Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: Pp/AkJDXNmDx2d3VfB7OKfoGpODc27lSm4p7UQ3Rmdc=
Subject key identifier: BF:5F:B5:13:F4:B6:F0:90:96:35:21:97:EB:CD:2F:46:CF:30:81:27
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0199FFFE3A5DA599BBBD1BE8D9E5572137B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0231
Signing time: Mon 20 Oct 2025 05:01:15 +0000
Manifest this update: Mon 20 Oct 2025 05:01:15 +0000
Manifest next update: Tue 21 Oct 2025 05:01:15 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: DS4fsZR7B1dRfzN7qUZmtfjLY9GIutZ7ZTCmqQLilHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:3a:5d:a5:99:bb:bd:1b:e8:d9:e5:57:21:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Oct 20 05:01:15 2025 GMT
Not After : Oct 21 05:01:15 2025 GMT
Subject: CN=bf5fb513f4b6f09096352197ebcd2f46cf308127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:3e:13:01:33:6d:4c:37:b7:b2:35:ef:51:
8f:79:8e:44:f5:45:b3:69:0f:f7:04:36:11:a3:c8:
6d:82:2e:f7:fd:4e:dc:2a:f4:1c:69:29:e0:2d:e3:
39:ba:1f:30:49:11:56:61:b5:10:18:47:b5:da:c9:
e4:5f:b9:ba:5b:c8:7a:dd:2d:2f:60:9c:a7:4e:55:
57:91:ef:d5:2c:3a:d8:7a:ff:45:1a:fe:12:0d:d7:
3b:ee:8e:23:40:6e:57:15:88:33:b8:8b:81:02:ab:
ec:d9:4a:c8:fe:a4:49:42:ad:fd:e4:c9:1f:ae:a2:
a0:49:83:37:25:61:40:b6:34:57:dd:34:2b:c5:b9:
7b:a0:87:a1:c8:fb:bb:be:57:f1:72:e7:a9:56:01:
36:d9:2b:1f:bc:61:a1:ef:da:e3:1c:84:da:48:6a:
64:35:99:b8:1f:0f:8d:5b:87:19:4f:b5:cb:60:0c:
61:0e:68:2a:dc:11:81:2b:2f:1c:70:35:a5:fe:79:
55:04:1a:f7:8f:6b:0c:7e:a1:51:93:75:06:e8:fc:
74:f4:8d:89:76:6c:0d:f5:c6:a4:af:fd:98:4e:c3:
0d:20:5d:c4:85:fc:94:29:3b:7b:2e:59:45:5d:6f:
9a:1e:a8:0e:21:de:e1:5c:48:29:0d:4a:49:eb:31:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:B5:13:F4:B6:F0:90:96:35:21:97:EB:CD:2F:46:CF:30:81:27
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:58:45:c2:b1:f6:95:ff:0e:19:42:dd:7e:7e:63:c4:a6:8d:
39:01:1f:2b:4a:5c:a7:be:f8:2a:0c:e7:2d:cb:06:80:14:8e:
92:cf:da:cf:53:65:d7:3e:37:dc:fc:0a:80:c7:09:41:4b:d4:
30:4c:cc:41:4b:fb:2b:fc:7b:2c:4d:0c:24:90:0e:41:da:fb:
44:f0:e6:7f:d7:ec:f8:18:7a:5f:ec:d4:05:4b:e3:86:0d:fc:
9d:ef:79:93:52:72:2c:5d:5a:b5:8d:48:b1:a0:28:1f:e3:2f:
e5:a0:f8:78:f4:e6:96:d2:83:7a:c4:21:0d:d7:ad:9e:c9:d8:
24:d6:3c:39:0a:cc:19:ef:02:0a:1a:d2:f5:09:07:94:e4:ff:
14:3e:b3:72:a9:e4:77:1f:97:ba:ac:56:53:dc:a1:2f:dd:9f:
c4:8e:58:78:af:4a:b7:f0:16:a7:f8:ef:80:96:c5:6f:c4:84:
5c:0b:b0:36:a6:2a:cf:0f:42:27:2c:c8:51:0b:6c:bd:51:da:
9c:d0:17:1b:94:a9:ef:61:e6:a1:d0:08:2f:c4:26:81:e9:5f:
55:75:6c:96:68:d4:fe:e6:14:8a:72:9f:d6:46:4f:58:92:cf:
f6:50:88:80:f0:d4:f7:a8:32:b7:f7:ab:fd:27:37:81:2a:8f:
b6:59:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:49 2025 by rpki-client