Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: RXXvrf/S5qgVTTAF7APY3M2PyeTz8bXvrCdgRPOcpDw=
Subject key identifier: A8:8D:D0:3E:B7:BF:2F:86:01:32:43:C6:7E:2F:A8:6B:98:57:EF:F5
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0196C34B98F7287D258FB090FF5E7BA12D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1476
Signing time: Mon 12 May 2025 07:00:33 +0000
Manifest this update: Mon 12 May 2025 07:00:33 +0000
Manifest next update: Tue 13 May 2025 07:00:33 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: ZkLRgbl4kXLy7qx//UzWkcPZop2LCnVXqSOB/WK0n+M=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:98:f7:28:7d:25:8f:b0:90:ff:5e:7b:a1:2d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: May 12 07:00:33 2025 GMT
Not After : May 13 07:00:33 2025 GMT
Subject: CN=a88dd03eb7bf2f86013243c67e2fa86b9857eff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:2e:3c:ea:60:cd:b0:95:16:76:ad:a3:b9:
23:d1:d3:47:38:c8:99:75:58:ac:d8:7f:9f:b3:6f:
ea:23:e5:9e:b9:db:a0:00:c3:e5:70:08:51:85:3d:
d2:c6:64:bc:2a:cd:56:d5:fa:89:3a:4c:06:2e:3d:
f2:be:91:4b:bc:d5:73:cf:d1:b4:ce:8a:32:19:60:
72:b8:d6:57:4c:03:98:8f:70:e6:3d:2c:b4:9c:68:
34:8b:8f:c7:5a:27:e9:92:88:80:e8:77:0f:44:7a:
f1:74:21:32:32:ce:55:96:68:3a:7b:1b:54:f1:ad:
3d:6e:8e:a9:b9:d4:41:2c:3a:64:c3:18:5d:6f:15:
7f:41:5a:87:73:48:d6:97:fa:f8:f7:8d:15:ef:1a:
ad:94:f1:f8:5f:33:bf:90:ef:1d:62:c2:d2:d8:18:
6b:03:4b:30:f9:9a:1a:6f:a0:80:93:cb:e3:66:12:
05:52:65:fa:ea:cd:ab:92:80:19:be:bf:21:ad:c7:
50:0f:6d:d5:4e:37:27:6d:32:15:ba:26:3c:9c:cb:
29:3a:77:29:ec:d1:44:f3:c5:be:93:9f:97:a3:10:
e9:c2:fb:c9:b1:f6:ce:7e:20:44:2c:1a:de:29:16:
e0:83:95:b1:8a:74:a7:58:d1:a8:4e:8d:e9:e9:49:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:D0:3E:B7:BF:2F:86:01:32:43:C6:7E:2F:A8:6B:98:57:EF:F5
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:a5:f8:f5:fa:e2:14:85:43:90:1a:1c:06:5e:32:7b:cf:
1e:13:23:20:47:28:3b:c5:17:c5:03:a0:7e:4a:9e:7c:01:09:
33:b3:5e:59:e8:15:aa:d6:4b:15:e1:b4:46:3c:89:5e:79:a6:
36:26:e6:21:a7:f6:29:b3:cf:17:99:85:e8:bd:8d:ea:57:03:
40:23:4b:51:4d:25:a0:5e:3c:99:e5:af:51:69:75:b9:26:db:
07:e4:7a:22:76:11:1c:6c:17:87:40:05:48:a0:a3:ba:ff:ac:
4d:2b:f8:8c:64:29:31:4d:b0:d3:5c:25:cd:39:47:c2:08:53:
16:ed:0c:f9:18:5d:60:79:5f:4c:58:ae:f0:11:9d:ae:35:e3:
a4:22:e3:40:f5:59:26:07:82:f7:f7:37:dd:26:eb:d1:40:3c:
bb:f9:c6:4b:0e:25:e4:6b:99:82:8b:7b:38:84:1d:45:0c:fb:
f4:73:35:f8:79:42:a3:1b:06:ae:09:b1:3b:c4:87:2d:8e:65:
8a:25:c6:53:c3:77:55:34:d4:c8:5c:8e:c0:2d:c9:73:1d:ff:
a6:96:67:a9:94:b9:12:29:b5:0c:6a:49:8b:fb:3d:49:ae:22:
33:87:35:1e:be:95:8a:9a:0c:7b:b6:38:b7:fc:95:f0:68:90:
a4:e5:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:03 2025 by rpki-client