Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: IntD6TMNGEiLo6g1E+FqdAYyg7IMqVl4rkvMcqhdy2s=
Subject key identifier: A4:6C:79:EA:D1:FB:EC:1A:B2:19:8A:17:13:79:DF:EA:27:E2:E6:0B
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019A72CAA21E5EC97D6F2F402CED520F425E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 07D1
Signing time: Tue 11 Nov 2025 12:01:13 +0000
Manifest this update: Tue 11 Nov 2025 12:01:13 +0000
Manifest next update: Wed 12 Nov 2025 12:01:13 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: ENKzviEZTFF1CeffNzvLJJ5wMsRktKort/GzDutc8iY=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a2:1e:5e:c9:7d:6f:2f:40:2c:ed:52:0f:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Nov 11 12:01:13 2025 GMT
Not After : Nov 12 12:01:13 2025 GMT
Subject: CN=a46c79ead1fbec1ab2198a171379dfea27e2e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:bb:a9:f9:3e:92:1f:5f:cf:29:7f:ef:b5:
7e:31:26:5f:72:da:d6:94:b9:fd:1a:bb:e5:5f:5e:
47:9c:31:77:dd:29:a9:61:46:6a:40:8a:80:6f:95:
57:64:17:74:44:9a:f2:66:08:1d:03:c5:1a:39:18:
a5:5f:91:d4:ea:b5:1a:dd:7f:d0:e0:48:bc:b1:42:
49:b8:b0:4d:5b:d0:82:84:50:59:cd:f4:f1:73:74:
84:6c:34:a0:f8:64:e9:0e:ad:20:52:fb:25:75:81:
db:83:f7:0c:77:6e:a7:ca:fb:57:7f:0c:2b:48:1d:
79:cc:51:0d:47:e2:fc:95:95:69:19:95:85:be:3a:
79:3b:4b:70:00:c6:00:91:17:b2:fe:c3:d8:d1:2b:
52:60:2f:47:f9:95:1a:c4:c9:f6:f2:d5:a8:ab:27:
c7:0f:b2:2a:3e:3f:e2:c1:e7:62:4f:98:3b:0a:1a:
6f:f7:63:a7:45:66:af:de:92:5d:96:7a:3d:72:02:
ea:d5:2d:43:4d:62:e9:34:79:5b:19:a2:8b:7f:17:
5f:68:a1:52:59:02:7a:7d:af:dc:7b:c8:dd:80:f8:
d4:42:d7:cf:a8:95:f0:e3:32:fd:eb:6d:00:79:58:
f7:22:c5:f5:ac:57:4c:3a:39:dd:69:34:e3:c6:aa:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:79:EA:D1:FB:EC:1A:B2:19:8A:17:13:79:DF:EA:27:E2:E6:0B
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e9:be:37:3c:ae:fe:09:7a:fe:dd:8f:80:56:4a:c8:4a:da:
f6:e0:e1:d8:9f:66:cd:6f:cf:f7:72:f4:6d:ac:d0:ac:74:ca:
69:17:a5:0e:78:f3:70:02:01:cf:4f:9d:a6:47:07:cb:57:47:
b7:15:83:db:a5:0d:ed:d5:b4:1f:31:43:f6:86:93:08:71:c7:
df:03:ac:a0:f6:61:00:4e:91:f8:06:dc:33:8f:99:d1:ee:55:
f5:10:e2:8b:d7:1d:a6:d7:95:7b:3c:ab:aa:0e:bb:4b:be:2b:
6d:b4:45:38:cb:7e:c8:a7:23:50:d0:c0:bc:85:ee:a9:9b:53:
2f:78:a4:48:e8:50:8c:c4:8f:46:9b:8c:a6:c4:93:f7:7b:79:
11:17:98:de:74:3c:9e:d4:1d:31:40:28:8e:08:e4:d9:4e:8f:
b3:d1:66:4b:d5:d6:51:21:c8:17:ce:8d:14:d6:21:1b:08:74:
7d:5f:0b:2a:bd:6a:c8:77:c4:70:27:d3:c8:6e:92:e7:30:b6:
e3:e1:55:b9:50:9b:4c:91:90:59:67:bf:2b:7a:42:63:d0:07:
dd:9f:4b:27:c9:d4:85:4e:1d:e0:8d:1e:d4:a6:c9:f3:c6:15:
85:8a:19:1b:16:31:71:aa:85:16:64:94:b2:65:52:e6:7a:18:
1f:1e:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:18 2025 by rpki-client