Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: yPvVALfHHB9ba/FWhvdXQX/X1/4HczsY/rIgbWbbytY=
Subject key identifier: 84:8A:7E:3D:A2:34:C6:4F:C9:52:9E:A7:58:92:80:A2:F1:3A:B9:91
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 01976E5095AC55F25FABBC8C0DF203F1BCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 12:01:04 +0000
Manifest this update: Sat 14 Jun 2025 12:01:04 +0000
Manifest next update: Sun 15 Jun 2025 12:01:04 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: ivyBTU14LkF3cL9F1dB3mT/t9sUT8uW9yg8D/f69X7g=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:95:ac:55:f2:5f:ab:bc:8c:0d:f2:03:f1:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jun 14 12:01:04 2025 GMT
Not After : Jun 15 12:01:04 2025 GMT
Subject: CN=848a7e3da234c64fc9529ea7589280a2f13ab991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:47:a2:1c:f4:37:a0:3f:2d:7f:d1:fd:62:
1d:ed:54:db:3d:23:cc:8a:9b:7c:1d:ec:80:43:5e:
60:f0:5f:e0:b1:86:fc:a1:9c:e5:9d:f7:99:48:80:
d7:45:74:b2:c6:e0:74:15:f3:51:ea:24:e7:e3:b3:
bc:56:71:e9:7f:c5:59:d7:91:4f:4d:65:23:96:4c:
e8:5f:6f:05:09:df:e0:6f:5f:94:61:7d:dd:9a:cf:
e6:12:d8:1c:6d:02:e3:35:ad:ec:ac:49:6a:9a:3d:
1c:d6:c5:14:c6:49:4f:09:8b:80:93:8c:0b:4c:0e:
bf:24:e2:2f:78:02:ef:c7:0e:eb:0a:23:4d:6e:88:
fc:ac:8b:d6:f8:32:61:e6:45:9c:43:1f:9e:38:0b:
d7:0e:fe:9c:b1:d0:0f:f2:bb:b8:32:40:6e:44:c0:
de:68:a9:6b:15:f4:c2:a8:5f:aa:cb:15:9c:28:25:
81:f5:69:5f:a8:89:3f:ef:5e:ed:81:19:f0:e0:5c:
e9:a7:5d:80:ba:92:19:2b:b0:3f:d7:e7:b5:64:52:
ba:03:0c:a6:c1:93:46:55:0e:61:c9:ab:56:ea:f6:
24:53:bd:e4:36:e3:b1:72:3a:75:fe:ea:85:9e:31:
8c:96:d5:80:11:fb:4d:36:e4:a0:00:81:de:c3:01:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:7E:3D:A2:34:C6:4F:C9:52:9E:A7:58:92:80:A2:F1:3A:B9:91
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fb:e3:4a:d9:15:be:fd:9b:f9:1f:f2:87:0e:e4:ac:85:9e:
92:de:b6:43:d7:64:6b:29:c1:65:b8:78:bf:66:b2:cd:f6:21:
63:c6:9b:09:69:c2:11:03:45:fe:b8:3f:af:1a:b1:88:a0:28:
58:c1:74:c7:85:54:fc:46:01:7e:35:86:c7:b5:6a:e3:29:7c:
58:01:b0:cb:86:15:88:e2:96:cd:3e:e0:f6:4c:8c:e5:b4:f6:
d6:74:77:a2:bf:4a:32:11:76:ef:54:df:a4:fe:34:d0:c5:8b:
f6:3a:7a:57:b8:2b:7c:46:47:3c:ea:66:c4:b6:ba:11:9b:b7:
27:0b:7b:c1:fa:d7:43:70:58:75:d3:54:a1:08:a3:1f:56:4c:
7c:d6:38:fa:90:f6:9b:e1:f0:f2:5b:5d:6f:83:27:c9:68:c5:
ee:2e:44:b2:dc:e6:b7:45:cc:36:17:15:35:7e:24:89:a6:21:
d3:71:58:8a:45:d7:ad:e9:e2:2f:65:c5:5c:29:51:c1:b5:16:
cc:37:9c:f9:32:6c:1b:16:af:b1:3c:dd:30:4b:94:7e:7c:45:
a0:b5:97:94:c3:fa:5c:eb:2e:b7:aa:c7:fd:e7:1f:e7:06:f9:
c6:1d:7c:ba:c6:69:d5:a9:88:9b:a0:80:94:5e:98:4f:f0:1f:
f9:b6:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:41:01 2025 by rpki-client