Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: /zO/mYVFG+o1mmNVwlVdaL7N3pAXhgFl8Y0DQCPx/4w=
Subject key identifier: C2:62:69:48:B8:C3:E2:01:35:22:AD:B8:05:39:D2:57:58:F8:E6:11
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 0198D73B25B7AC96B3A0F4E4A58B595AA4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: 10
Signing time: Sat 23 Aug 2025 14:00:34 +0000
Manifest this update: Sat 23 Aug 2025 14:00:34 +0000
Manifest next update: Sun 24 Aug 2025 14:00:34 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: Z4c3H7FMkQLkzNDDW7rXUCzqcNToGwqZ3uAJ+LytKzU=)
2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:25:b7:ac:96:b3:a0:f4:e4:a5:8b:59:5a:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Aug 23 14:00:34 2025 GMT
Not After : Aug 24 14:00:34 2025 GMT
Subject: CN=c2626948b8c3e2013522adb80539d25758f8e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:12:31:58:38:52:4f:e8:22:6d:78:05:35:
92:25:96:98:71:10:2d:33:58:c9:a2:0c:ff:22:b2:
35:33:9b:bb:6a:2c:d7:05:38:23:71:e3:7b:14:3c:
1e:e3:82:05:45:b7:3c:94:b8:10:10:ed:0f:86:46:
13:de:41:fe:3b:0b:c5:af:6a:b2:f0:81:5b:13:5f:
02:7b:0c:86:27:3e:30:7c:4c:64:34:d7:fa:ec:16:
90:e5:3a:52:a9:dd:c0:2c:ad:c4:23:1f:20:7e:ed:
f3:0a:40:f6:cb:29:c1:31:df:fd:5e:27:f5:a7:ce:
70:ad:55:3b:17:33:4e:c5:8a:e7:25:13:cb:93:dc:
f9:8b:78:b5:a4:db:da:3a:0f:f6:73:e0:55:f9:26:
28:d9:69:62:f3:56:e2:2a:60:c5:ae:86:d7:8a:ad:
6e:44:61:cf:db:ca:2c:ee:eb:42:cf:f2:31:8e:0c:
f5:88:8d:24:f5:7d:0d:ce:92:21:d6:c6:64:e4:b2:
6e:91:32:e1:c1:c9:2e:ad:e2:3f:9b:6c:3e:4b:f7:
ba:38:c4:92:f7:3d:5b:f2:ab:7f:34:19:de:7c:7d:
07:e2:6a:89:21:bf:f5:a8:25:c9:b5:ba:0e:08:14:
b5:23:88:0b:aa:de:7d:f3:b3:d4:e2:88:cc:bb:ad:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:69:48:B8:C3:E2:01:35:22:AD:B8:05:39:D2:57:58:F8:E6:11
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:0d:19:d5:54:51:3c:d9:29:4e:ce:4f:d4:40:0c:3f:44:
ee:6e:12:b1:fb:a5:54:04:80:7f:fc:ef:8e:70:5b:b5:70:18:
13:c2:ed:60:9c:d2:56:b5:b2:93:67:92:4f:f7:64:8f:6b:d5:
ee:df:ef:49:50:b4:77:70:7a:33:d9:f8:a0:f3:99:78:6c:ee:
80:0c:50:40:87:34:eb:a0:5b:b0:20:f5:a4:24:75:d1:07:d2:
1c:72:26:75:4e:07:0b:e2:1a:74:8f:36:ad:dc:e3:a9:21:79:
57:a4:c7:28:22:93:cb:f3:71:7d:45:5d:f3:15:98:c7:37:ad:
92:36:f5:f1:91:b2:3a:cf:6f:ba:ed:45:8d:b0:45:d2:d7:ff:
78:16:65:93:2f:df:f5:fb:cf:d0:01:48:3b:de:e9:77:ac:59:
a3:72:bd:9c:24:50:dd:88:0c:40:ea:9a:59:a1:2c:17:39:85:
3c:d0:99:18:bf:14:aa:65:77:e1:7d:b5:e3:90:40:02:6e:11:
65:98:67:27:0d:90:84:fd:60:51:69:f0:b4:41:1d:54:06:6a:
db:45:42:76:25:95:e6:3f:1d:3f:51:1a:a7:b9:a7:3c:a9:74:
32:17:ed:e0:86:aa:a4:a8:24:c5:7b:4f:2e:5e:19:06:b4:d1:
86:f6:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:06 2025 by rpki-client