Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier: Cs2sW33pW36ig0/K1R9tPRb986NUIqQcw/Bu74K4s/c=
Subject key identifier: 79:96:7E:96:73:37:DD:FE:7F:62:6B:6D:49:7C:D3:4A:18:5E:E9:6E
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019A4F990AF8EFF598F728FBA6A078AF682E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:20 +0000
Manifest this update: Tue 04 Nov 2025 16:00:20 +0000
Manifest next update: Wed 05 Nov 2025 16:00:20 +0000
Files and hashes: 1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: aiLEhRYL46TGPPytgze/qSES/ClPydSVqG1mb1cNj8E=)
3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0a:f8:ef:f5:98:f7:28:fb:a6:a0:78:af:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Nov 4 16:00:20 2025 GMT
Not After : Nov 5 16:00:20 2025 GMT
Subject: CN=79967e967337ddfe7f626b6d497cd34a185ee96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:d9:9b:28:d9:ab:f2:aa:f2:8b:7a:ea:d3:
fc:b1:50:da:7f:10:01:31:d2:aa:68:62:f7:ad:29:
48:e7:41:2d:2f:33:8e:45:0d:8e:00:c6:83:3b:2f:
7b:45:44:bd:4b:e1:93:ab:f3:70:57:09:34:32:6d:
05:09:d4:87:9e:1d:69:e3:f3:fa:41:a4:33:12:40:
1b:af:8e:f8:29:60:89:a3:68:81:2e:20:6c:4d:b0:
5b:a2:50:2c:6b:95:13:b8:db:f1:fa:d3:4f:95:df:
5e:03:c7:1a:af:da:0c:4b:a7:36:05:47:54:54:26:
e2:1f:43:f1:3f:a0:c0:19:8c:08:91:b9:e1:1c:82:
f3:9e:57:54:39:e2:d5:09:25:b2:8d:ba:e3:80:ea:
4f:8d:14:d6:c8:0b:2d:54:75:34:d5:34:1a:9c:cb:
ba:f6:4c:8e:00:67:0f:0b:98:ca:59:3e:64:27:68:
6a:39:00:3d:5b:b3:1c:a4:4a:d1:33:54:c7:c2:e5:
01:d5:4e:d4:ad:d6:b4:b3:a7:52:5b:4f:22:85:94:
cf:5e:5d:89:ca:b9:42:c9:f8:a0:36:98:2f:42:08:
c4:a7:fd:70:ed:de:1a:e8:bb:45:a8:69:9b:3e:f4:
39:11:49:88:9c:2d:e3:3f:2d:1a:1a:2d:ca:5e:3d:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:7E:96:73:37:DD:FE:7F:62:6B:6D:49:7C:D3:4A:18:5E:E9:6E
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2c:7f:fa:e6:fe:ee:ce:7a:46:f7:bf:f3:2f:cc:7d:26:07:
36:ce:d2:b3:3b:11:f6:2f:92:4e:dc:d3:45:7d:f0:3f:a6:c7:
6d:0d:53:4d:5f:cf:72:1f:a9:01:24:f8:41:49:9f:18:19:84:
aa:52:71:ef:2c:ee:0c:32:0e:34:e1:30:fa:72:43:67:06:9d:
ee:6f:f0:50:0b:aa:ae:34:46:39:72:2c:06:ed:a9:50:0b:6d:
44:8d:83:17:5c:f9:3d:b9:43:bb:98:0e:00:ba:ce:e0:08:c2:
4f:72:8c:73:3d:9c:81:76:3c:46:36:d2:df:e3:67:52:d7:09:
11:2a:41:a8:af:99:60:08:80:1e:8a:1b:fc:84:5c:36:5b:95:
c3:8b:ce:18:30:e0:65:03:cf:9c:fa:d3:1c:46:0c:41:3c:5b:
d2:32:83:94:13:b3:2f:36:1c:54:2d:0b:3e:74:b7:41:06:fc:
ea:5f:21:9c:ab:83:98:cc:29:d7:86:d9:16:6b:74:c0:7d:49:
42:38:04:ab:34:bd:17:1d:28:13:75:49:d0:9e:4c:ee:f9:ac:
6c:ff:db:87:e7:13:0b:43:4c:10:d7:18:1f:16:83:6b:1b:3b:
e0:d0:b5:6b:ed:5d:30:59:96:92:52:c8:7d:2c:f5:33:ba:b5:
b0:e4:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:52 2025 by rpki-client