Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: lLuV+Gb9wtzpgpBWLEuqvRk8hhzD1mCCKVMp/pjxyHE=
Subject key identifier: 91:67:BA:E4:C9:54:F3:5B:BF:29:74:16:3B:E8:08:1C:14:1A:87:CC
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 0199FBEC0A3757DB20205BE8ACADD63AD223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0C6D
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: l492K/O2AcwxsN9oMBSjTyKSdXNv9EhJVoLEP0NUe/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0a:37:57:db:20:20:5b:e8:ac:ad:d6:3a:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=9167bae4c954f35bbf2974163be8081c141a87cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:04:59:41:eb:f2:3f:75:dd:e9:8a:67:2f:
6f:51:21:75:b8:87:ef:90:36:44:4b:7f:38:cc:c2:
fa:78:57:b0:dc:30:c4:3e:3d:75:42:2e:c3:da:50:
f4:d7:21:80:f9:96:7b:bf:02:26:8a:ba:77:3d:1c:
7b:d0:4f:c2:9d:37:57:c9:5b:b9:3a:a8:07:e1:90:
52:bb:66:d3:d1:30:ad:50:3b:6d:e1:12:28:ea:1e:
37:d6:1a:26:13:f1:5a:7e:70:13:6d:20:e4:a9:04:
d3:b8:3c:49:ba:de:cf:ed:cd:17:82:e5:c8:ed:a7:
06:9d:a4:f3:13:89:7e:3a:c8:a5:15:61:24:67:34:
db:b2:56:a1:8b:1b:a6:16:ae:e8:b1:5b:9e:ce:8d:
17:d3:24:34:66:f9:1d:87:0d:2f:8a:9a:f8:59:be:
93:16:fe:2f:32:ee:18:a9:6a:85:e0:04:85:5b:42:
d9:4f:13:f5:e2:1b:22:80:55:8d:87:9a:28:46:fa:
ee:03:4f:b7:82:1b:5f:88:77:0c:f0:d9:f3:2a:6c:
ce:c5:09:aa:d7:50:15:62:8f:42:d6:20:f8:89:50:
af:7c:a3:59:54:0d:6b:6c:de:10:f7:9e:cb:36:e5:
21:69:66:dc:2d:ab:06:0c:dc:f7:b8:93:ea:5d:6d:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:BA:E4:C9:54:F3:5B:BF:29:74:16:3B:E8:08:1C:14:1A:87:CC
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:8e:78:17:f7:5f:65:ba:9d:7b:d7:4a:24:1f:f7:e8:17:
8f:06:ed:d5:eb:a5:df:0a:af:de:17:ac:0c:df:d0:21:d2:d6:
c3:33:65:75:e0:e5:94:8d:c0:c8:4a:79:7a:46:5b:24:dc:42:
79:58:13:54:4e:ca:e8:fc:5d:54:8e:57:59:ea:f0:73:8b:05:
7c:e2:9e:cb:98:b2:25:89:76:74:a1:5a:a5:03:73:65:f2:73:
01:46:03:94:a4:a5:1a:93:ee:b2:1b:f3:75:92:ac:fe:cf:ed:
64:99:b3:96:33:4e:c1:df:76:89:ee:10:83:00:17:e9:6a:23:
44:9f:b6:2f:b4:10:d7:b2:26:c9:59:a3:20:5c:80:6c:12:97:
1d:e7:b0:85:88:a9:bd:dd:bf:2f:35:fd:cc:c4:e9:67:be:a8:
61:6d:f0:c4:f1:f5:59:2d:5a:91:31:8f:c1:83:d5:b3:93:e9:
4f:5d:ec:30:94:3a:8d:ba:06:13:cd:51:87:d5:41:fe:3b:60:
93:fc:a8:fd:0d:6d:de:6e:75:b0:4b:d4:58:6f:7e:be:e6:82:
b0:11:00:28:a9:3e:4c:bd:4c:13:9c:2d:a5:6c:29:96:64:c1:
b4:1d:76:c1:ad:ba:b9:f0:3b:e6:34:0d:4b:52:a4:35:77:41:
bf:6e:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:09 2025 by rpki-client