Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: ypRz4x+4oy4Zfdx78zcuNAPYLtVvMOOKF/jBHKbUubQ=
Subject key identifier: 6D:40:B6:8B:D7:34:C6:EF:EC:9D:DA:1B:84:BE:70:30:FD:19:62:5E
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019A53AC99C2576833C2F52C29AD66830393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 0679
Signing time: Wed 05 Nov 2025 11:00:11 +0000
Manifest this update: Wed 05 Nov 2025 11:00:11 +0000
Manifest next update: Thu 06 Nov 2025 11:00:11 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: otvKu5r0ghiaMfiIgMnlHmtUs6zUW7GbIBpuFBWQgJQ=)
2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:99:c2:57:68:33:c2:f5:2c:29:ad:66:83:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Nov 5 11:00:11 2025 GMT
Not After : Nov 6 11:00:11 2025 GMT
Subject: CN=6d40b68bd734c6efec9dda1b84be7030fd19625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:51:9d:dd:44:f3:14:18:aa:86:c2:c4:73:
b1:03:e7:36:3e:0c:d7:a1:eb:9f:8b:3b:c2:79:f9:
de:47:47:53:18:ec:0d:a6:2b:f9:3a:e1:69:df:c6:
a4:ef:c7:7b:4f:3d:78:21:ed:f9:c1:89:1a:61:34:
fa:c5:2d:e1:6f:fe:df:39:e9:70:a1:7d:fb:c7:fd:
72:62:9f:08:77:97:58:f1:e9:ed:89:e9:d5:c3:10:
38:ee:49:e0:82:79:6d:a3:0e:de:ae:c2:f7:95:75:
90:53:4a:b3:af:04:c6:ac:8b:d4:d0:67:1d:9d:63:
6d:fc:95:3d:17:a7:00:4a:c6:f3:72:1f:b7:90:ed:
22:8d:85:fb:e8:6a:79:fc:92:d2:18:72:87:54:78:
2d:bd:41:3e:5a:fb:1f:0e:c2:20:fa:fb:db:d3:f6:
a3:2c:6d:39:e9:b0:31:3d:15:15:28:d0:37:f5:00:
8d:46:0a:09:45:78:47:8e:fe:e0:bd:96:d4:03:33:
fd:f0:8e:58:e6:f7:4e:c1:35:c1:58:cd:2e:2c:89:
b7:be:d2:56:5a:e3:bb:0b:43:d8:48:d9:5b:ae:e4:
0d:d3:96:ef:c4:43:e3:52:19:42:f2:d7:94:66:60:
73:28:ed:bc:07:b5:fe:00:ca:ad:29:e9:dd:6c:5c:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:B6:8B:D7:34:C6:EF:EC:9D:DA:1B:84:BE:70:30:FD:19:62:5E
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:87:bd:20:88:64:6f:13:69:63:3e:dc:9a:93:b1:6e:de:a1:
cd:7f:d4:2f:0e:c2:98:3a:a8:e0:1a:39:7e:ed:d7:de:dc:52:
22:d6:5b:7c:13:1f:42:ed:d8:d9:aa:fc:33:d7:3f:9c:45:01:
c0:72:73:cd:19:6e:54:f9:53:1a:7c:e6:23:78:b6:cb:e9:8c:
38:00:09:70:42:c2:37:84:53:14:2a:09:e8:32:67:49:9b:26:
8d:b3:26:c8:00:e0:55:ad:52:6a:9e:e1:31:4c:da:d7:42:a4:
a2:d6:75:0e:fc:73:ea:e1:19:83:91:35:d8:ea:33:4b:8e:22:
c2:01:bf:a4:04:61:32:2a:c2:00:a6:b4:8e:02:39:56:a2:3c:
75:c9:b1:64:bc:4b:25:47:7a:59:a4:b1:19:b7:e0:7f:95:fe:
21:56:1c:53:2a:3e:2d:7d:04:b9:be:a2:8d:69:68:f9:6b:37:
fb:c6:fc:89:14:31:53:b8:4c:14:d9:11:eb:fa:27:eb:41:72:
88:6d:da:e5:2b:80:e5:0f:27:0a:fd:5f:c9:ea:01:c6:99:eb:
d0:c5:bf:55:28:42:ba:47:db:bd:d9:98:56:38:d0:24:fb:53:
74:cb:ad:7a:e8:64:b6:84:5a:15:40:78:83:d7:f2:83:1b:15:
2e:7e:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:42 2025 by rpki-client