Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: fhb96GsqSfDis2u2P55jTqcFzW/FDj/wlFjkJyFVcck=
Subject key identifier: 77:5A:53:29:D6:F1:4B:57:ED:8B:D2:76:90:86:C3:17:26:07:20:31
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0198D5838D239E75D10BBC88EEE3F160E949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: 8OAgRkz4PmheiRcxIGcGh/Y39uQy9NAXzklhr87LlD0=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:23:9e:75:d1:0b:bc:88:ee:e3:f1:60:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=775a5329d6f14b57ed8bd2769086c31726072031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:80:8a:ef:a9:63:9f:4c:32:83:74:83:75:
97:74:d7:90:d8:bf:61:57:40:d3:1c:88:90:69:57:
50:ab:81:9a:b5:27:3b:1a:dd:dc:bd:5e:7b:3a:80:
44:01:f1:ae:26:09:50:04:2c:c9:02:81:55:8e:fa:
b9:e2:ec:6f:e8:06:a8:92:7e:78:e5:7a:1c:a3:62:
19:0d:a3:3d:6f:84:b8:f7:2a:de:b6:52:24:c7:90:
f6:b1:cc:66:52:48:fc:ab:5e:64:cb:b1:40:eb:f1:
97:6b:fe:eb:70:03:59:0a:81:39:cf:6c:72:31:fa:
df:a9:75:aa:47:12:68:67:eb:5f:30:f1:04:51:59:
83:4d:cb:32:a6:38:fb:97:38:f1:f0:50:06:5d:c2:
ca:77:70:3e:52:11:97:8a:e9:b5:50:04:65:8c:8e:
cc:29:f6:de:31:ba:02:7c:05:d1:b3:dd:40:80:63:
47:c4:08:73:eb:f9:30:02:84:4d:aa:56:b4:5c:75:
90:e1:e9:9a:8c:1e:10:e3:77:02:bd:4e:29:c2:ef:
31:90:62:f5:78:7e:34:46:d1:3c:46:de:37:cd:44:
6d:c6:68:ab:ed:e9:6a:83:fa:44:59:fb:9c:ae:3d:
b9:d7:ac:1f:d6:2c:11:33:4b:b4:d4:04:2b:cf:49:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:53:29:D6:F1:4B:57:ED:8B:D2:76:90:86:C3:17:26:07:20:31
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:4c:a2:49:0c:6f:02:86:7d:28:be:99:fe:97:59:48:47:
40:fb:5a:18:41:50:94:45:02:7b:d1:55:55:72:62:05:23:c5:
23:9e:20:2b:a7:11:e4:75:fa:89:a0:73:e9:d5:c3:3b:e3:19:
ed:51:5a:4f:07:0d:e1:f2:9f:28:91:47:b1:ae:2f:23:a0:d0:
ec:9d:7a:0d:82:88:e0:09:f3:97:95:a7:ce:da:ad:2a:72:2e:
2b:51:b6:6b:bd:50:0b:98:7e:9b:af:c0:fe:8d:c3:85:45:83:
5c:7f:89:1a:6f:d6:15:da:13:fe:22:94:a2:81:76:97:8a:5e:
d4:37:76:d3:cf:5d:22:36:07:e0:bd:ad:f3:06:74:8f:b9:e7:
19:fd:4e:2c:f0:30:50:ed:ee:56:34:00:5b:fc:4c:e7:84:48:
d9:28:ef:65:b9:62:01:f5:b0:6b:fa:9f:22:65:c5:61:87:e0:
38:61:07:dd:4c:ba:4b:f3:15:e1:f0:24:1d:e0:2b:c4:c2:90:
69:9a:7c:39:ed:2b:38:f0:14:d3:44:bf:1b:15:d7:2e:61:30:
e7:30:fb:b8:0b:e7:62:b4:ee:7b:c1:8d:73:bd:f7:b7:6a:5a:
f2:39:09:54:9c:fc:8f:f9:2f:a2:fe:92:2c:31:54:5f:3e:a4:
12:a2:d6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg40jnnXRC7yI7uPxYOlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm
Y2JlODEwHhcNMjUwODIzMDYwMDI0WhcNMjUwODI0MDYwMDI0WjAzMTEwLwYDVQQD
Eyg3NzVhNTMyOWQ2ZjE0YjU3ZWQ4YmQyNzY5MDg2YzMxNzI2MDcyMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7qAiu+pY59MMoN0g3WXdNeQ2L9h
V0DTHIiQaVdQq4GatSc7Gt3cvV57OoBEAfGuJglQBCzJAoFVjvq54uxv6Aaokn54
5Xoco2IZDaM9b4S49yretlIkx5D2scxmUkj8q15ky7FA6/GXa/7rcANZCoE5z2xy
MfrfqXWqRxJoZ+tfMPEEUVmDTcsypjj7lzjx8FAGXcLKd3A+UhGXium1UARljI7M
KfbeMboCfAXRs91AgGNHxAhz6/kwAoRNqla0XHWQ4emajB4Q43cCvU4pwu8xkGL1
eH40RtE8Rt43zURtxmir7elqg/pEWfucrj2516wf1iwRM0u01AQrz0nN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdaUynW8UtX7YvSdpCGwxcmByAxMB8GA1UdIwQY
MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt
ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh
LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYpMokkM
bwKGfSi+mf6XWUhHQPtaGEFQlEUCe9FVVXJiBSPFI54gK6cR5HX6iaBz6dXDO+MZ
7VFaTwcN4fKfKJFHsa4vI6DQ7J16DYKI4Anzl5WnztqtKnIuK1G2a71QC5h+m6/A
/o3DhUWDXH+JGm/WFdoT/iKUooF2l4pe1Dd2089dIjYH4L2t8wZ0j7nnGf1OLPAw
UO3uVjQAW/xM54RI2SjvZbliAfWwa/qfImXFYYfgOGEH3Uy6S/MV4fAkHeArxMKQ
aZp8Oe0rOPAU00S/GxXXLmEw5zD7uAvnYrTue8GNc733t2pa8jkJVJz8j/kvov6S
LDFUXz6kEqLWBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:46 2025 by rpki-client