Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File: dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier: LwsHyWa4xAN2IcC2K0MeU23doU9Ma93y18o9LdkCPs0=
Subject key identifier: E6:6E:A7:B0:F3:1B:3D:53:67:9D:56:EE:10:B1:C7:E3:44:EE:3C:31
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer: /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial: 0198D6610E3405DE58B1E9E0FD3EC761995F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number: 0CBB
Signing time: Sat 23 Aug 2025 10:02:21 +0000
Manifest this update: Sat 23 Aug 2025 10:02:21 +0000
Manifest next update: Sun 24 Aug 2025 10:02:21 +0000
Files and hashes: 1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: wa9vyIYB7wbO1bKGhsFrxGOvzEigb0e0/uzVZB8LFcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0e:34:05:de:58:b1:e9:e0:fd:3e:c7:61:99:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Validity
Not Before: Aug 23 10:02:21 2025 GMT
Not After : Aug 24 10:02:21 2025 GMT
Subject: CN=e66ea7b0f31b3d53679d56ee10b1c7e344ee3c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:6c:fc:f3:6a:80:b1:1d:69:14:80:8b:ea:
7d:7a:84:e3:23:38:b0:63:4c:17:49:6b:6a:3a:c1:
33:43:5f:90:24:e5:46:54:b7:42:5c:89:f2:70:0d:
2e:4e:7d:1f:27:77:b3:83:05:70:eb:5e:8f:c6:25:
3b:69:35:bf:92:03:45:d3:f3:42:51:de:6c:5b:f9:
3c:66:d0:3f:e4:f2:f1:0c:20:0b:31:16:1b:9e:8f:
c9:cb:9d:3f:f3:6f:2d:0f:eb:01:f6:35:58:0d:e9:
8c:8e:a3:cf:55:88:31:ed:d7:a7:9e:77:b7:f4:ea:
d2:02:1b:37:9e:4f:4a:2b:23:0a:c4:9d:18:7d:d4:
51:7b:f9:b5:38:49:61:de:07:33:c3:ff:44:c5:17:
30:22:98:63:ec:b4:0a:73:76:a0:f0:c9:ca:4a:e9:
80:d3:60:50:40:91:6e:fd:4c:6a:f0:90:fa:22:d8:
8d:3e:03:98:ff:02:58:d1:63:5c:6b:92:b2:ca:3c:
81:5f:c6:ca:bc:90:81:18:ce:bb:24:a4:84:4c:f5:
a9:69:6d:7a:54:1f:3c:8d:34:93:6c:9a:30:09:ec:
8a:67:23:78:6a:b5:15:c5:7b:ca:e0:ad:05:3f:c3:
25:68:ea:e3:68:bf:cd:c7:3b:30:02:0f:58:9c:dc:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:A7:B0:F3:1B:3D:53:67:9D:56:EE:10:B1:C7:E3:44:EE:3C:31
X509v3 Authority Key Identifier:
keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:12:72:92:4f:95:01:fb:bf:cc:56:88:fd:90:dc:8d:e1:
d1:46:b3:c1:2f:98:3f:13:ee:2d:37:67:0d:ce:8e:2e:89:54:
0e:12:0c:68:41:bb:ac:cf:81:2f:52:52:6f:18:26:46:1a:d1:
9d:f2:a3:18:a2:82:40:e8:5c:93:f4:ed:cb:73:f7:b6:01:25:
43:1d:42:cb:fe:67:95:02:e7:e3:42:9e:9a:10:5e:25:05:f1:
2a:15:4f:60:8a:24:f5:02:92:9f:af:42:9d:d0:d6:e3:52:24:
81:e7:28:61:fa:00:aa:e5:f8:96:01:96:af:42:d0:f1:c1:5c:
d6:1f:48:94:a8:8e:1f:91:9c:2b:ae:02:f2:a4:81:15:87:97:
5e:fc:7b:ea:96:26:9f:bb:17:4d:a5:0f:46:8b:77:17:c2:15:
ec:8d:6b:b1:32:c1:ea:7f:e0:7b:0a:35:52:a7:79:1d:c0:0f:
3b:b4:b0:ac:da:cb:91:02:ba:37:55:52:b4:6b:b2:46:fb:87:
33:5a:05:99:5d:2c:e0:ee:4e:3f:bc:0a:e0:fd:a6:f2:b9:bc:
a8:92:fe:65:2c:7b:1f:ab:ab:fe:d8:c8:71:75:5e:d6:f5:87:
a2:e2:1a:61:ab:40:cd:82:2f:03:e3:86:cc:5d:ed:69:f5:77:
6a:13:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:06 2025 by rpki-client