Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: M+j8fdi3yxoIXKHNoCkKYSn8iAWFNS1tpR72StbyUoU=
Subject key identifier: B1:C9:B6:97:58:42:B4:B9:9F:3B:91:BB:A7:95:0C:F4:AC:7A:DD:65
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 0198D5BBD463FEDCFC5A25DF031CE304E05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0E25
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: jLoM56Z4dwXZpYNE6RURxJogQSJH2U0JXOQC8yvdPk8=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d4:63:fe:dc:fc:5a:25:df:03:1c:e3:04:e0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=b1c9b6975842b4b99f3b91bba7950cf4ac7add65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:c8:c4:c8:80:2c:b8:07:44:4b:72:a6:d5:
74:c3:d3:15:df:8c:6f:83:62:62:6d:2b:50:68:d0:
eb:91:b2:66:0b:3b:59:f9:33:53:d3:dc:2f:2a:a3:
1f:a6:60:3f:be:11:db:48:67:99:c1:60:73:b8:27:
d2:55:b6:73:1f:af:c7:b4:2c:4b:09:31:28:78:0d:
e3:5d:86:46:7b:33:3e:82:c8:ba:b6:aa:43:bc:08:
53:e5:20:1c:db:68:82:38:58:c6:d0:15:01:4d:7a:
45:b5:3e:ce:40:b5:0a:e1:f2:6c:db:e9:6f:a3:bb:
92:96:e1:8a:92:8e:6b:10:d6:fa:1a:91:12:7e:d1:
fd:8f:20:41:2e:5c:28:5e:4d:ce:57:ef:70:13:a3:
2d:2a:ca:a8:08:e0:ba:6a:ac:d2:e9:90:a9:4b:cc:
84:49:f2:03:f7:6d:d1:fc:bc:8a:bc:59:e0:02:2b:
73:96:6b:00:77:00:57:64:aa:a5:a8:af:ed:cb:bc:
70:58:87:51:42:2d:15:53:21:60:71:e4:ea:43:72:
5a:3b:f9:30:b6:84:cd:c0:a8:74:86:1b:d1:e6:35:
2a:43:84:27:d1:e5:d4:78:9e:e8:12:eb:47:6c:4f:
b5:51:1c:0a:93:55:6c:8e:c3:53:1d:48:ce:20:69:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:B6:97:58:42:B4:B9:9F:3B:91:BB:A7:95:0C:F4:AC:7A:DD:65
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a7:e8:4c:01:19:55:87:d5:df:b0:3e:8d:ed:bb:4d:c2:a9:
29:52:85:67:ea:d2:c0:1c:7d:57:53:d3:88:70:31:2b:53:e4:
ef:2f:33:6f:0f:1c:09:73:42:14:f7:9d:8e:b5:04:20:4f:c7:
31:91:3a:15:be:df:ee:25:3c:08:0b:e3:f1:17:db:58:54:da:
c6:cf:f2:e6:09:05:8c:d8:74:0b:58:2a:da:de:a7:54:6d:34:
ba:77:ea:4f:e8:18:51:d0:77:eb:0c:12:f8:a5:45:24:3b:74:
b8:0b:53:1d:03:fb:28:42:56:71:77:9f:8c:de:03:c6:20:d3:
2f:81:97:bf:20:53:ca:9b:6c:91:7a:4c:4a:7b:2b:cc:37:ba:
80:f3:9b:7e:17:f0:db:97:a7:a8:d2:43:48:3c:99:c1:11:3f:
91:db:1f:cf:58:7e:dd:76:20:ed:e9:94:12:f1:0f:61:b2:28:
d1:39:e8:e4:e3:e0:f7:6a:f8:56:ea:da:b8:58:89:b3:ce:c5:
c8:5c:13:8e:33:7c:98:d7:74:1a:87:1e:3b:f5:64:82:99:1d:
ef:cd:f9:5b:61:ec:30:aa:14:0b:71:f4:bd:5d:e7:ee:ba:3e:
95:a4:78:e6:f2:26:c2:ef:93:ea:08:d1:fc:7c:1b:8a:94:ff:
66:d8:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:06 2025 by rpki-client