Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: XRTrLYiX3XR9HtxPomwpP7yK8qGEAavDmmA3+RNAJ+E=
Subject key identifier: 41:87:47:15:8D:31:6E:25:71:17:D6:C8:78:13:05:2F:35:4D:12:97
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 01976C2AB0835204F0691459D6301DD325B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 02:00:26 +0000
Manifest this update: Sat 14 Jun 2025 02:00:26 +0000
Manifest next update: Sun 15 Jun 2025 02:00:26 +0000
Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: 4KsBHFCtC1wCdlY8dYVAHeDCZ8+o7wS/VLXvvEQtiJA=)
2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b0:83:52:04:f0:69:14:59:d6:30:1d:d3:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Jun 14 02:00:26 2025 GMT
Not After : Jun 15 02:00:26 2025 GMT
Subject: CN=418747158d316e257117d6c87813052f354d1297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:9b:62:a1:ad:39:11:1a:e5:5f:79:42:3b:
04:17:b6:a6:da:5a:30:d1:b8:4b:16:bc:cb:27:3e:
77:b0:1b:3a:08:24:a0:9d:7b:1c:17:60:f3:9e:24:
b4:3d:df:fb:09:b3:22:ff:fa:7d:9d:7f:d7:f6:02:
a2:32:6c:13:07:85:19:7d:ff:76:82:bd:26:0d:aa:
ee:8d:aa:e4:fd:d5:d4:ba:14:8c:f9:cf:8e:97:b5:
e8:9c:6a:76:2c:6f:55:2f:1d:b0:35:45:74:cd:1b:
d6:8e:68:27:67:b3:b4:3f:0e:44:e5:ae:6f:ad:a4:
56:b1:fa:e3:53:e3:0c:2e:09:55:77:11:f2:f1:e1:
f6:dc:92:71:39:d7:40:52:86:d5:78:bd:97:39:42:
43:b5:d8:8a:87:fe:3e:10:13:64:ed:11:a3:20:42:
bb:59:b3:b3:6b:c4:e6:08:b6:3b:bd:c0:ea:97:b8:
1b:da:8b:74:5a:ed:d1:13:6e:14:dd:d1:bf:8c:41:
8a:9b:b8:f0:3a:75:c3:94:ee:30:48:9a:55:86:d2:
8d:39:f6:ea:54:b7:c3:2d:76:5d:76:6a:57:ea:2f:
7c:d8:11:23:b9:cb:02:4b:3d:64:a4:9b:e2:30:bf:
d5:55:d6:28:1e:72:e1:d6:ca:30:dc:50:46:92:e0:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:47:15:8D:31:6E:25:71:17:D6:C8:78:13:05:2F:35:4D:12:97
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:df:b3:cf:68:4d:55:c9:f3:f0:3a:71:5a:17:d1:26:2d:6a:
3d:b0:2d:d7:f5:e0:13:9f:35:99:76:cb:65:61:e1:4b:86:10:
d9:3d:01:19:cd:42:3a:3b:a1:0e:1b:cb:a1:57:74:8d:65:72:
5b:6f:9e:67:4a:c4:62:65:cd:e1:d4:a8:29:42:cf:35:bf:7e:
12:77:d6:ef:4e:16:bb:e9:7c:0b:47:50:3e:1f:f4:61:15:67:
ff:80:84:77:dd:19:44:10:a2:ef:71:49:4b:7b:be:e2:66:31:
82:b7:fc:95:17:0b:cc:21:73:b7:c9:9a:ec:35:81:e3:62:4f:
2f:3f:d0:f3:f9:f9:2f:d8:31:3b:a8:8d:c8:51:06:42:77:d1:
f2:72:06:da:6e:5e:36:02:c9:f0:e3:02:f5:e8:be:c8:d2:ac:
44:40:27:07:44:f6:f2:ff:c1:af:53:d2:9c:13:d5:90:d3:aa:
e6:5c:2a:44:68:b4:29:c4:57:32:d3:23:32:98:85:a9:21:51:
cb:5b:33:30:23:95:b1:7e:48:74:5d:3f:f9:da:0f:56:db:18:
be:29:31:c3:b0:c2:f4:39:5c:9a:f0:d3:d7:f8:cd:ec:23:e5:
c9:16:d0:1a:d9:c1:cc:eb:98:dc:2b:e1:d3:61:0e:49:56:98:
fc:59:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:41 2025 by rpki-client