:45:2a:3f:
d1:80:b3:c5:c1:85:33:d2:4a:4c:69:98:67:75:95:4e:19:91:
3f:6c:67:65:1f:51:ba:6a:bd:e7:13:8f:76:cf:4e:e9:2c:1c:
5a:d7:6b:1f:b6:68:a7:b6:81:dc:f5:0c:ff:27:ce:af:19:93:
d7:b4:72:56:20:d0:0b:59:2d:d9:06:08:c0:8c:ed:d3:e2:b3:
09:55:76:66:65:46:8c:23:69:8e:91:3b:c6:c8:17:08:89:b8:
6a:1d:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:17 2025 by rpki-client