Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: mCPEsQ7sckiH1S9NrJqHuSUvEk8Gk6A8FXCrvIiMebg=
Subject key identifier: C3:07:31:71:ED:67:F8:1E:03:E7:01:7B:BD:3B:F4:E0:1D:FB:9F:41
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0198D47343D49DE910CAD57FE51BE907AA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1588
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: yb9dkMVnhevqz4brKMh3dPXGGPgUPs8cVsz6ofbavCM=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:43:d4:9d:e9:10:ca:d5:7f:e5:1b:e9:07:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=c3073171ed67f81e03e7017bbd3bf4e01dfb9f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:6c:25:2d:78:0f:e5:c5:67:75:3f:72:dc:
46:84:57:6f:7a:f6:64:ca:49:4d:0a:57:f5:5d:ce:
09:43:f9:de:e9:c9:99:2d:58:aa:4e:79:c0:c8:1d:
ec:b2:c4:aa:e2:9e:c2:f0:13:a8:cb:2c:68:eb:c1:
b8:7d:49:89:41:0d:ca:16:a8:41:5a:d8:e0:0d:d0:
31:8f:b0:4b:85:01:32:1b:2c:24:49:c4:9b:70:bf:
ee:7d:cb:6c:d1:89:b7:93:58:b2:02:9e:72:e7:b6:
40:f4:67:c2:06:42:65:f2:ee:4d:e5:54:aa:a4:5a:
d3:fd:31:87:a2:4c:a5:47:f1:7c:49:a3:49:f5:79:
2d:ef:7e:f5:b4:ec:91:0e:26:fc:a1:43:dc:b5:31:
99:10:38:93:fe:f6:db:8b:f5:d3:1d:9c:e6:63:4c:
a8:28:0c:7b:ca:41:34:5a:64:55:91:79:b2:3a:72:
7a:cf:6a:71:22:86:1a:0b:26:1c:83:6c:6b:56:9e:
a8:2c:52:8e:4b:6c:2b:34:3f:89:78:0e:17:63:d8:
4c:04:c6:62:51:aa:fa:c1:00:df:7e:a7:ea:6f:d7:
41:6f:97:33:bc:33:b2:db:aa:e9:4d:a6:4e:a2:dd:
c9:e9:e3:bb:6f:96:b8:5f:2d:43:2d:e7:3a:3b:ca:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:07:31:71:ED:67:F8:1E:03:E7:01:7B:BD:3B:F4:E0:1D:FB:9F:41
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:39:5d:29:35:7a:5e:33:3a:5d:78:66:a7:12:d1:41:a0:
21:c4:f9:37:6c:e7:da:f5:21:13:e4:e4:e1:a9:98:b8:8a:9b:
dc:36:d8:70:1e:e6:7a:15:6d:3a:4e:69:98:a5:68:84:51:68:
1c:3b:dd:c3:01:eb:16:34:05:f8:bc:92:93:a3:f4:dc:a5:c8:
4e:3c:1b:04:11:dc:ec:5f:2c:32:d0:1c:fa:14:29:ac:45:05:
25:30:3c:03:4f:fa:a3:06:35:e5:c8:b2:9c:bd:dc:12:22:13:
b3:a7:c4:47:76:28:92:3c:f7:bc:b4:2a:9a:1e:28:e6:10:5f:
26:eb:84:cc:31:fe:df:81:9e:65:fe:85:6c:eb:9b:f7:e7:7d:
0f:75:66:fe:81:dd:a9:98:88:d1:8a:ce:7f:32:81:35:42:87:
0a:62:c7:83:ce:f6:e0:a4:fb:e5:2a:71:d0:07:82:c0:b9:98:
e3:a3:bd:f3:25:1c:f4:2d:e6:ce:ed:d0:3c:85:f1:20:a0:ad:
ad:57:08:b0:ef:24:cc:33:83:46:77:39:2b:13:27:6b:57:c2:
f6:45:69:d6:b3:56:57:d4:60:87:ab:a4:07:78:3d:03:cf:2f:
f4:33:9b:31:88:c9:60:c2:45:ee:ab:c3:8d:ab:1e:a2:4a:3b:
75:bf:b4:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0PUnekQytV/5RvpB6o/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjUwODIzMDEwMzAwWhcNMjUwODI0MDEwMzAwWjAzMTEwLwYDVQQD
EyhjMzA3MzE3MWVkNjdmODFlMDNlNzAxN2JiZDNiZjRlMDFkZmI5ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdBsJS14D+XFZ3U/ctxGhFdvevZk
yklNClf1Xc4JQ/ne6cmZLViqTnnAyB3sssSq4p7C8BOoyyxo68G4fUmJQQ3KFqhB
WtjgDdAxj7BLhQEyGywkScSbcL/ufcts0Ym3k1iyAp5y57ZA9GfCBkJl8u5N5VSq
pFrT/TGHokylR/F8SaNJ9Xkt7371tOyRDib8oUPctTGZEDiT/vbbi/XTHZzmY0yo
KAx7ykE0WmRVkXmyOnJ6z2pxIoYaCyYcg2xrVp6oLFKOS2wrND+JeA4XY9hMBMZi
Uar6wQDffqfqb9dBb5czvDOy26rpTaZOot3J6eO7b5a4Xy1DLec6O8rnbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMHMXHtZ/geA+cBe7079OAd+59BMB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYA5XSk1
el4zOl14ZqcS0UGgIcT5N2zn2vUhE+Tk4amYuIqb3DbYcB7mehVtOk5pmKVohFFo
HDvdwwHrFjQF+LySk6P03KXITjwbBBHc7F8sMtAc+hQprEUFJTA8A0/6owY15ciy
nL3cEiITs6fER3Yokjz3vLQqmh4o5hBfJuuEzDH+34GeZf6FbOub9+d9D3Vm/oHd
qZiI0YrOfzKBNUKHCmLHg8724KT75Spx0AeCwLmY46O98yUc9C3mzu3QPIXxIKCt
rVcIsO8kzDODRnc5KxMna1fC9kVp1rNWV9Rgh6ukB3g9A88v9DObMYjJYMJF7qvD
jaseoko7db+0ww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:50 2025 by rpki-client