Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: xUG54xfWaQVlCTeb7f0Rl8YL7eyiy5AtNZDT1eby8W8=
Subject key identifier: 6A:49:CD:56:0F:F4:4A:E8:60:A5:27:7F:E6:F1:61:00:42:78:D1:6F
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019A4E1901CC7734BBCD6D458CD0EB4E4224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: 3FgpOiePoZdqHokVEfoVaPtBZPxHParyuHRh5jTEiCM=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:01:cc:77:34:bb:cd:6d:45:8c:d0:eb:4e:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=6a49cd560ff44ae860a5277fe6f161004278d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:26:82:04:cb:7f:db:35:61:06:09:93:d3:
56:60:88:9a:f8:ce:e6:aa:7b:ca:de:ab:e6:e2:a2:
3b:30:87:4d:71:27:6f:d3:9a:15:0f:bc:85:48:1b:
bf:04:3c:7f:63:ef:08:49:ec:2b:a1:d1:e2:3b:fa:
78:22:21:ac:73:24:6f:05:a3:fe:81:dc:c0:9a:f9:
dd:18:31:95:ce:27:f7:87:ae:e6:e0:47:29:4f:96:
08:0b:d4:c2:ef:0e:aa:e5:db:2a:9c:1d:45:ab:91:
a8:4b:b8:7e:2d:f4:5b:a5:54:c2:df:97:de:85:ca:
fb:60:60:01:5e:88:74:06:95:49:90:7f:60:03:58:
6a:bf:84:6d:4e:73:64:a6:6d:0d:66:9d:a2:2d:01:
f2:dd:69:c7:d1:e3:63:93:0f:69:5c:1f:7e:62:8c:
2b:39:2b:65:16:32:04:4a:a8:ef:34:88:82:cc:24:
4a:2c:02:d7:14:84:d9:14:43:4a:9a:ee:6f:49:ab:
89:e7:b4:07:89:b7:78:2c:3a:f1:b3:c1:ea:29:73:
63:10:86:87:de:1a:f0:b2:a2:f2:47:30:2a:26:f6:
f1:ca:08:fd:7c:bb:73:18:6b:93:12:ca:99:9c:4f:
a4:85:9a:1e:9e:65:c8:3f:91:b8:e7:7c:7e:eb:da:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:CD:56:0F:F4:4A:E8:60:A5:27:7F:E6:F1:61:00:42:78:D1:6F
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fe:f9:98:2d:01:f8:30:02:4b:f1:11:d4:dc:b8:c1:51:31:
ba:4e:39:81:50:14:3d:f7:7c:3d:87:76:b1:c8:30:a3:9f:c5:
73:c4:a4:b8:79:31:da:70:4d:02:2d:cf:3b:f1:88:b8:bd:01:
97:3e:de:f4:21:10:a5:5a:b2:a6:18:3f:ba:e5:92:f2:33:ff:
58:1b:ae:85:d1:ee:a9:b5:38:52:8b:75:a7:0e:6b:59:0f:99:
11:04:95:0f:eb:92:06:fa:cb:b6:8c:75:fb:cb:7a:8d:d6:28:
e0:5f:03:cc:50:1d:f1:f0:18:20:b0:1a:61:43:94:58:76:2b:
65:6d:ba:dc:de:58:40:1d:dd:78:f5:0b:8c:1f:dc:a7:ed:42:
df:83:cc:27:a8:b1:86:de:e8:59:d7:37:3c:fe:1e:9b:bb:8b:
2f:ba:9d:87:b7:fc:e1:c0:9c:36:37:f2:6c:ac:0d:97:c4:d1:
d6:0b:92:0d:a9:28:12:f0:87:22:63:ae:37:28:99:26:66:27:
02:b7:b5:2c:1f:da:2d:bc:c0:4b:8c:48:52:f3:34:64:ce:ee:
26:b9:8e:6d:20:fb:8a:27:1c:2d:89:a9:b2:6d:eb:6b:66:6a:
85:5e:82:67:39:72:06:af:4c:3f:42:17:bb:b0:87:bd:b6:9c:
ce:e4:8b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQHMdzS7zW1FjNDrTkIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm
Y2JlODEwHhcNMjUxMTA0MDkwMDUyWhcNMjUxMTA1MDkwMDUyWjAzMTEwLwYDVQQD
Eyg2YTQ5Y2Q1NjBmZjQ0YWU4NjBhNTI3N2ZlNmYxNjEwMDQyNzhkMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGsmggTLf9s1YQYJk9NWYIia+M7m
qnvK3qvm4qI7MIdNcSdv05oVD7yFSBu/BDx/Y+8ISewrodHiO/p4IiGscyRvBaP+
gdzAmvndGDGVzif3h67m4EcpT5YIC9TC7w6q5dsqnB1Fq5GoS7h+LfRbpVTC35fe
hcr7YGABXoh0BpVJkH9gA1hqv4RtTnNkpm0NZp2iLQHy3WnH0eNjkw9pXB9+Yowr
OStlFjIESqjvNIiCzCRKLALXFITZFENKmu5vSauJ57QHibd4LDrxs8HqKXNjEIaH
3hrwsqLyRzAqJvbxygj9fLtzGGuTEsqZnE+khZoenmXIP5G453x+69oDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpJzVYP9EroYKUnf+bxYQBCeNFvMB8GA1UdIwQY
MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt
ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh
LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP75mC0B
+DACS/ER1Ny4wVExuk45gVAUPfd8PYd2scgwo5/Fc8SkuHkx2nBNAi3PO/GIuL0B
lz7e9CEQpVqyphg/uuWS8jP/WBuuhdHuqbU4Uot1pw5rWQ+ZEQSVD+uSBvrLtox1
+8t6jdYo4F8DzFAd8fAYILAaYUOUWHYrZW263N5YQB3dePULjB/cp+1C34PMJ6ix
ht7oWdc3PP4em7uLL7qdh7f84cCcNjfybKwNl8TR1guSDakoEvCHImOuNyiZJmYn
Are1LB/aLbzAS4xIUvM0ZM7uJrmObSD7iiccLYmpsm3ra2ZqhV6CZzlyBq9MP0IX
u7CHvbaczuSLfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:16 2025 by rpki-client