Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: o1tZUstLHFym5qlJSqi65SzY0JiU0U8CR411dsQPHQ4=
Subject key identifier: 6E:24:5F:A9:C4:FE:A8:E4:07:A4:CA:32:11:C7:FE:0D:DB:AF:87:64
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 0199FD33F981A0CB58981362841BE77E5842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0EBE
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: 5DTmN5ir5tiSVj30mTym85e26MdqZdqBkTE2HJ8DSh8=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f9:81:a0:cb:58:98:13:62:84:1b:e7:7e:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=6e245fa9c4fea8e407a4ca3211c7fe0ddbaf8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:36:ca:c2:27:c0:d3:07:f0:1b:7b:c6:b6:
52:2e:f1:0a:af:b8:17:45:39:01:35:f6:e8:f2:a7:
95:8e:7d:ea:21:0d:aa:87:44:0f:4f:ed:b7:db:b4:
cf:59:bc:e4:ca:19:6d:dd:8d:98:48:14:74:ef:94:
ec:8f:f7:27:16:03:b0:f5:9d:ec:85:38:9a:5a:f7:
08:be:88:ae:01:eb:2a:72:9e:6f:fb:8f:8e:84:dd:
39:c1:4e:c4:ed:86:07:05:e7:31:94:37:7a:8d:ad:
d7:c9:a1:27:f3:a0:38:48:d2:df:82:eb:90:3b:1a:
8e:2a:da:ae:f4:56:59:e0:a3:f5:19:63:d9:32:e1:
cb:70:1d:ff:7f:bb:be:48:14:5e:22:fb:87:e0:53:
5f:3a:c4:6f:23:00:20:10:d9:5a:9b:93:5c:73:2d:
97:4c:b9:34:4f:fc:4f:b9:8b:02:7e:a3:5b:52:48:
f4:33:d0:6d:0f:92:e3:c4:e4:0b:ba:76:a6:dd:3b:
d3:a7:86:4f:38:b2:0e:15:d3:45:58:4d:37:ec:67:
1d:96:d4:5d:8b:1a:fe:af:99:4a:0c:5a:13:c3:a1:
99:15:02:79:79:31:b9:09:fc:dc:d3:96:30:a5:97:
c1:b4:c8:51:3b:2f:d9:1a:99:43:54:ba:93:6d:c9:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:5F:A9:C4:FE:A8:E4:07:A4:CA:32:11:C7:FE:0D:DB:AF:87:64
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b6:37:bd:00:6b:2f:79:6d:35:f6:fa:43:f4:b4:21:0b:d1:
8b:d9:44:32:40:ec:6a:2c:09:94:f4:57:67:3c:b1:a4:3b:a6:
dc:8b:e1:b3:88:41:f1:e7:8a:41:69:cd:0b:73:14:03:ef:e4:
92:57:59:fb:76:ad:f4:57:67:6e:25:5b:8b:fb:22:3a:e1:89:
1c:27:83:e9:6c:28:2d:23:25:41:ec:5c:9e:a7:46:48:df:7c:
db:2f:05:fa:19:d2:8d:d4:1a:45:82:5c:01:2f:7e:0d:44:ae:
d2:98:3b:5b:91:2b:90:81:b7:25:62:7d:11:82:a7:fb:a5:3d:
56:1b:96:e6:bb:c5:08:2e:2e:aa:b4:d5:0f:90:b0:b7:09:4b:
73:3a:18:f3:01:60:c1:bb:62:b4:00:d7:9e:39:cd:b3:7d:35:
f7:00:2c:79:9d:ec:8a:c3:25:41:27:10:91:55:36:4b:5c:b8:
75:fb:9a:ae:c9:b5:18:9e:de:5e:64:93:13:ac:08:64:e9:60:
60:f5:71:22:1c:d1:7c:02:25:17:c7:3c:02:fc:1b:ad:d0:74:
25:a0:31:d5:fc:35:98:c7:c3:1d:35:44:45:5e:0f:84:64:22:
0c:61:0f:59:10:6f:13:33:76:a5:2a:92:43:29:c1:28:33:c0:
3a:94:f8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:41 2025 by rpki-client