Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: bYo0gL5PFvJQATNlYBGRevoaVOUqMQtmIRBC/gRxoHQ=
Subject key identifier: 25:69:04:DE:74:3C:E7:DF:78:A8:4C:11:07:7C:AD:82:04:5B:5A:04
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019922FAAC1004923EFBC65107BB2ACB9801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:17 +0000
Manifest this update: Sun 07 Sep 2025 07:01:17 +0000
Manifest next update: Mon 08 Sep 2025 07:01:17 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: xdAIRKv41XeN+7WLV8MIDmcM+r9bUcHaRHTG2Z6WW9k=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ac:10:04:92:3e:fb:c6:51:07:bb:2a:cb:98:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Sep 7 07:01:17 2025 GMT
Not After : Sep 8 07:01:17 2025 GMT
Subject: CN=256904de743ce7df78a84c11077cad82045b5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:61:58:51:34:96:69:93:2d:b8:82:dc:1b:
44:84:3b:35:68:45:9b:98:2f:33:df:32:a9:e8:a4:
1b:00:92:4c:6d:97:d8:84:03:a1:9b:bd:46:de:88:
7f:bb:88:8d:2d:f3:47:7b:cf:12:24:b7:bd:e9:5a:
5c:bf:d8:f7:d5:6b:fa:ef:cb:50:8b:78:15:87:63:
f6:b9:1e:ff:d6:5d:50:b1:3e:d5:c7:a9:e8:64:a7:
07:33:f7:7e:c3:79:18:e2:7f:f6:0a:bd:d2:1c:4e:
a1:46:70:ca:c0:8b:8e:ab:f2:d1:d8:b3:7f:0a:01:
c0:ea:12:da:2f:38:4d:e5:59:6d:de:9c:79:d9:ee:
dc:bf:88:b6:61:f9:96:90:f2:77:19:d7:51:f1:80:
a8:5c:6a:00:7f:50:b4:60:98:4a:e5:ce:1c:04:af:
4f:bd:d1:c3:02:93:7c:15:23:08:98:58:45:05:49:
56:2f:d7:5c:3f:ea:c7:c2:5c:d1:86:09:cb:24:7f:
00:43:70:d2:16:ce:5e:dc:64:7d:b6:ec:09:3f:16:
8a:4d:b4:db:54:fe:81:1b:40:ef:d5:0d:62:e3:51:
43:4f:b1:0b:0a:10:b1:84:cd:51:ba:78:b4:3f:f2:
28:b9:07:bb:31:43:0a:d4:da:24:94:fc:76:73:63:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:04:DE:74:3C:E7:DF:78:A8:4C:11:07:7C:AD:82:04:5B:5A:04
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2b:ec:24:40:b3:e8:cf:6b:74:f0:1d:6f:a0:bc:7a:8f:fb:
0e:a1:e5:a1:e7:db:b2:7b:1b:eb:61:da:30:21:93:df:5f:fa:
fc:ce:a8:31:29:de:1e:3c:32:dc:d3:02:11:b1:93:29:af:83:
68:8c:0b:fb:b6:b3:0d:9d:ed:2e:22:c6:22:17:98:ac:64:df:
a5:09:a8:68:b6:f8:8e:db:97:67:59:fa:d2:40:79:93:0c:3c:
58:db:3e:5d:a1:70:ca:df:27:9b:2b:87:28:d6:6e:43:20:bc:
a8:d9:0c:6a:4f:62:3b:df:78:95:63:ae:06:d1:29:d0:05:69:
99:1a:66:8d:db:00:e9:27:2c:d7:9b:6a:ca:de:b7:f6:df:eb:
c9:a5:5c:88:84:cf:8f:40:e4:ae:20:3f:37:5d:5a:6e:b5:a1:
54:2a:fd:9b:9e:7b:a4:3c:5c:52:94:a5:a9:e6:08:e7:f8:10:
c8:c8:b0:91:39:07:fb:b7:9e:f0:3d:c1:9c:7f:59:e9:7c:41:
4e:ae:26:e4:61:16:55:b0:1c:3f:af:8e:03:b4:fe:a6:82:a1:
58:79:01:85:3b:90:ac:9b:93:3c:ef:2c:15:6d:c8:b6:67:c4:
5c:7e:ce:56:1b:4c:02:bc:28:53:91:e5:41:4c:0b:21:e4:34:
a3:07:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:58 2025 by rpki-client