Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier: VoI03DfVlqfRN+RARwjYcxpLECJMpgudZFt5jlpGT04=
Subject key identifier: D0:D4:71:71:A6:39:DF:35:96:0B:1E:D2:BA:9A:E1:5B:66:F5:EC:29
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial: 0199FCC637A5D24237B453C5D527885580A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number: A8
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: dogj1ehhgsPxf/EF6KG1T3L+fH7iHvTuojJwRybA12c=)
2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:37:a5:d2:42:37:b4:53:c5:d5:27:88:55:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=d0d47171a639df35960b1ed2ba9ae15b66f5ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:9e:ca:b9:bf:92:33:31:09:4d:6f:b2:28:
cf:05:1f:87:d7:fc:5d:7b:5c:46:8d:e9:a1:01:fd:
62:80:f1:07:6b:09:18:46:db:cb:0e:1b:2f:a0:0c:
8b:d6:4c:4e:e4:18:87:61:86:4a:37:59:9a:7f:d1:
e8:14:18:ba:17:b4:8e:8c:47:4b:05:f7:aa:47:98:
f1:d9:78:8c:f4:f1:f9:fd:5d:ae:1f:9b:33:14:e7:
4f:d4:cb:f8:e8:ec:76:9d:43:08:e2:f9:05:9f:fe:
fb:3f:a0:58:b0:fc:f7:ff:95:fd:2c:39:c3:16:26:
75:75:f6:65:87:ec:e2:76:d2:68:c1:dc:9e:dc:c5:
b4:93:a5:1d:eb:8e:d9:f2:43:99:30:21:0a:d1:fc:
63:72:74:29:3f:7b:49:4f:78:9e:76:30:f6:22:22:
e3:60:f1:ae:24:e0:73:6e:40:f1:0e:b5:d7:ed:a2:
22:e0:ad:b9:a4:53:19:02:ba:65:b8:a3:1c:9f:ab:
41:61:0a:fc:74:17:3c:c4:f5:48:74:94:bd:50:34:
f2:5d:78:e8:e5:d0:86:9f:8e:af:e1:0c:71:06:da:
4f:31:bf:82:82:2f:a1:42:82:85:6d:45:f0:00:96:
27:0c:56:32:a8:8a:26:37:d0:41:10:33:58:5f:40:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:71:71:A6:39:DF:35:96:0B:1E:D2:BA:9A:E1:5B:66:F5:EC:29
X509v3 Authority Key Identifier:
keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:dd:d7:7e:6a:e5:f8:c9:e4:fb:ac:d6:67:81:08:61:78:
bf:2e:ac:c6:c7:54:32:02:00:2c:a8:d8:b7:4c:5f:69:78:59:
67:79:c3:81:b9:b4:3a:09:c1:af:7a:cd:51:9e:69:6e:55:e0:
3b:3e:32:ae:40:51:e4:d8:03:43:4f:4c:4d:5c:4b:c6:10:46:
7b:f7:24:57:f1:db:7a:22:46:67:c5:f9:b0:7b:d5:40:3e:af:
64:cc:67:37:23:8b:31:6f:3f:3f:04:88:bf:d3:3a:fa:25:d2:
0d:6c:6a:dd:76:02:fd:05:9e:92:0b:5c:02:2e:1e:00:4e:15:
fb:75:18:80:0e:d0:1d:cc:cb:02:bf:50:12:cf:4a:97:f6:c4:
5a:dd:e2:f7:79:c0:a4:ec:74:54:bf:9e:b7:e9:d6:05:ec:7c:
28:be:21:f9:38:b4:42:7c:61:bd:b3:25:0f:42:df:6e:a7:67:
f5:d4:0d:6f:96:1e:f5:0c:f6:e8:c5:c3:04:b3:42:ff:aa:fe:
49:75:b4:f6:16:62:37:05:fd:99:74:29:0a:e5:c7:1f:25:e6:
d6:e7:6f:ce:3c:cf:3b:7d:27:e5:17:a2:5a:23:64:f1:25:cd:
65:95:db:b8:83:79:55:04:03:7d:b4:42:63:33:c0:aa:13:f1:
a4:37:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:25 2025 by rpki-client