Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: 4/LixXjr6yyGqHob7itRmJx8YyhiEv6Yk2Qsz2mCM4w=
Subject key identifier: 04:E6:D4:90:26:56:C8:35:F9:6C:41:99:1B:26:6D:0A:85:63:93:09
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 0199FC8F7DC1382DCCF29C8646A61E086358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 9IFTKz5NDbFcz8HGewqqsQwHW+KXxyNS3Q5PdZIcMoY=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:c1:38:2d:cc:f2:9c:86:46:a6:1e:08:63:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=04e6d4902656c835f96c41991b266d0a85639309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:4f:eb:67:a1:65:67:42:b9:73:11:44:58:
9d:ba:7e:61:08:54:86:b2:4a:96:60:c8:84:1f:9f:
77:86:a0:1a:e4:1b:e0:a7:7e:1f:fd:73:fa:82:e8:
96:7d:03:9b:3f:a6:08:33:12:c0:53:ba:d7:8b:b8:
37:31:5b:1f:05:80:d5:95:47:c2:fd:39:88:60:78:
7f:dc:f2:6d:32:d8:30:31:50:c2:15:18:bb:57:b0:
66:ce:b1:04:0e:7d:0e:24:a2:0e:e5:d7:a2:f0:4d:
3d:df:fc:2b:8f:c8:d7:f2:e5:b1:8a:38:3d:66:9a:
c9:a7:94:f2:fb:5a:79:89:aa:54:04:02:b1:83:e8:
6d:54:28:ad:46:95:ee:ab:0d:c0:af:f4:7f:5e:42:
21:d4:e9:77:7b:d8:f1:e2:33:03:8c:fe:03:69:02:
6e:1c:27:3b:f8:70:b4:d0:60:c6:60:8b:5d:db:83:
35:6f:39:22:4e:13:e1:f2:6d:de:6f:1f:c3:58:15:
48:83:c2:93:50:68:1a:ea:6a:71:d5:4b:df:4f:84:
87:51:79:22:21:50:86:c5:78:ce:62:a1:93:81:ab:
c8:6e:6b:0e:1d:39:e6:7e:c0:dc:bb:e3:05:d1:b0:
ce:9f:a0:88:76:a0:82:94:14:f2:ed:e5:3f:f6:57:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:D4:90:26:56:C8:35:F9:6C:41:99:1B:26:6D:0A:85:63:93:09
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c5:57:29:20:88:3c:31:62:46:b4:36:2b:4f:e3:8d:2b:37:
78:8c:13:8a:10:6a:fb:a2:e7:e4:0a:de:6c:ff:12:29:00:35:
36:ee:f5:ac:47:c2:b3:74:da:a1:e0:e7:89:3e:22:c8:22:b8:
86:c7:b1:7b:81:42:76:6e:f9:8d:bc:91:1a:d8:15:2f:3c:c7:
0d:f8:f1:9b:3b:f8:a3:e0:f8:92:a2:41:c2:80:88:3c:3e:76:
ac:33:6c:cf:00:a7:9d:be:7a:e6:78:a7:96:20:fc:e6:00:65:
ec:8f:c9:49:07:33:db:68:9e:93:2d:7c:a9:94:89:fa:ef:53:
7a:c8:e9:72:19:86:03:da:d2:2d:09:14:f1:93:8b:11:e4:62:
29:89:94:37:cf:f8:a8:b6:91:73:99:63:76:c7:40:bf:75:e0:
55:67:47:e7:2d:0f:8e:2d:ef:39:be:17:77:6c:58:8a:48:01:
7b:10:db:67:7e:f2:c1:c1:40:2a:ed:c9:27:ad:03:75:cb:19:
e4:d8:ee:08:41:dc:7d:84:0b:1a:76:7f:05:8e:bb:7c:d7:e8:
af:5a:cb:90:9c:91:78:8d:0f:0b:b1:1d:45:df:ef:c2:84:f5:
60:c7:c1:50:fe:c4:5c:5d:71:d3:79:78:fa:2f:d8:0e:b3:4c:
23:94:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:28 2025 by rpki-client