Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: ft5+OmyZ0LE3UrDz566jeF5a60o9OEPlFSLLkZv5irA=
Subject key identifier: 92:34:65:9F:1C:79:51:A0:69:8B:28:70:03:CD:4A:9E:3C:A2:45:E2
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 0198D51631391D281A6D976AC964993D807D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 0v9Ck+ntopFzfKhK4U8WuQoQZ951kqTumgMbxReexZU=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:31:39:1d:28:1a:6d:97:6a:c9:64:99:3d:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=9234659f1c7951a0698b287003cd4a9e3ca245e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:cb:ee:d8:6b:d0:71:4c:77:05:d4:c8:a1:
0e:54:af:5b:bc:6a:d2:61:e3:2d:a8:37:c3:ad:2f:
92:b7:44:8d:c5:32:f3:0f:3a:4d:30:8b:10:7d:78:
2c:e9:89:b3:38:8c:59:81:ce:f4:6e:6f:3f:09:75:
a4:f8:9e:61:0b:d4:d3:50:66:81:dc:2b:6f:bc:a9:
3b:de:0b:af:a2:a7:25:c7:bb:f8:23:ba:da:73:da:
ea:19:c4:b1:94:06:82:6b:5b:58:ea:e5:f0:55:ff:
a7:a7:7e:fe:45:48:73:5c:f6:b5:26:f2:5f:72:86:
20:99:cc:0e:69:33:6d:c6:5d:43:d4:2d:1a:f6:5f:
71:83:37:20:64:4e:7a:15:dd:ab:b8:96:28:2f:1f:
b6:b8:38:69:41:21:28:42:12:92:d3:8c:7c:b2:e2:
dd:00:f9:68:d7:64:b4:db:b0:53:67:d8:98:05:c8:
ba:ea:f2:7a:8a:18:2f:58:15:c1:1b:20:46:13:99:
10:b0:4c:84:c0:6d:4b:89:1a:06:54:5b:74:8f:cc:
94:89:8a:14:f0:7a:4b:b3:04:f1:d4:8d:92:36:8f:
bf:71:59:97:61:bb:09:80:e0:85:9c:93:16:bf:94:
52:32:56:24:ea:00:c5:4c:2c:0c:e3:b2:22:d3:bc:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:65:9F:1C:79:51:A0:69:8B:28:70:03:CD:4A:9E:3C:A2:45:E2
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:07:e0:4d:cd:1f:8b:ca:01:61:3d:40:04:f0:01:02:e5:93:
b3:00:9e:a8:0c:14:38:ea:07:44:2b:7c:cb:fd:59:c9:8b:63:
29:d9:d2:c8:64:fe:6e:ed:90:5c:ef:26:00:68:19:c6:ae:b0:
12:84:51:79:d0:bf:76:fc:d8:3c:ac:9e:f4:04:dd:ac:ee:1c:
df:1b:5e:4d:51:e2:d2:00:1e:6b:2d:07:0d:29:a5:74:dc:07:
95:7f:2e:1f:76:11:c1:5b:f5:cc:4d:ce:0d:d3:1d:e0:7d:23:
1e:20:1e:f2:f4:fe:75:2f:cb:8c:62:1e:95:7c:12:3b:b8:6b:
dd:5d:c9:72:b3:4a:51:2f:99:ea:56:39:f2:0a:d3:a9:d5:21:
07:dc:10:7b:3a:97:50:67:fa:a1:2e:9d:56:32:bf:e5:c0:0f:
80:33:f0:5a:a7:1a:94:50:cf:51:a3:d9:df:18:c2:aa:ab:dc:
f9:f3:86:85:65:b6:5e:56:28:1d:f5:c1:b6:bb:6b:01:af:4b:
43:f5:73:3f:66:3b:1c:15:b0:5a:94:24:1b:c8:98:c5:d1:2c:
26:a7:40:5f:0c:8e:ee:93:e3:72:4e:7f:75:cb:16:13:b5:ff:
32:28:3b:73:c3:3f:84:15:1a:4e:b3:22:53:82:1f:69:d2:5c:
e7:34:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:34 2025 by rpki-client