Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: NzzyW5tREh+sKJfY/jZKvzlaxoJNfSN8MiP6qJNOTtY=
Subject key identifier: 8F:36:C3:C4:98:88:06:18:7D:15:D3:66:73:D3:AA:D1:22:68:68:5F
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 0197B7EA2D6E0171C3D49F3D13D36668C676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0D91
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: 2Tc7/xj9PWBBFU7xBK7PqoB7wrNT8f1m/aUVpFdQ4dA=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2d:6e:01:71:c3:d4:9f:3d:13:d3:66:68:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=8f36c3c4988806187d15d36673d3aad12268685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:a6:0e:05:ec:e8:af:e4:56:9f:eb:8b:3d:
a1:d3:f9:a2:7d:64:ed:39:83:2f:9e:ff:47:fc:84:
bc:6b:ca:56:1f:6a:e4:55:f2:52:7a:79:b7:2c:8f:
46:63:4a:62:04:ea:ac:d2:d5:c6:d1:a2:54:85:14:
8d:f6:4c:66:f7:87:44:8a:c1:21:6f:4c:34:03:05:
60:8c:f5:e4:f9:79:81:2d:be:59:a0:bd:0c:23:bf:
6a:4a:60:3c:d1:f0:ca:b9:55:1f:43:1b:e9:06:a0:
bf:fe:72:d7:e8:5a:fe:ec:82:d8:f0:d8:70:26:f9:
c4:94:b2:06:31:90:33:f9:62:f9:fe:5a:b0:0a:51:
32:0e:85:69:e0:5f:4f:85:ac:af:26:1e:87:89:99:
72:76:ee:e6:93:72:91:f8:c8:19:54:af:68:17:27:
05:e2:06:d7:6d:5d:74:ca:5d:d9:86:c8:96:26:b1:
27:ad:3b:49:46:2c:83:ec:8b:b3:2b:4e:9e:78:cd:
5b:14:4b:31:5a:39:9a:55:c7:ed:e4:8d:5c:08:54:
44:54:77:a6:f3:2d:85:69:0b:9e:ca:93:9f:a5:8d:
b5:95:84:b7:53:03:9b:2d:07:a3:6c:f9:cc:f0:d0:
9d:3f:ef:33:3f:3d:07:ed:80:4f:10:09:09:09:37:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:C3:C4:98:88:06:18:7D:15:D3:66:73:D3:AA:D1:22:68:68:5F
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:1a:28:f9:ec:0d:2d:a1:e4:69:75:c3:0e:01:2f:f0:a5:
62:c8:e2:4c:48:7e:97:c1:4c:e8:2e:e5:ea:21:1b:24:d1:04:
0e:d7:a8:3e:73:2e:07:26:0c:a8:c2:70:6f:9a:5f:4e:75:8f:
98:41:ef:14:9e:d5:da:12:3f:f4:3e:77:61:1f:9e:89:0e:6b:
33:4b:5a:15:10:6a:6b:6b:d0:f0:c4:3b:ca:c4:66:43:6e:69:
54:78:b1:83:72:3a:6a:a7:83:5d:fa:b1:1b:61:1a:9e:cd:a0:
05:b9:22:2e:97:14:25:b4:98:86:f6:84:97:0a:11:37:f7:f1:
b6:69:b3:18:0e:c7:b6:6f:1f:52:94:06:f3:17:3a:92:3e:88:
a1:dd:8a:7f:29:5b:b8:cd:02:36:d6:40:b6:36:09:4f:0a:68:
97:14:94:3a:68:65:42:25:ce:e5:f3:85:76:4a:6f:2f:5e:a1:
8a:cb:cf:17:b8:49:92:35:3b:d4:56:28:44:03:ad:ed:08:a5:
53:e8:c8:2c:35:2d:79:e8:03:54:d8:c7:86:6d:ce:25:95:63:
55:62:74:af:7c:fa:b0:9d:64:96:53:4b:e9:13:e8:0c:52:f6:
7b:bd:f6:a9:89:ca:9a:cd:dd:af:c5:b9:df:be:6b:6e:51:b7:
7c:6a:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:56 2025 by rpki-client