Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: OADUr/72W98yoXA8at3FJ99s9PBFwJBaywBFcVDEM6E=
Subject key identifier: 47:C2:E0:9D:54:F7:F8:AE:FA:96:1B:F7:7E:EB:B6:EB:9E:7A:A2:98
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019875D24A899ED736EF6AB86348B70DC934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1557
Signing time: Mon 04 Aug 2025 16:02:52 +0000
Manifest this update: Mon 04 Aug 2025 16:02:52 +0000
Manifest next update: Tue 05 Aug 2025 16:02:52 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: t1/4UmN/QP2DQ3uPpkrwLUmfBub/qrpHZS62sH+j9Xg=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:4a:89:9e:d7:36:ef:6a:b8:63:48:b7:0d:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Aug 4 16:02:52 2025 GMT
Not After : Aug 5 16:02:52 2025 GMT
Subject: CN=47c2e09d54f7f8aefa961bf77eebb6eb9e7aa298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:37:48:b2:bc:12:4d:e5:d9:62:8c:53:d4:
82:d4:e6:c0:63:2e:a4:25:da:05:39:04:ae:7d:01:
18:86:8f:c9:3a:d5:e7:84:26:e9:8a:b6:ab:43:08:
fd:4e:19:60:11:89:b5:63:71:f7:13:85:d3:5e:64:
63:98:81:b0:49:eb:5f:69:16:ee:e1:3c:24:b7:a1:
e1:ea:ce:12:15:b3:f3:7e:6e:10:1e:4c:90:17:90:
2b:25:f1:b9:e0:36:13:21:17:fc:b6:6d:8c:aa:73:
88:ef:82:40:ac:d5:7a:ba:df:e3:40:c0:53:47:87:
b9:78:3c:34:c2:fa:d4:e2:97:e9:f8:ff:e7:62:a2:
00:7d:87:65:ae:2e:f1:47:be:b1:b6:8e:04:7b:e8:
27:05:b9:63:93:e4:ea:5e:1c:05:97:12:e9:ea:68:
5b:aa:62:5a:8a:05:8e:bb:45:f1:d0:b9:3e:79:c5:
f3:37:3a:5d:b2:9e:fa:fd:46:cb:06:93:f9:c3:44:
f9:e2:84:e8:72:95:36:8f:92:14:3d:21:39:9f:aa:
65:fd:1d:79:80:cf:ec:9e:09:bb:ee:97:89:0a:64:
e4:dd:fc:49:03:39:6c:8b:07:1c:9b:15:0f:3a:d4:
35:0b:8f:b8:7d:56:3a:a0:a2:98:33:22:33:69:09:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:E0:9D:54:F7:F8:AE:FA:96:1B:F7:7E:EB:B6:EB:9E:7A:A2:98
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:b5:89:d9:78:2c:04:f7:ae:bd:ef:9b:3c:94:05:31:b9:
1c:20:1f:24:b5:62:67:43:f8:df:99:0a:5f:24:85:32:92:45:
f9:57:d0:02:05:43:d2:e6:e1:7d:fe:b5:0d:9b:78:a6:79:d6:
87:21:cf:00:ee:7e:42:67:99:67:c2:33:f8:f6:80:60:d7:b0:
59:e6:56:04:9b:08:c0:6f:27:7e:69:bf:82:0b:65:b9:64:83:
82:e0:67:92:7a:0f:1c:d7:0c:07:89:7f:e3:4c:43:1d:1a:c7:
5d:b9:b3:a5:7d:f9:44:9e:cc:36:77:55:4d:24:3d:68:88:04:
03:75:06:38:d5:0c:54:61:67:03:d5:1c:d4:82:da:ca:27:b2:
87:ae:ea:c7:71:97:b0:51:9d:ed:19:5a:ac:e7:bd:5c:84:4a:
24:77:cb:03:46:9c:b2:65:5c:f9:ad:ea:d6:b9:a9:81:f9:4e:
13:24:1e:f5:7e:30:18:62:b1:89:c4:fb:0e:75:c0:cd:4e:d3:
bc:9c:13:e8:6c:1a:33:30:4f:b8:7c:16:dd:88:bf:15:02:0d:
63:37:49:4e:b9:e2:0d:fb:ad:de:03:50:13:7f:bc:02:75:bf:
15:bf:50:45:5d:1e:d7:67:08:37:a9:fe:b6:13:0b:f3:c9:50:
65:8a:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:48 2025 by rpki-client