Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: VLqsduOvIpr018DIFzdb2Uz2XhtuaUfHNQenyVAnhQU=
Subject key identifier: CE:B5:70:0E:5D:2B:99:92:4D:DF:10:02:25:94:81:1F:97:ED:C0:42
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0197B9A1A33103842B0C3F11FC8C6FC53334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 03:01:07 +0000
Manifest this update: Sun 29 Jun 2025 03:01:07 +0000
Manifest next update: Mon 30 Jun 2025 03:01:07 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: cXo+bqQ9jhNvZTXiyJ884fpAXfQnVmnuyTBWvPiqHrk=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a3:31:03:84:2b:0c:3f:11:fc:8c:6f:c5:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jun 29 03:01:07 2025 GMT
Not After : Jun 30 03:01:07 2025 GMT
Subject: CN=ceb5700e5d2b99924ddf10022594811f97edc042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:1d:15:97:43:15:32:af:4a:28:df:31:90:
19:db:c1:be:de:a1:de:7f:ac:33:fa:0c:27:eb:24:
0a:24:04:0c:58:64:00:7c:e7:4e:9f:d1:50:55:c8:
e3:d5:02:92:82:2e:cb:9d:ba:f6:d5:c3:bb:f0:b5:
ee:b6:85:3c:30:b2:bc:09:26:14:04:08:55:79:87:
fb:c5:08:e3:4f:3c:63:3d:3c:a2:cf:73:ef:0d:ea:
4b:98:b9:19:e1:58:1a:4c:30:0c:36:66:c5:2a:95:
ac:03:54:72:35:70:34:3e:cb:13:b6:aa:50:e3:31:
4a:8e:89:34:07:d4:d3:fd:be:85:7b:7c:09:0b:44:
8d:40:90:3e:17:2d:1d:47:cc:af:4c:0b:98:37:c6:
29:70:2d:7a:6a:7c:1b:f1:97:eb:8a:49:57:d0:86:
de:35:96:26:fa:3e:a2:06:a3:47:d7:b6:7c:a4:b2:
03:cd:f6:7c:f5:45:e7:52:67:17:a2:d3:13:0c:44:
47:90:26:31:6e:26:f1:29:64:3a:eb:47:f4:dc:c1:
0a:60:95:3f:2f:85:f6:f9:3b:15:fe:58:c4:5d:c9:
6f:dc:44:63:05:90:b2:7d:55:78:57:e3:53:28:0f:
62:e6:9f:7b:59:6a:e6:9e:b2:f2:70:04:4d:fc:27:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:70:0E:5D:2B:99:92:4D:DF:10:02:25:94:81:1F:97:ED:C0:42
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1f:03:0b:b1:39:bb:27:d9:ba:3b:74:b0:da:cf:31:d5:c0:
5f:48:14:76:3b:f3:38:54:f3:7c:a5:01:c3:f0:90:b3:a0:d6:
91:2d:6e:66:d0:1a:73:fa:2c:dc:d1:b3:cc:bd:2c:b7:a4:90:
ab:ef:53:d1:af:90:7e:0c:a1:64:6e:6d:cf:2a:8e:c6:84:37:
0c:2c:36:03:3b:2d:5a:8f:a4:8b:d9:ab:d7:46:ba:2e:03:33:
1d:1c:f2:4a:21:c9:05:7a:26:bc:21:e4:67:00:50:e5:db:6e:
1c:4c:a9:e7:4b:78:14:22:17:69:35:5a:61:27:76:95:8c:01:
2f:36:a4:ff:fb:67:b8:f4:b5:3c:7d:a1:5e:63:b8:69:9c:a9:
32:70:4d:af:21:cd:e8:f4:97:76:d1:85:ac:09:24:f3:30:3e:
fc:3b:d2:e2:b2:38:eb:63:50:81:c8:84:c6:08:a2:d4:47:0f:
24:e0:85:74:f3:a6:19:06:88:1f:3b:28:9f:b0:2c:00:07:3f:
69:9e:c3:4e:70:70:83:5f:c7:6f:97:b4:5a:a5:94:56:eb:15:
a1:81:6b:24:84:90:ed:58:c7:22:af:92:02:f4:2d:79:95:f9:
f6:fd:91:61:e9:4f:ac:b1:6e:10:1f:74:07:60:d5:25:9b:8b:
4c:7c:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:48 2025 by rpki-client