Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: iugDgml0cmiB0tzZdbnWsbnPysAXgaz1+vQ4Gwnyq3U=
Subject key identifier: C1:28:D5:3E:4B:74:36:E7:56:08:87:7C:E1:0C:DF:32:64:79:50:B8
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 01976F2C01628F1FED9467A5B667BF9B7F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 14CF
Signing time: Sat 14 Jun 2025 16:00:44 +0000
Manifest this update: Sat 14 Jun 2025 16:00:44 +0000
Manifest next update: Sun 15 Jun 2025 16:00:44 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: SWFR0DqB+roqtjRV9IulvpRSfN16zeDNBi9AWWJsNq8=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:01:62:8f:1f:ed:94:67:a5:b6:67:bf:9b:7f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jun 14 16:00:44 2025 GMT
Not After : Jun 15 16:00:44 2025 GMT
Subject: CN=c128d53e4b7436e75608877ce10cdf32647950b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:ed:e7:cd:a7:95:2e:b2:0e:2f:3f:57:ae:
53:e6:da:8b:77:b5:42:a7:30:a8:68:b2:0a:fe:c7:
8b:59:aa:f8:bc:d2:1b:96:96:b5:f6:6c:14:ed:1a:
21:5f:b5:ad:76:4c:fd:5e:7a:56:f7:24:b6:6d:f4:
f3:a7:d3:a6:8a:11:09:bf:b2:73:de:cc:1c:9d:7e:
c6:4a:0f:12:58:d8:b8:31:3d:81:b0:57:f0:ac:33:
a8:23:b9:a2:11:0c:eb:d7:84:8b:5f:fe:76:33:e6:
e0:82:dc:d5:eb:80:f8:1f:40:22:0c:3e:09:69:45:
99:f2:7e:d0:52:41:68:e5:c0:42:a1:18:ef:5b:95:
54:49:c0:59:f0:be:4c:da:70:c7:7c:43:be:d8:3b:
f4:f4:66:6b:81:54:5d:93:89:34:85:9b:0a:bb:2b:
63:cf:23:26:42:4e:12:16:4b:14:22:c9:96:7d:44:
99:60:6c:4b:67:64:57:af:51:47:45:6d:e6:83:31:
b5:29:37:02:74:f3:aa:2f:1a:b4:b9:02:e0:b1:da:
99:d4:37:ba:3d:ad:41:7e:5a:c7:7c:58:d3:0f:43:
53:ef:e2:69:3c:30:4d:21:65:b2:82:43:45:69:6e:
58:42:22:d5:1f:4c:8d:ad:8d:7f:92:d3:43:07:15:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:28:D5:3E:4B:74:36:E7:56:08:87:7C:E1:0C:DF:32:64:79:50:B8
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:0d:3c:99:53:bf:27:a9:72:0c:92:1c:2f:3c:5d:f3:fa:
03:7d:f9:0b:61:0d:22:8c:83:6b:ff:e6:34:19:33:c9:d2:70:
3c:b2:ca:fa:70:58:d7:70:25:97:0a:40:f3:cb:d9:5c:89:65:
fb:8f:74:5e:42:88:e4:8d:5f:0b:99:aa:5b:ac:0b:af:e0:3b:
b4:f2:93:b3:ba:22:5e:c6:91:d7:2c:92:e9:e4:72:50:7c:9a:
67:c5:e4:9e:b5:20:c1:a9:8c:87:50:00:b7:ae:c6:74:b1:f9:
9e:8d:e9:56:19:62:25:76:d2:d4:f9:16:46:f4:bc:e3:68:50:
ee:34:1e:7f:07:01:09:f0:5b:39:ef:30:3e:a4:0e:95:85:ca:
75:9b:9f:c1:19:75:b9:82:75:97:00:01:a1:41:d8:51:d6:ff:
d4:d3:7f:97:e9:2b:09:db:4a:54:f6:cf:e2:9f:f9:43:dd:d4:
6d:41:0e:1a:e4:c5:d4:fb:e5:0b:09:40:8e:e4:43:22:97:b0:
2b:9b:c5:e7:00:3c:63:76:fc:d4:5f:81:fd:1c:21:26:4a:ad:
ca:0c:c3:ff:99:06:b1:d7:65:50:07:8c:08:99:6b:87:e9:bd:
e4:ad:b1:9b:ba:b7:20:bd:84:4b:63:f2:fb:28:9c:44:0b:16:
67:75:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:30 2025 by rpki-client