Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: ZMl+6dx9XyWuaDgu46d+nLsYpZAf59xkQbD2/6s3VJ4=
Subject key identifier: C4:26:DE:5A:BE:37:A8:D5:A9:B3:53:74:1D:AE:09:40:B7:6C:1E:0D
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 0198748722B78A0E98391A1D8595299F3B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 10:01:09 +0000
Manifest this update: Mon 04 Aug 2025 10:01:09 +0000
Manifest next update: Tue 05 Aug 2025 10:01:09 +0000
Files and hashes: 1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: 4ddxsWvaHysArimzh7s6IROKY8VQervA3aw6pZZcWTg=)
3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:22:b7:8a:0e:98:39:1a:1d:85:95:29:9f:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Aug 4 10:01:09 2025 GMT
Not After : Aug 5 10:01:09 2025 GMT
Subject: CN=c426de5abe37a8d5a9b353741dae0940b76c1e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:2b:e9:1f:50:82:d4:88:ac:9c:08:23:30:
93:36:49:26:9a:5e:3d:17:95:ac:1a:b5:15:d1:f8:
85:6a:09:57:06:5f:50:ea:de:8e:af:86:0a:d2:54:
d2:e2:b8:fe:40:1e:66:2d:ae:d0:c8:d2:e7:22:17:
5f:eb:1a:0c:ae:ad:22:f9:8b:44:b0:a9:c8:8a:40:
bb:d7:d4:c6:4d:3a:2d:d0:be:3e:22:8e:80:c4:0c:
8a:25:30:d9:18:11:4b:56:23:83:9a:08:e5:5c:da:
fe:96:65:b5:70:9f:b5:5d:01:02:69:46:b5:72:8f:
bc:4d:49:32:ae:25:d1:f6:2d:6b:fc:4e:ee:a5:31:
49:b9:ce:5c:35:35:e2:0e:da:ca:fc:60:d9:9f:ac:
fd:9f:1c:e4:7e:af:f3:cf:19:74:5c:c9:9d:fb:18:
4a:fb:38:12:c6:8d:71:cd:b9:b8:cc:34:34:14:d4:
34:47:a6:f3:88:6c:7f:73:cc:92:2e:ee:cd:06:f3:
3d:23:46:a8:68:b1:4f:32:d7:7a:68:b5:9e:e9:0d:
70:36:68:c8:24:2a:58:5f:73:9f:29:0d:31:74:d6:
61:b8:16:51:89:83:49:83:b6:78:dd:e4:20:9c:da:
8e:41:4b:60:6b:e5:b0:8a:d8:2c:28:0d:65:b6:88:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:DE:5A:BE:37:A8:D5:A9:B3:53:74:1D:AE:09:40:B7:6C:1E:0D
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:91:5b:db:b0:05:63:94:8c:67:7a:26:a6:53:78:e6:4e:fb:
bc:81:e6:1a:62:ec:cd:46:bc:4d:c0:77:76:5a:56:2d:36:04:
a8:7a:9f:bc:a4:ff:3c:7e:f0:c4:35:ce:72:0e:bb:75:b2:a4:
32:18:b3:ba:4e:49:57:1a:4d:75:e2:1b:35:ec:d4:66:06:14:
98:54:fc:0d:1c:35:fb:81:50:80:51:c2:ac:88:9c:d1:3d:4c:
db:b0:47:68:fe:88:98:6e:5c:62:85:21:56:6e:32:fb:40:7a:
3b:3c:07:45:6e:0d:f8:9c:10:0f:36:09:04:86:23:8c:2b:af:
71:55:69:f0:54:22:92:8f:93:fb:fb:d4:6a:b1:58:38:b0:c5:
6a:2c:de:54:79:c9:12:b0:a0:7f:cd:b8:f7:59:8a:e6:7e:24:
2c:35:19:37:9b:c3:e9:a5:0f:b9:f1:e4:61:97:45:69:a0:a5:
c6:1f:f3:1d:bb:72:70:45:33:72:ab:cd:f0:86:91:2e:4f:24:
6e:1f:18:76:ad:14:5c:b4:d9:fa:c7:f7:67:d5:f4:64:71:b2:
f1:1c:fc:f5:6e:8a:88:c0:94:18:4c:ff:fd:7d:27:bf:84:88:
25:99:f2:d1:d3:3d:31:d6:88:2a:9c:4b:93:9e:8c:b5:72:32:
19:1f:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:23 2025 by rpki-client