Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: EfYMSEpRa2OKiJ56RK3B+/e0aeLByLr8AOFQWJt//UI=
Subject key identifier: DB:A8:FD:6F:72:E5:08:E6:EC:15:0E:48:83:5A:E7:FE:21:1F:A5:E1
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0196760CC10896697309A6D36223E21FA837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 144E
Signing time: Sun 27 Apr 2025 07:01:09 +0000
Manifest this update: Sun 27 Apr 2025 07:01:09 +0000
Manifest next update: Mon 28 Apr 2025 07:01:09 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: BRYPVXfYGpGLcrSJsvvnr3pDrTREBuPSEx3Rli5Ozg4=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c1:08:96:69:73:09:a6:d3:62:23:e2:1f:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Apr 27 07:01:09 2025 GMT
Not After : Apr 28 07:01:09 2025 GMT
Subject: CN=dba8fd6f72e508e6ec150e48835ae7fe211fa5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:8f:fd:1f:7d:42:19:a9:38:23:6d:15:52:
c7:b9:23:e2:e6:51:36:79:95:69:20:9e:71:27:f4:
46:4f:18:1f:b8:ec:b9:cb:f0:3b:0e:8c:9b:55:59:
bb:d3:3f:fd:6f:48:72:aa:f6:14:9f:0b:ca:c4:f2:
9f:e7:67:9d:99:16:46:0b:13:bd:80:bd:86:88:fb:
dc:45:fb:97:c0:98:4e:b8:a9:d9:8e:c6:0a:8d:94:
c1:c0:54:3d:8b:35:d0:76:85:3e:65:2c:89:a5:ce:
b4:3a:4d:53:ad:71:0f:2e:b7:42:cf:a7:47:7e:e6:
fe:2c:94:b9:c0:03:ee:9c:50:fe:8c:15:e1:20:9f:
b0:98:75:f1:ba:5c:15:bc:d6:cd:e6:1c:43:f1:c3:
5c:ac:fb:fa:8d:0b:ed:0b:bf:4f:8d:3b:93:ab:ba:
4a:f4:ee:6e:98:a4:38:67:6c:38:5b:30:7f:88:ab:
33:01:cf:be:ee:3c:b8:43:26:23:01:a4:4f:fa:1b:
36:f2:42:ae:b4:85:d1:e3:a9:30:9d:da:77:c1:a7:
ab:22:db:6c:21:0e:5a:fd:6b:bb:f1:6f:b6:b0:10:
59:88:4f:8c:9b:60:86:b1:3d:f8:e4:f1:d3:15:f3:
76:0f:17:8f:2e:a9:40:e9:d6:78:eb:bf:50:0c:fb:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:FD:6F:72:E5:08:E6:EC:15:0E:48:83:5A:E7:FE:21:1F:A5:E1
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:be:46:c3:81:8e:8c:e5:90:2b:ef:7b:3b:0c:88:08:6b:
c3:0a:b3:9b:f2:33:f8:09:6d:a6:d7:b0:3e:3b:79:4c:35:42:
86:8d:a6:93:4c:c9:ed:34:74:2b:31:53:a2:ae:ce:08:77:38:
28:b0:da:8a:31:17:14:66:05:d2:d6:ae:41:bc:ba:71:cf:f2:
d3:be:bd:d5:be:2c:ad:86:d1:02:24:3f:ae:15:89:f0:0e:1d:
c8:27:82:d6:f9:49:60:26:53:3a:6d:11:30:a2:a5:29:56:02:
23:45:86:09:40:bc:df:b8:f7:d1:39:7c:e5:f6:7f:37:2d:1d:
3d:5e:3b:f8:67:74:0a:24:fa:fe:a6:80:17:35:53:e8:02:e1:
3b:57:83:27:5a:75:87:f0:02:4a:3a:3d:ef:cd:a9:de:4b:77:
9c:cb:1c:16:f8:76:cc:4f:6c:31:7b:39:d5:62:38:4b:e5:2e:
ac:8b:d3:64:93:d3:29:97:09:59:f9:0b:da:8e:82:e0:41:03:
6c:11:79:f8:96:91:2e:ed:57:84:82:f1:4e:42:17:7a:d6:74:
cb:a4:94:86:4f:33:42:6c:c9:f2:da:e8:67:f2:58:28:c4:64:
32:46:d4:31:75:78:b8:62:85:6a:93:b8:9e:1a:97:13:5e:66:
c1:44:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:41:58 2025 by rpki-client