Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: DGj0XD+rz7EuLm1Q+20flwUu8RyO/tq9kfxKAAN3cjY=
Subject key identifier: F4:8A:16:75:1C:73:89:0F:E0:A1:D2:A0:34:E6:D4:32:E5:42:4E:F3
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 019A4FCFCF02E1C0677CD819F13C492B4352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: 4bHtGhLqcouVwSStRPjrIKcm4Dkzz77r6EArusZ4d3E=)
2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cf:02:e1:c0:67:7c:d8:19:f1:3c:49:2b:43:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=f48a16751c73890fe0a1d2a034e6d432e5424ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:7c:f0:e2:da:1c:a0:15:a7:56:f9:b6:21:
71:67:af:81:89:cf:c1:a6:c9:9d:f5:62:dc:35:e2:
0c:84:54:86:10:dd:94:8e:d4:20:12:b4:cf:2a:8e:
33:eb:5f:51:73:4a:62:17:cb:47:1a:ae:ce:cc:82:
8e:5e:cc:1f:67:fb:9d:c5:4f:0f:4e:19:db:aa:17:
7e:f3:4b:f9:07:fd:be:ac:eb:fd:9a:2a:0a:69:84:
a4:1d:e6:52:a0:6b:be:d0:f4:9b:35:22:de:85:68:
aa:7b:e4:59:cb:8b:8e:f6:7a:d0:3e:2b:8d:7e:79:
80:82:b8:d2:1b:a0:d1:45:a4:12:de:c9:50:7b:29:
ad:f8:7f:28:08:a8:94:4c:fa:3f:22:c0:bf:91:79:
49:2a:10:0b:e7:5f:71:11:ad:8b:f2:12:c3:ed:0e:
ee:9c:38:86:1f:74:4a:f1:f9:b1:b8:d4:8b:53:b1:
f0:68:a7:fc:e2:17:5b:84:57:a8:98:9f:d9:5f:e3:
c3:9f:3b:81:c4:a2:16:22:13:4d:95:e4:4d:66:1f:
9a:44:05:a3:9c:1a:eb:60:4a:47:4f:1c:f1:32:f9:
67:ac:4b:50:98:1b:59:3f:33:84:6f:33:d6:75:07:
2f:23:29:90:9d:97:bf:65:84:ca:d9:4a:00:92:29:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:16:75:1C:73:89:0F:E0:A1:D2:A0:34:E6:D4:32:E5:42:4E:F3
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:3c:d7:d7:47:de:4f:f5:d9:0a:b4:ca:7a:e6:fd:19:bc:
56:57:f1:3d:18:7a:ef:39:0c:7e:df:9d:d4:b0:68:9b:bf:31:
fc:e1:a1:4c:8e:cc:c2:86:1d:f7:73:31:72:da:b6:b7:49:7e:
3c:17:be:90:ad:4a:a7:63:e4:25:d4:16:18:f9:1d:7f:f6:8b:
56:89:8e:f2:c6:75:b6:7c:d8:31:3c:94:99:bc:61:75:02:9f:
6c:2b:01:44:9f:cd:15:b1:7b:76:2b:90:bc:48:04:ef:fd:46:
7b:a2:09:a7:fb:8b:16:35:0c:77:cf:a4:09:74:60:38:bc:8a:
d0:fc:3c:ca:fd:e6:28:9c:c6:1a:41:80:b1:0e:72:3b:d2:b8:
b0:1d:92:be:e0:91:8a:93:91:b6:16:23:87:2c:9d:e1:67:75:
d7:6a:00:9d:e1:98:ec:73:d0:79:e7:9f:97:9e:35:e7:79:f9:
65:b0:f5:69:b7:14:21:62:15:96:97:e5:17:cb:6a:84:8a:f6:
93:08:c5:2d:7a:dd:cf:33:43:f8:35:76:7b:c9:09:3a:7e:99:
f0:69:d2:f6:60:c2:c9:f8:eb:eb:ba:49:02:b2:24:6f:40:ed:
ee:5f:55:bb:8d:72:bf:30:d0:0d:70:4f:49:b6:43:f4:a8:ab:
be:b5:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:26 2025 by rpki-client