Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: o/E7a+FTLLwEfwzcrg1+37fpHsIbdU+0NY0ZpJiKmhc=
Subject key identifier: F9:D5:D4:86:E8:8A:F7:86:13:34:15:7B:85:ED:49:F1:F8:37:0E:8F
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0197B6A066E7ECFA82D7431213EE28F89965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 14F4
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: QiZZcLV0mac+mfuwDRGRdyoW0S8OBw+x0HqV9iu18Pw=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:66:e7:ec:fa:82:d7:43:12:13:ee:28:f8:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=f9d5d486e88af7861334157b85ed49f1f8370e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:97:f2:f9:78:de:c9:5f:91:b9:d6:8b:10:
c1:2f:39:6f:e9:07:93:c1:d6:32:f6:6a:3a:60:b5:
5b:2d:78:56:c3:83:f9:c5:c0:30:17:7b:b7:17:32:
99:36:4f:ab:85:fe:92:2d:75:4a:01:32:ec:ac:31:
9a:b9:3f:8e:68:81:05:62:f3:5c:e8:22:88:69:a3:
ac:e2:58:d4:2a:46:5a:ad:d3:6d:bc:9f:cb:34:52:
ca:bd:58:92:99:39:91:d1:a6:eb:d3:a4:8c:0d:20:
cf:32:39:a4:c4:ce:5e:07:f0:e0:4b:45:bc:ca:e8:
12:6a:c9:c5:13:22:a1:a8:70:5d:ae:5e:46:64:9a:
bf:de:ed:ad:4d:e9:3b:ba:5f:85:b6:24:24:c7:e6:
b6:38:d7:f4:db:be:b6:a2:72:fc:c7:40:20:f2:a9:
24:b9:9d:be:f2:b7:1d:42:45:e8:be:8e:ff:b6:23:
4e:e4:f6:0f:3c:8f:34:a7:57:04:ee:01:97:08:26:
57:55:28:e3:61:c6:4a:0b:92:14:09:87:b7:67:99:
e6:28:8a:4e:98:13:60:ec:76:c4:23:95:23:12:dd:
7b:4d:72:cd:d7:b1:19:62:fc:c5:58:c6:b6:e1:4b:
70:61:d9:31:24:8f:bc:6b:cc:ab:cd:55:f0:e6:ec:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:D4:86:E8:8A:F7:86:13:34:15:7B:85:ED:49:F1:F8:37:0E:8F
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:78:9d:a9:cf:53:62:ae:73:28:2b:54:42:90:da:6c:13:ec:
e4:cc:8d:d2:4b:ce:a4:e0:d8:83:af:63:b8:37:65:f0:e4:ff:
92:d1:2d:ad:ab:b4:21:c6:c3:f8:92:28:43:63:e7:c2:b6:f9:
65:79:dd:5e:ea:dd:5a:a3:e5:93:ab:30:66:f0:10:86:d8:c9:
b1:95:ad:08:56:18:cc:21:0b:92:1e:73:fd:ef:c3:76:a7:42:
69:04:94:0a:71:1f:22:37:eb:ad:a7:0c:c0:fa:5e:e0:fe:75:
55:cb:ae:30:43:50:27:1d:b0:aa:7e:8e:d3:83:a6:6a:12:a5:
fd:de:2e:1d:0f:07:ff:0d:d5:de:8b:6b:c5:ae:7a:77:bc:47:
c0:8f:3c:7d:fc:ae:5e:b9:72:cf:7d:01:02:e9:fc:30:b6:37:
4b:55:ea:d1:8e:60:89:dc:8e:79:90:e7:b1:7f:52:9a:ae:42:
31:3e:ca:62:99:ce:93:06:6a:5e:fe:66:a9:7d:32:ed:e4:f6:
1d:ba:4f:f4:b8:00:bf:48:5a:00:b3:ff:ea:e9:37:f5:8d:01:
e8:ec:56:ef:30:8a:3f:0a:af:23:74:f5:02:0e:2b:b2:c2:cd:
93:7e:f1:e0:50:b7:ff:d8:2a:a3:23:7f:ad:61:73:d8:26:09:
ff:c4:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client