Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: 36kpYXLaPu9Gy1oNmZt6dcYIyEYMxetyzPBjKPN+jy8=
Subject key identifier: 49:CF:C6:8D:81:F7:DF:F8:9B:2A:58:F6:27:2E:7A:17:D1:B1:D0:38
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 0198906B9F97D70535A3FDF26D6C3FC6C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 20:00:28 +0000
Manifest this update: Sat 09 Aug 2025 20:00:28 +0000
Manifest next update: Sun 10 Aug 2025 20:00:28 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: +Enixd70CrnWAoaCVS2v30VX3qwBd/OzuVLI8dpjiT4=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:9f:97:d7:05:35:a3:fd:f2:6d:6c:3f:c6:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Aug 9 20:00:28 2025 GMT
Not After : Aug 10 20:00:28 2025 GMT
Subject: CN=49cfc68d81f7dff89b2a58f6272e7a17d1b1d038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:bb:bb:cd:84:b2:34:bd:c9:bc:7f:8e:0f:
f7:b0:79:c5:c8:3e:0c:78:90:ab:db:eb:51:14:aa:
11:cf:5b:67:2d:d5:09:38:bf:3f:60:32:8c:44:c5:
72:fa:41:d0:fb:1c:5e:99:1a:23:24:63:33:84:60:
ef:51:6d:53:71:d9:b1:b6:70:94:61:37:c9:ec:2e:
7f:09:b3:76:c7:c6:f8:e0:67:ff:06:08:f9:af:64:
ca:73:02:fc:98:96:d4:e8:e0:17:6c:cc:3a:fc:0d:
88:ea:1a:3a:29:3a:74:21:2e:f2:ec:58:45:25:e8:
f1:fc:c4:2d:c7:e3:6b:72:a5:b0:7c:2c:57:44:0c:
4b:bc:dd:8d:b4:f6:31:15:7e:dc:06:8d:67:6c:66:
9f:a0:64:c7:78:f6:e3:72:32:88:29:0c:7d:48:a5:
2e:cf:51:e4:cf:c3:a8:1b:56:79:55:89:df:6a:a5:
29:b3:fe:90:34:8f:ac:83:43:c0:f0:ef:3c:4e:1b:
43:78:96:10:db:2d:16:19:eb:66:11:c0:b3:0e:2c:
f3:a8:c8:de:4d:e5:b7:48:5a:65:4a:a6:ae:e8:00:
73:07:8c:10:3f:d7:6c:cb:3a:e2:7d:07:f1:87:99:
23:00:03:9e:34:fb:b6:83:83:e4:d9:7a:36:66:fa:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:C6:8D:81:F7:DF:F8:9B:2A:58:F6:27:2E:7A:17:D1:B1:D0:38
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:0d:f5:0e:a3:7a:5e:23:0e:53:4a:7c:05:f0:ac:63:57:
96:e3:a8:8a:73:49:d6:24:86:de:23:a1:f3:11:3b:da:55:ee:
ba:a9:b5:cb:0d:c1:e7:2b:01:a0:e5:94:b2:fa:ec:cd:92:22:
ea:d3:8b:36:e1:b1:69:c7:a2:5f:e1:e8:dc:c5:df:fd:db:9b:
70:69:93:60:5c:65:d1:3c:ef:53:a6:bb:de:43:68:47:32:d1:
14:80:b8:5f:e7:40:17:3a:7a:84:60:79:b4:04:1d:0a:d9:63:
c7:c7:be:9d:69:32:97:08:de:0c:57:7d:32:b4:21:ab:84:8d:
db:17:10:e4:f5:33:a3:6f:dd:ae:be:aa:a4:4d:48:a0:b9:f1:
2c:b9:46:e8:75:8c:1b:86:5b:30:b8:88:3e:02:9d:fc:55:5c:
6a:32:82:14:e0:2f:c4:da:05:83:c1:e7:4e:95:98:e3:01:62:
3c:37:6a:e8:1c:6f:85:e2:6d:df:ce:6f:a3:01:33:54:0b:da:
da:cb:96:c1:8e:28:1f:5d:91:b4:ef:d0:e6:0e:c3:d5:ad:91:
c5:a9:d3:20:4d:32:4b:a1:95:20:4f:ee:f1:01:85:e7:1e:ba:
dd:e6:a4:96:7e:65:d7:85:1e:da:a3:a0:d6:0a:64:2f:53:a1:
2d:95:2f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQa5+X1wU1o/3ybWw/xsZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx
OGUzYzAwHhcNMjUwODA5MjAwMDI4WhcNMjUwODEwMjAwMDI4WjAzMTEwLwYDVQQD
Eyg0OWNmYzY4ZDgxZjdkZmY4OWIyYTU4ZjYyNzJlN2ExN2QxYjFkMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws+7u82EsjS9ybx/jg/3sHnFyD4M
eJCr2+tRFKoRz1tnLdUJOL8/YDKMRMVy+kHQ+xxemRojJGMzhGDvUW1TcdmxtnCU
YTfJ7C5/CbN2x8b44Gf/Bgj5r2TKcwL8mJbU6OAXbMw6/A2I6ho6KTp0IS7y7FhF
Jejx/MQtx+NrcqWwfCxXRAxLvN2NtPYxFX7cBo1nbGafoGTHePbjcjKIKQx9SKUu
z1Hkz8OoG1Z5VYnfaqUps/6QNI+sg0PA8O88ThtDeJYQ2y0WGetmEcCzDizzqMje
TeW3SFplSqau6ABzB4wQP9dsyzrifQfxh5kjAAOeNPu2g4Pk2Xo2ZvqYNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnPxo2B99/4mypY9icuehfRsdA4MB8GA1UdIwQY
MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt
YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1
LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMsN9Q6j
el4jDlNKfAXwrGNXluOoinNJ1iSG3iOh8xE72lXuuqm1yw3B5ysBoOWUsvrszZIi
6tOLNuGxaceiX+Ho3MXf/dubcGmTYFxl0TzvU6a73kNoRzLRFIC4X+dAFzp6hGB5
tAQdCtljx8e+nWkylwjeDFd9MrQhq4SN2xcQ5PUzo2/drr6qpE1IoLnxLLlG6HWM
G4ZbMLiIPgKd/FVcajKCFOAvxNoFg8HnTpWY4wFiPDdq6BxvheJt385vowEzVAva
2suWwY4oH12RtO/Q5g7D1a2RxanTIE0yS6GVIE/u8QGF5x663eakln5l14Ue2qOg
1gpkL1OhLZUvVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:06 2025 by rpki-client