Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: Zh+7kHyosjLrKZh5vjcba2ruO+YWSkJIkian3yAlfgk=
Subject key identifier: 6B:3A:DD:4C:B7:EF:21:24:EB:A1:08:FF:15:9A:79:9E:2D:33:05:4A
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019850B0BC7AE142CF793967795C7B64A1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 11:00:16 +0000
Manifest this update: Mon 28 Jul 2025 11:00:16 +0000
Manifest next update: Tue 29 Jul 2025 11:00:16 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: JpW1svZ+OwiZKsJBHEaBtBSRi0X+P6dat2Eaplxznzs=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:b0:bc:7a:e1:42:cf:79:39:67:79:5c:7b:64:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Jul 28 11:00:16 2025 GMT
Not After : Jul 29 11:00:16 2025 GMT
Subject: CN=6b3add4cb7ef2124eba108ff159a799e2d33054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:52:8e:09:f4:83:83:1a:af:c3:4f:ad:98:
86:cd:bb:d3:9b:4b:35:f9:e4:0e:e6:c7:4c:e0:b0:
7e:17:c5:5c:51:bb:b0:d3:66:0d:f0:0c:ed:8f:76:
5d:5c:41:c8:50:b2:b0:32:de:1c:7b:d7:aa:3a:d6:
06:a1:df:8d:18:31:a4:4b:4e:21:59:6b:36:ab:51:
e3:b6:19:81:29:68:99:12:eb:9f:44:82:0c:da:96:
b4:cd:d0:4a:e9:04:49:81:c5:d7:69:b5:47:7d:81:
9f:0e:74:45:56:31:72:4a:43:15:a5:7d:ba:af:9c:
c9:f2:84:42:c9:28:df:66:8c:37:31:70:c6:a5:96:
9f:bd:f3:34:88:80:52:5b:a2:c8:0a:85:9b:c3:52:
c0:3f:b3:33:e5:4a:aa:b2:c8:27:1d:3c:5a:63:21:
b6:90:e5:67:af:de:8c:c9:3b:ca:bb:16:49:d3:27:
24:1d:ac:46:3f:6d:c5:85:31:1c:c0:2c:a5:74:58:
f8:90:9f:aa:2a:e7:11:56:76:e9:ff:63:1d:a4:17:
4d:4e:6a:8a:db:a1:de:93:bf:85:2f:2a:f4:68:fa:
12:2e:47:5d:a8:a7:41:8d:2e:f2:b6:5d:34:0d:4d:
57:4d:bd:4e:d3:65:2c:d5:31:44:4e:0a:93:bf:3e:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:DD:4C:B7:EF:21:24:EB:A1:08:FF:15:9A:79:9E:2D:33:05:4A
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:f9:34:07:d8:52:4f:49:a0:95:0a:12:9b:12:32:c8:af:
95:b2:cf:20:7c:83:f9:b8:15:2c:89:46:ae:5d:81:a3:c1:57:
40:af:a9:6b:6a:db:4d:32:7d:a9:37:db:f8:33:de:a0:d4:0f:
5e:78:76:bc:55:33:40:aa:e2:0c:de:e8:f5:12:67:a4:db:50:
ab:d2:85:e7:8a:ca:86:dd:55:78:96:b9:d1:5d:bd:50:53:52:
0e:4f:c0:f9:72:a3:e1:ce:fa:f3:de:27:40:a7:9c:0a:c1:55:
3c:cf:0b:db:14:2d:35:21:49:1b:65:b0:cb:78:9c:5d:63:a8:
49:c3:0a:56:7c:82:b3:f4:94:ba:c8:41:05:92:fb:c4:fb:f7:
47:1e:11:5c:ba:e6:bc:3b:f9:32:10:e8:cb:89:27:ee:96:44:
20:69:17:16:1f:d9:b0:a9:1b:82:35:17:aa:56:c2:95:4b:71:
ff:bf:49:6d:e0:db:ce:8f:b4:1d:01:8b:d1:c3:78:62:ea:93:
0d:60:58:f5:63:ab:95:e5:98:40:a9:fd:e3:89:44:ad:3f:3b:
7e:43:31:e0:ab:4d:b3:8a:99:47:ad:63:d1:46:31:e9:49:f2:
d5:a5:4b:e6:98:ec:ed:a9:01:70:84:02:4b:60:fc:35:3f:b6:
1a:3e:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:11:09 2025 by rpki-client