Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: qBHrxtYOE7U8LsE/RM/HaL1A110W+2DFb4T603B8j9k=
Subject key identifier: 53:98:52:BD:F2:A5:6A:4A:B5:1C:97:B9:2F:6D:FA:A3:BD:45:D8:99
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019874F4F08D1608D2E22A54F1CAD89265BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 12:01:05 +0000
Manifest this update: Mon 04 Aug 2025 12:01:05 +0000
Manifest next update: Tue 05 Aug 2025 12:01:05 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: BP5fQ8CYwHr1dAQZFYYNCp66Esyot+x+p3nRhKFBpVM=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f0:8d:16:08:d2:e2:2a:54:f1:ca:d8:92:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Aug 4 12:01:05 2025 GMT
Not After : Aug 5 12:01:05 2025 GMT
Subject: CN=539852bdf2a56a4ab51c97b92f6dfaa3bd45d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:cf:83:bb:33:f7:35:db:88:1c:20:fa:9c:
04:34:34:bc:ce:bd:16:d4:7e:23:67:b3:03:25:5a:
c6:44:cc:35:7c:f0:23:0d:16:1e:61:c0:e9:6d:28:
8d:b8:87:67:06:e4:b1:6b:6d:29:af:ea:cb:58:21:
a0:d7:24:86:d7:d6:4e:c9:05:e6:e6:7f:4b:91:92:
ec:2d:7e:39:61:e0:25:f8:96:af:da:b5:67:a2:d5:
f7:61:58:be:5d:a1:6d:2d:7e:1d:d9:20:c9:58:48:
2d:36:5a:be:10:51:76:eb:a9:0d:a4:78:8e:99:8f:
17:c0:eb:3b:9b:8a:18:d8:9c:f6:a6:73:94:d3:bf:
5a:e6:33:c6:3f:a1:4f:e5:30:59:04:0e:93:2f:02:
f4:b5:be:8e:05:d0:aa:25:fb:ee:42:d0:72:90:55:
57:8e:0b:30:85:85:b2:d7:0d:33:d1:3e:39:7c:5a:
34:29:d4:70:0d:35:ed:18:74:66:29:ae:64:79:6c:
dc:2a:3d:82:35:97:cc:a7:c0:7e:7f:43:d8:7d:31:
d7:fe:3e:b6:19:72:dc:a3:69:34:1a:d7:86:a5:57:
ff:8a:18:2b:cb:7b:ad:9b:14:60:b4:d3:6a:8e:07:
27:e0:66:14:e5:1f:f7:1b:f1:6d:3d:be:65:49:ab:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:52:BD:F2:A5:6A:4A:B5:1C:97:B9:2F:6D:FA:A3:BD:45:D8:99
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cb:05:ba:32:12:a3:b7:78:bb:f9:56:c7:69:77:48:2e:1a:
bc:a0:61:3c:1d:81:c5:69:f4:d4:08:80:87:c6:ec:ea:16:0f:
b4:5b:1c:95:c6:84:bb:82:2f:6f:32:87:be:22:9e:3b:c1:56:
f4:57:ac:63:c6:11:45:ba:27:cb:b2:38:11:fa:22:81:64:33:
fc:a8:01:7e:cd:0d:4d:7f:0f:f0:c7:68:59:57:e8:82:99:e4:
79:b7:1f:00:e6:55:b3:b4:ae:ac:c7:03:54:eb:22:48:52:df:
7a:f4:59:99:35:65:70:88:68:78:ed:1e:4d:d6:69:2f:2e:df:
53:30:c2:f8:ac:8f:81:32:fa:96:8e:f5:45:db:95:6a:21:59:
3e:0d:aa:86:81:40:1b:35:24:9a:1b:d8:7b:6e:c9:9d:fc:5a:
3d:3e:d9:fa:a3:48:12:b9:a7:e8:d1:1b:b4:c6:cc:59:8d:15:
05:3d:30:25:25:be:79:65:a1:39:c7:3e:56:42:5a:70:c8:1b:
d5:55:b2:39:75:1c:a5:77:8a:b2:7a:f7:78:ee:3b:34:5d:b3:
d0:89:c8:75:ec:64:77:7c:1b:5e:81:15:b8:cf:7e:56:75:b0:
40:57:dd:c0:2f:6e:95:73:77:34:f8:86:f1:17:b0:2f:34:47:
3f:95:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:50 2025 by rpki-client