Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File: dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier: nejIIRfKYSEa8305w+ADJ6Q2M/sUGBREKHhmPeU/uVc=
Subject key identifier: D2:92:AB:4C:46:F4:16:91:E2:75:D4:94:C0:B7:92:E3:40:F7:B1:87
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer: /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial: 01984B543DCB2E38194CA9A1F136789ACC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number: 0C73
Signing time: Sun 27 Jul 2025 10:01:08 +0000
Manifest this update: Sun 27 Jul 2025 10:01:08 +0000
Manifest next update: Mon 28 Jul 2025 10:01:08 +0000
Files and hashes: 1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: agm3T0o4H3nc8HjLS3rbpXPDHNQfPfqvUw3cTwjaQ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:3d:cb:2e:38:19:4c:a9:a1:f1:36:78:9a:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Validity
Not Before: Jul 27 10:01:08 2025 GMT
Not After : Jul 28 10:01:08 2025 GMT
Subject: CN=d292ab4c46f41691e275d494c0b792e340f7b187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:b0:2e:e5:d0:7e:6e:cc:f3:69:99:66:13:
14:8d:c4:fa:8a:26:41:f4:d2:88:77:fa:a5:92:a4:
b6:43:70:e1:32:a6:6f:25:24:6e:56:53:1b:2c:3b:
c1:e3:a2:2d:c7:72:b7:2d:1e:d7:40:aa:90:57:cf:
3a:c1:32:0f:c1:91:c2:51:1a:51:3e:74:e5:07:52:
5d:e0:5c:3e:1f:bc:ba:ee:2a:19:3a:de:5a:ff:dc:
b3:f4:6f:fc:30:65:b1:aa:be:56:ea:f9:55:9e:88:
f2:10:80:a4:b2:24:bb:5e:56:9d:9a:83:93:e4:85:
ce:bf:06:00:60:6b:ca:eb:e9:a4:50:c8:3d:66:9a:
d4:70:7f:82:7b:c3:cf:ec:51:a5:73:47:54:ba:14:
c0:42:4c:33:66:58:dc:21:6d:7e:e2:56:2a:f7:d5:
c8:09:01:26:1c:37:6a:ac:3b:22:42:2d:70:89:3b:
85:cf:c4:52:53:d1:d9:01:2c:bc:a5:4e:67:36:1d:
8d:19:34:fc:c7:e2:aa:51:b3:41:32:1a:b3:dc:79:
31:eb:54:48:e0:f7:cd:cc:8c:e4:d2:f5:14:6a:28:
b2:8f:cd:9a:58:c4:83:09:a4:a6:45:6c:86:8f:68:
7d:da:63:70:1e:f4:f5:e4:3e:b0:ea:7a:b8:86:64:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:AB:4C:46:F4:16:91:E2:75:D4:94:C0:B7:92:E3:40:F7:B1:87
X509v3 Authority Key Identifier:
keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:62:93:c9:e3:66:ff:b1:dc:0b:b5:f8:cb:bc:61:8d:6a:4e:
c5:bc:4b:ee:f4:59:e8:31:3c:f6:fb:b3:a9:6f:fd:ac:ee:fb:
e1:c5:19:9d:aa:d0:df:a5:a4:60:66:67:68:6c:df:84:26:ea:
64:e1:8b:c7:45:93:6e:66:95:2a:46:c0:7b:93:ca:8a:8d:2c:
e1:74:52:13:63:4a:25:5c:92:65:56:8b:ae:39:5e:3e:42:12:
ab:da:8b:20:1f:48:39:33:f2:9c:af:42:3e:e5:6f:b1:8b:0b:
63:01:13:a1:d0:84:2f:88:7b:1e:34:a9:90:fc:c1:61:fe:bd:
9f:9a:39:a1:8a:fc:fd:3b:a4:f1:8b:d8:44:cc:3f:73:e3:1d:
6d:a8:8e:6b:53:ed:9f:61:85:bd:61:1a:a2:98:02:09:df:0c:
d2:2a:c4:86:aa:04:0a:ea:ed:f8:69:3d:fa:5c:e4:01:db:d2:
29:b4:40:94:b6:03:16:ca:5a:5c:e0:e9:1c:86:e9:f8:a5:18:
35:ab:75:2d:9f:07:13:ad:8e:d9:88:a1:6e:34:aa:7f:1a:10:
6a:25:30:af:bb:e1:ca:7e:75:7e:8e:ad:b2:e1:a0:de:23:a5:
6d:18:b2:fd:eb:a4:13:f0:16:bf:ff:c1:60:0e:bf:6c:df:cf:
3c:f3:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:11 2025 by rpki-client