Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: mxrwpfiFhDFlBZ2E15t2xBOHP198yimZxnsIk7WFm0g=
Subject key identifier: A7:A7:F2:27:C8:74:30:A8:45:29:11:6B:12:73:8D:9B:7B:FB:02:44
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019A522C344B49EFD781368FA1243B624138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0EEA
Signing time: Wed 05 Nov 2025 04:00:19 +0000
Manifest this update: Wed 05 Nov 2025 04:00:19 +0000
Manifest next update: Thu 06 Nov 2025 04:00:19 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: J4QvLfSnCSU/NSTBM0+hHnKk241bOvic9vSlMWnleiM=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:34:4b:49:ef:d7:81:36:8f:a1:24:3b:62:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Nov 5 04:00:19 2025 GMT
Not After : Nov 6 04:00:19 2025 GMT
Subject: CN=a7a7f227c87430a84529116b12738d9b7bfb0244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:33:3d:ae:22:c5:0f:93:5e:87:06:d0:6f:
d7:d1:41:3c:70:3d:24:b3:15:fb:24:e7:38:b9:11:
55:21:0e:80:c8:e0:0c:07:c8:ee:cf:bf:85:ec:5d:
ce:4e:76:34:81:15:7b:b1:75:10:fe:77:00:05:4f:
a8:87:a5:9d:fc:93:76:6e:df:87:36:4c:fb:54:5e:
d1:7d:4a:40:cc:8b:3d:43:99:d3:7f:af:f9:da:80:
94:bf:e6:37:6e:9f:a2:00:20:a6:24:de:67:90:02:
b2:e3:e1:8f:73:9d:32:14:42:b1:00:96:fa:56:ed:
05:f3:51:67:5a:bc:0d:47:8a:75:21:d3:6e:24:59:
a2:d2:80:f4:c6:ab:0e:32:62:2c:dc:d1:e1:34:43:
dc:2e:6b:13:4f:7d:78:49:18:b9:d8:ab:50:52:9c:
94:22:af:2d:84:c1:fd:3f:b1:f6:95:2c:02:0a:e3:
e2:d7:a0:a9:f3:52:75:5c:6c:67:f8:aa:2b:3c:d1:
41:54:1b:e3:7f:b8:1c:82:f7:cf:98:43:ce:68:51:
1a:7f:66:7a:54:d0:85:66:37:64:77:23:5e:d9:83:
b6:63:4e:02:79:43:32:33:f3:b3:01:a4:d7:d6:42:
f0:1c:8b:af:bc:e6:13:00:ba:f4:39:4b:18:94:e1:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:F2:27:C8:74:30:A8:45:29:11:6B:12:73:8D:9B:7B:FB:02:44
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f9:8b:40:3f:8c:af:78:9f:88:5d:19:ec:f0:3d:31:24:82:
b0:1f:b4:a3:f9:97:53:d1:54:23:ad:5a:f6:91:b9:94:87:dd:
13:1f:c0:df:bb:31:41:d0:08:80:69:95:9d:41:e8:5f:90:0a:
54:61:fc:a6:42:2f:b3:d1:70:0c:5f:33:62:dc:ce:f3:ee:e5:
09:6f:6c:7d:fd:14:22:1f:54:0a:56:5c:76:e7:7c:0e:4f:b1:
4f:6f:20:ef:07:94:a2:0f:ba:b8:7e:f3:16:9c:2c:62:eb:5d:
f9:58:18:80:4d:24:f6:f0:d9:5a:33:ec:5b:87:84:28:77:db:
36:1c:89:ee:50:13:3a:21:fd:2b:55:0b:fc:01:de:75:53:8e:
0e:79:ef:ca:3f:64:09:79:82:d0:8b:c7:b2:56:21:40:ac:0b:
df:94:3e:d4:62:b1:7e:50:33:df:14:86:fc:e3:a9:de:2e:38:
f9:4c:26:e3:55:2d:d7:f5:b2:d8:89:2e:42:29:d0:38:c4:19:
df:ac:16:f9:51:04:1a:79:a9:d2:9a:ff:33:16:de:ee:c9:34:
cd:f4:e2:83:fa:c1:f1:14:cd:11:6a:34:74:43:ed:04:c2:87:
bc:fb:aa:b1:a7:e7:5a:4e:0f:e9:af:65:82:d5:3e:20:31:72:
f5:7e:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:21 2025 by rpki-client