Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: eNL4lkgnJbYjvyFAoC9Q6OW0g+QuE3hPYUlPv4g8SeY=
Subject key identifier: A7:64:30:14:CA:DD:98:28:B5:89:54:F0:E3:2A:A2:DE:E3:AC:40:11
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0198D697FF71C2E959E0B4FFDA2071F5DDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0197
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: t3I5XHAKqECijVhX05sCO6OtBt9ydFMxJS7DoeSzeZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ff:71:c2:e9:59:e0:b4:ff:da:20:71:f5:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=a7643014cadd9828b58954f0e32aa2dee3ac4011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:da:2d:0f:a4:72:5a:92:fd:0e:8b:f9:69:
af:27:8b:00:2b:5e:ee:88:4d:b5:9c:3d:0d:50:4c:
17:db:93:48:86:78:a0:38:1b:e9:7d:ca:b2:70:aa:
f3:0a:e5:e9:97:0e:61:c5:89:06:b9:f8:77:3e:c5:
6f:3c:21:e0:33:6b:84:df:ad:43:d4:8e:81:b4:6b:
54:33:b5:57:8a:e0:f2:b4:e2:84:e4:9f:4a:46:8a:
fa:ac:16:b6:f2:a9:41:28:e3:ee:54:aa:3d:0c:82:
b1:8d:75:80:0b:57:a9:3e:09:31:10:9c:a1:0c:14:
a7:a8:6e:2d:03:f7:14:52:c0:e4:0d:6a:b4:ee:0a:
aa:2c:34:0e:6c:d9:ab:7d:8d:1b:f1:e0:6c:d0:52:
ab:a2:2a:f3:56:d6:3e:4b:07:fe:06:6c:01:e0:09:
c2:1d:f2:5c:2b:96:00:6a:e9:84:7f:0c:5b:24:46:
6e:50:61:50:d2:f4:7a:ee:d7:da:69:20:70:d2:ba:
d2:99:af:aa:2f:77:c1:08:6d:56:e6:5c:53:6c:25:
3e:60:c3:3d:7d:43:d8:db:ba:d3:af:c7:7c:87:7d:
31:1c:d1:71:02:24:43:0a:d4:d8:96:57:0c:4d:b9:
91:6b:c3:95:43:64:96:35:fa:f7:00:a5:55:f6:0e:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:30:14:CA:DD:98:28:B5:89:54:F0:E3:2A:A2:DE:E3:AC:40:11
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:63:b8:8e:d8:11:5d:9a:3f:8f:46:05:13:34:6e:f3:8a:
26:00:28:3f:17:07:81:47:d6:28:e6:6b:b5:e3:e3:d9:6d:03:
57:64:b0:96:da:7b:74:13:22:1e:c1:62:4d:35:8e:1a:c0:20:
31:b2:20:58:88:17:a5:cb:f9:6e:09:21:39:29:80:2e:5c:26:
81:39:f3:19:f0:a7:fe:1d:27:d0:d0:12:b8:d7:52:d3:aa:ce:
0d:59:19:48:77:91:47:f9:8a:c4:94:9c:90:c7:38:e5:53:d3:
cd:9a:35:5a:3f:a4:ed:eb:32:22:83:84:d5:48:4d:f1:bd:f0:
48:06:aa:7d:4b:f4:0d:4b:05:cc:85:42:c4:4b:10:f7:c0:c4:
47:27:1e:60:18:86:42:30:3b:20:72:27:23:6d:66:b8:47:d2:
40:3a:34:42:c6:35:70:da:de:f8:03:eb:f4:15:1f:20:64:7d:
f9:a5:32:ac:c6:13:f0:8e:5d:49:fd:68:08:50:49:27:29:5f:
6d:ad:4e:bd:5b:40:aa:fe:c6:39:51:ab:35:47:b6:de:1b:47:
f0:21:6f:d3:e6:67:67:bc:4b:e4:56:35:5b:ea:a5:c3:20:1b:
76:b8:53:2b:99:3c:cf:e0:8b:e2:ab:db:aa:ef:2f:20:95:21:
b5:66:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:54 2025 by rpki-client