Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: kJcLvEZ7ufChQI+x0uYIXzlP0mm1ZAT/pjEyyD2gYv8=
Subject key identifier: B1:30:55:DA:F1:D3:1D:B4:8E:1D:2E:2C:E2:BF:56:79:13:71:C2:D6
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 0198790854AD3CDD1A83FE77F67A0666CBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0DF5
Signing time: Tue 05 Aug 2025 07:00:45 +0000
Manifest this update: Tue 05 Aug 2025 07:00:45 +0000
Manifest next update: Wed 06 Aug 2025 07:00:45 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: wf3ysmvzHAlK6XTtvF9Icp+ySqh0kuRURuckuriMVSM=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:54:ad:3c:dd:1a:83:fe:77:f6:7a:06:66:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Aug 5 07:00:45 2025 GMT
Not After : Aug 6 07:00:45 2025 GMT
Subject: CN=b13055daf1d31db48e1d2e2ce2bf56791371c2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:07:0e:fe:1c:c7:38:90:89:c4:21:ca:cf:
9f:42:8e:74:b5:12:26:0d:01:a1:91:7c:53:44:81:
4f:d4:d2:5a:3a:c6:a9:28:cd:b3:74:ba:77:91:33:
76:92:15:67:b9:d3:b0:ab:e8:97:94:19:71:29:47:
9d:c9:e4:53:c7:7a:82:d9:d8:bd:b1:ac:b5:20:89:
52:69:c1:9c:9c:54:15:98:32:48:46:a6:8e:31:02:
79:92:58:5f:04:51:03:64:e5:82:2e:10:f4:41:df:
54:45:c3:d5:ae:a8:24:55:da:8d:93:af:68:f0:bd:
f6:34:0b:ee:a2:28:4d:e1:28:93:ba:da:7a:c3:b0:
f7:c1:15:9e:59:8d:fd:61:6c:97:65:fc:74:4a:60:
02:11:d4:d2:84:65:eb:08:ac:d8:bd:4b:35:2b:60:
e9:f2:df:16:a9:87:41:60:50:0b:ec:23:5e:13:2b:
0f:aa:48:b9:18:71:e2:87:0d:93:cc:8e:f6:5d:7b:
1f:ea:fc:f4:e6:86:46:55:ff:1c:34:ec:0f:9b:17:
10:d5:6a:23:43:04:c8:81:1f:b1:f5:81:7c:58:27:
85:6a:69:c2:98:12:29:f0:eb:4b:e2:df:f5:6d:52:
09:90:f2:72:2b:1d:e8:f4:b0:e0:05:00:a3:00:7f:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:55:DA:F1:D3:1D:B4:8E:1D:2E:2C:E2:BF:56:79:13:71:C2:D6
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:95:b5:af:a6:42:ce:b2:a3:cb:4f:06:62:90:e9:2a:22:
ed:db:2c:97:b7:49:06:02:74:11:f3:8e:ef:82:6b:08:68:ac:
d7:21:63:c7:d5:e8:9a:98:e5:45:0c:e6:83:c3:44:61:96:ee:
68:90:1c:db:24:66:36:57:6a:2d:28:df:41:9b:ed:29:65:7e:
86:08:e2:11:27:17:3a:aa:a4:ae:a4:27:f8:3a:55:b1:a1:50:
9f:db:8d:40:09:27:0e:00:61:a6:83:70:92:07:09:88:43:a0:
2d:fc:3a:c3:85:28:52:b6:8b:67:de:5d:2a:60:b0:bf:d9:54:
4c:5b:6f:e3:61:6b:84:d5:3a:4c:6f:b5:1a:da:f8:ea:20:9d:
b1:ab:62:b9:a9:bd:a3:56:51:d9:fd:ef:21:d1:87:f3:ec:ff:
8a:f7:45:40:25:0c:42:07:a3:32:6c:72:8d:d4:86:05:04:ae:
8e:5b:96:df:00:c4:2d:11:38:8d:e2:12:90:80:9a:f1:5c:1b:
30:3a:bb:f8:82:14:aa:18:6c:47:fb:93:40:13:5e:e7:5b:9b:
bc:ba:5e:86:6a:d0:58:e8:57:90:3e:ff:fc:af:b4:6c:6e:38:
56:7b:a9:cb:3f:57:f5:2a:4d:a0:90:a4:24:f2:36:48:4a:d1:
27:c9:07:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5CFStPN0ag/539noGZsv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmY5YjJlOGEzMDUwOGQzOTE5MmFmZDViMzRlZTU2Zjc3
NTk3OWUwHhcNMjUwODA1MDcwMDQ1WhcNMjUwODA2MDcwMDQ1WjAzMTEwLwYDVQQD
EyhiMTMwNTVkYWYxZDMxZGI0OGUxZDJlMmNlMmJmNTY3OTEzNzFjMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DIHDv4cxziQicQhys+fQo50tRIm
DQGhkXxTRIFP1NJaOsapKM2zdLp3kTN2khVnudOwq+iXlBlxKUedyeRTx3qC2di9
say1IIlSacGcnFQVmDJIRqaOMQJ5klhfBFEDZOWCLhD0Qd9URcPVrqgkVdqNk69o
8L32NAvuoihN4SiTutp6w7D3wRWeWY39YWyXZfx0SmACEdTShGXrCKzYvUs1K2Dp
8t8WqYdBYFAL7CNeEysPqki5GHHihw2TzI72XXsf6vz05oZGVf8cNOwPmxcQ1Woj
QwTIgR+x9YF8WCeFamnCmBIp8OtL4t/1bVIJkPJyKx3o9LDgBQCjAH8rzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEwVdrx0x20jh0uLOK/VnkTccLWMB8GA1UdIwQY
MBaAFAwvmy6KMFCNORkq/Vs07lb3dZeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTIt
OWVkYTU3YzIzZWRmLzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTItOWVkYTU3YzIzZWRm
LzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgWVta+m
Qs6yo8tPBmKQ6Soi7dssl7dJBgJ0EfOO74JrCGis1yFjx9XompjlRQzmg8NEYZbu
aJAc2yRmNldqLSjfQZvtKWV+hgjiEScXOqqkrqQn+DpVsaFQn9uNQAknDgBhpoNw
kgcJiEOgLfw6w4UoUraLZ95dKmCwv9lUTFtv42FrhNU6TG+1Gtr46iCdsatiuam9
o1ZR2f3vIdGH8+z/ivdFQCUMQgejMmxyjdSGBQSujluW3wDELRE4jeISkICa8Vwb
MDq7+IIUqhhsR/uTQBNe51ubvLpehmrQWOhXkD7//K+0bG44Vnupyz9X9SpNoJCk
JPI2SErRJ8kH1w==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:58 2025 by rpki-client