Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: NSdHBWq1jrAZBGIL4/G7tTiik2P9+SUNMfaVdDxjoUQ=
Subject key identifier: 7E:C0:70:60:D1:BD:04:75:A1:BB:76:8F:21:9E:F3:D7:96:AC:E3:7B
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 019A4F9945EBBD60BD5E679FF584B8C124DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: ZrhBzI39OUrh4sMvDwEnifSkG8rWihvQGdK8zTsZzrk=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:45:eb:bd:60:bd:5e:67:9f:f5:84:b8:c1:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=7ec07060d1bd0475a1bb768f219ef3d796ace37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:b9:35:40:75:f0:20:a7:7c:3b:3b:75:53:
a9:26:68:23:7f:33:cc:dd:6e:b2:63:88:00:06:e8:
ac:25:8e:c4:10:2f:12:f8:0f:46:b2:ca:5d:ec:0a:
74:ed:01:c2:00:73:10:7b:6c:13:48:87:05:77:c9:
f7:ed:b2:55:fb:6a:58:41:9a:e8:4f:a6:7d:08:84:
42:89:41:8c:1a:6b:06:66:d3:85:65:b3:68:84:d9:
9a:c6:a3:19:9a:8a:a1:2c:3c:82:a7:9b:1f:74:d9:
dc:2b:a5:4d:a8:c3:29:c4:98:dd:c2:dc:95:52:0c:
95:45:11:11:e6:c7:e6:11:4b:d8:51:15:01:1e:39:
85:60:56:9c:61:22:d7:01:ac:43:3f:1d:8c:d4:25:
7b:c2:eb:57:af:50:2e:01:e7:c6:b4:00:ea:7e:b6:
b6:9f:82:4e:83:59:ee:f9:20:b1:32:36:c5:fd:43:
5e:57:5c:fe:b8:7d:b5:22:77:63:42:19:15:f8:f7:
74:dc:0e:23:dd:4a:9a:7d:68:3f:10:84:f1:e2:80:
ce:40:55:fa:fc:59:3e:90:86:61:c6:97:2f:20:4c:
99:a7:07:df:7c:69:4d:37:76:32:94:bd:3f:73:3c:
9e:1e:5b:f7:51:51:cb:11:5d:5b:19:d3:33:22:a3:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:70:60:D1:BD:04:75:A1:BB:76:8F:21:9E:F3:D7:96:AC:E3:7B
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:ce:9d:66:1d:2b:c7:25:ac:33:a3:21:9a:41:88:b1:d9:
1e:47:aa:ac:07:3b:1a:81:04:ae:56:56:97:08:84:5d:a5:c9:
db:0e:a1:23:0c:3b:b0:9d:49:bf:39:24:9e:45:82:fb:5f:dd:
5d:8d:06:37:74:11:f5:71:8e:86:4a:c3:fb:2e:00:99:f2:10:
a5:96:86:55:7b:12:17:f1:09:da:d7:53:5f:50:6e:6b:89:65:
bf:11:74:a0:7b:79:f6:6c:3f:84:0d:85:6a:3f:9b:fa:7e:89:
bc:96:40:36:bd:8d:dd:21:b2:78:58:6e:55:35:0c:e8:e3:59:
bd:ff:e4:87:97:2b:62:4f:0a:3a:45:72:fd:14:51:c1:a4:ab:
05:2c:d2:1d:af:69:20:ed:43:2a:66:0e:cf:7a:f8:ec:88:69:
d6:a7:a9:5f:66:bc:65:0f:2e:4c:69:90:67:38:9a:94:b3:65:
46:87:c3:17:ba:f8:fd:b3:b8:14:d8:89:6d:08:71:e0:f0:db:
ac:c6:10:c2:fa:70:d5:a4:3e:10:11:99:fe:1c:11:4e:fc:c0:
8b:09:14:c8:96:d4:89:76:17:ce:09:ca:f0:ac:a7:37:a9:01:
73:a2:1a:ae:06:b8:c2:1c:78:65:bb:ca:c5:27:1c:27:28:d7:
c8:dc:5c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmUXrvWC9Xmef9YS4wSTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3
MjM2ZTUwHhcNMjUxMTA0MTYwMDM2WhcNMjUxMTA1MTYwMDM2WjAzMTEwLwYDVQQD
Eyg3ZWMwNzA2MGQxYmQwNDc1YTFiYjc2OGYyMTllZjNkNzk2YWNlMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycy5NUB18CCnfDs7dVOpJmgjfzPM
3W6yY4gABuisJY7EEC8S+A9Gsspd7Ap07QHCAHMQe2wTSIcFd8n37bJV+2pYQZro
T6Z9CIRCiUGMGmsGZtOFZbNohNmaxqMZmoqhLDyCp5sfdNncK6VNqMMpxJjdwtyV
UgyVRRER5sfmEUvYURUBHjmFYFacYSLXAaxDPx2M1CV7wutXr1AuAefGtADqfra2
n4JOg1nu+SCxMjbF/UNeV1z+uH21IndjQhkV+Pd03A4j3UqafWg/EITx4oDOQFX6
/Fk+kIZhxpcvIEyZpwfffGlNN3YylL0/czyeHlv3UVHLEV1bGdMzIqMVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7AcGDRvQR1obt2jyGe89eWrON7MB8GA1UdIwQY
MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt
NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh
LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+XOnWYd
K8clrDOjIZpBiLHZHkeqrAc7GoEErlZWlwiEXaXJ2w6hIww7sJ1JvzkknkWC+1/d
XY0GN3QR9XGOhkrD+y4AmfIQpZaGVXsSF/EJ2tdTX1Bua4llvxF0oHt59mw/hA2F
aj+b+n6JvJZANr2N3SGyeFhuVTUM6ONZvf/kh5crYk8KOkVy/RRRwaSrBSzSHa9p
IO1DKmYOz3r47Ihp1qepX2a8ZQ8uTGmQZzialLNlRofDF7r4/bO4FNiJbQhx4PDb
rMYQwvpw1aQ+EBGZ/hwRTvzAiwkUyJbUiXYXzgnK8KynN6kBc6Iarga4whx4ZbvK
xSccJyjXyNxcJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:32 2025 by rpki-client