Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
File: DUHQpubfLhjCVnMjaNbnaCiTExA.mft (raw, json)
Hash identifier: N7pZEZ0MSfflpkLyTpoEWtzmmJUXNq3ogjiX3FOzYzU=
Subject key identifier: 37:19:13:19:BF:1D:75:C5:9F:D9:E2:70:27:71:E7:02:06:F4:97:4C
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 01987B9CE1C7FAC7E37127642AC2C50B844A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
Manifest number: 0F62
Signing time: Tue 05 Aug 2025 19:02:15 +0000
Manifest this update: Tue 05 Aug 2025 19:02:15 +0000
Manifest next update: Wed 06 Aug 2025 19:02:15 +0000
Files and hashes: 1: 5yn4zHauZM75VAijpeMoQrgxCO4.roa (hash: XNQWDr0wgLOmyX40wHgFFl4XUTUYTIzKWa/lVOSFR8o=)
2: DUHQpubfLhjCVnMjaNbnaCiTExA.crl (hash: Gedw3jrpqR1uk2YO1dVr50H7ujpw1bj78K0qZ9JmmTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:e1:c7:fa:c7:e3:71:27:64:2a:c2:c5:0b:84:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Aug 5 19:02:15 2025 GMT
Not After : Aug 6 19:02:15 2025 GMT
Subject: CN=37191319bf1d75c59fd9e2702771e70206f4974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:36:24:97:19:4f:1f:5f:81:8d:7c:33:60:
32:a3:20:72:ba:1b:80:4e:77:9e:71:31:b4:d2:e6:
92:59:83:4a:8e:aa:3f:7f:b3:e1:46:9b:4f:fb:c8:
ff:22:a0:3c:00:5f:62:a2:09:eb:de:97:ee:c1:34:
ba:1a:bb:44:3a:df:81:00:41:71:53:84:f0:be:5b:
79:1f:90:ae:ff:af:8d:61:b6:09:fb:01:ee:61:6b:
4a:ef:bf:6d:a9:d4:a4:3b:8e:44:29:da:ab:70:1b:
37:29:8c:46:ba:42:55:bc:45:cc:30:72:f0:93:ed:
df:8b:28:0d:b8:20:ab:af:64:e2:11:8a:44:31:35:
da:5a:30:cf:c9:71:e1:5a:cb:01:30:ef:bb:46:e7:
5e:37:0e:69:cf:bf:e5:a5:9c:10:2e:2a:df:f0:8b:
48:9a:22:cb:24:e8:18:e3:c2:94:3d:1a:0a:50:07:
5b:27:77:db:45:54:37:05:03:e6:8f:e6:18:21:db:
59:28:11:b2:f8:48:e7:e3:b2:94:9d:09:16:8e:56:
1d:2c:dc:93:71:7a:81:b4:8e:cd:3e:2b:fa:56:ef:
6c:d2:a7:c9:5e:83:4e:b5:03:9d:4a:2c:aa:56:c5:
31:e9:cc:04:17:30:0d:25:29:5f:d4:3a:74:f2:f4:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:13:19:BF:1D:75:C5:9F:D9:E2:70:27:71:E7:02:06:F4:97:4C
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:d4:ba:85:2e:d9:e7:f8:cf:4d:20:70:38:70:f6:b8:fc:
91:89:c9:ef:ee:27:f9:4a:90:c6:52:8f:51:36:1e:e9:18:3f:
c3:0e:11:00:98:d9:4c:92:d4:72:08:58:ea:fe:ff:b9:4c:a3:
72:b8:eb:51:95:a5:b0:b4:ac:19:cc:cf:dd:a0:09:15:e3:e2:
53:d3:0a:1f:5f:98:d0:eb:6e:65:a8:d2:e6:0b:80:37:22:b1:
f1:5e:e2:d6:54:14:fc:69:5c:01:3a:bf:4b:d6:73:7a:29:0b:
bc:c7:e3:da:d3:a4:ed:c1:83:11:0f:3a:78:7f:6b:c5:19:2b:
b6:56:95:c4:d9:1a:32:36:5e:a7:2b:b1:96:71:18:ea:5e:18:
a6:4e:55:69:f8:4e:f6:a0:9a:d2:8f:83:7d:2c:03:c9:00:2d:
bc:af:60:75:c8:16:ab:69:a4:9b:1f:23:64:c2:56:21:c5:ae:
6d:3e:45:9e:34:d7:24:df:22:3e:c6:fe:45:27:24:19:ad:9e:
ad:fa:8f:7f:66:8a:9b:19:74:fa:e5:e9:5b:69:5b:97:e2:96:
66:05:89:1a:4a:8a:c8:5f:16:85:b1:40:82:b9:f9:6a:66:9f:
64:02:5a:0e:3b:27:7c:a3:ae:bd:9e:a9:94:64:13:e6:0b:ae:
6b:41:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:54 2025 by rpki-client