Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: 6dGiJxdEliYT9gEW5W13Xk8ClTatSjs9ovBQ0ghoc9w=
Subject key identifier: F4:2D:B7:37:DC:E0:85:1C:32:2F:42:51:E8:1D:75:7F:77:05:84:57
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0196B7EC1F0783C6A4D1AD6ED444CB08F71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 7E
Signing time: Sat 10 May 2025 02:00:26 +0000
Manifest this update: Sat 10 May 2025 02:00:26 +0000
Manifest next update: Sun 11 May 2025 02:00:26 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: /a2gRAL6aFWM0I0xCFe8ebYWgmaIw/NKb7tutvYNS2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:1f:07:83:c6:a4:d1:ad:6e:d4:44:cb:08:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: May 10 02:00:26 2025 GMT
Not After : May 11 02:00:26 2025 GMT
Subject: CN=f42db737dce0851c322f4251e81d757f77058457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:68:7a:98:00:89:04:d5:19:c5:de:ec:28:
f1:7d:81:cb:27:77:de:94:ad:31:6f:c5:52:30:0d:
54:03:ae:74:28:0e:44:8e:58:ca:00:80:cd:55:80:
54:6f:8d:b8:1b:c3:43:a5:49:8c:d3:f1:45:b5:6c:
ef:51:e1:55:e6:75:3c:fe:7b:e9:47:35:41:6e:06:
8e:a2:7c:0c:31:5e:1c:2d:8c:8f:45:45:3e:87:11:
9d:bc:2a:c2:16:15:34:db:c3:c1:44:2b:27:a9:85:
75:c7:c5:b4:e6:d7:63:55:50:19:5a:62:2e:2a:32:
e6:72:96:5d:40:eb:3e:9d:2c:84:a5:84:6f:8e:20:
96:6d:a6:4c:60:6d:d7:ed:4e:03:74:ea:1f:02:7a:
fc:c4:a7:07:89:2e:3e:c9:e5:c4:14:e6:12:7b:88:
c8:f9:2b:67:cb:49:63:6f:0b:bf:6c:0d:02:8e:f6:
d5:93:c3:be:fb:88:98:1b:05:ca:7a:3b:8e:25:c8:
e3:59:8d:7c:54:84:17:c3:f8:0f:0e:77:77:4d:ae:
b5:82:0f:b1:8a:1c:5b:b4:13:13:0c:a5:de:64:9e:
6b:ff:b8:c3:57:2b:f8:d5:31:ee:0a:eb:6f:0a:a5:
5c:86:b6:fc:e2:3b:8d:2e:52:14:c3:c6:1a:4d:e5:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:B7:37:DC:E0:85:1C:32:2F:42:51:E8:1D:75:7F:77:05:84:57
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:71:bd:65:62:73:b4:0a:40:15:fe:0c:9e:7a:5e:24:e4:
00:56:92:3b:83:14:72:f6:be:04:f5:29:2a:53:2c:64:87:43:
bb:40:4b:c3:91:ab:24:ce:7a:3b:33:6a:80:31:52:aa:c2:f0:
51:18:c1:4f:18:64:e2:e8:79:d7:0e:cb:8f:54:00:b1:e5:ec:
f4:81:58:79:d7:c6:47:4b:fa:05:47:22:1a:7c:77:88:f2:f4:
45:67:3c:14:f3:2b:c0:74:a1:96:14:6e:fb:96:17:0d:ce:e8:
87:2a:0b:c1:c9:3c:8a:d5:e8:18:c8:78:61:68:8c:f6:b7:ad:
d3:8a:28:6d:68:4e:80:64:04:a2:11:a6:3e:4a:9c:ee:fe:93:
01:dd:64:85:2f:3f:5e:8d:52:0f:41:dd:73:c8:58:0f:b2:5e:
e6:e5:8b:52:97:d9:ef:aa:cf:03:55:ec:ff:77:cf:81:e4:69:
44:3d:2c:64:a7:5e:d0:14:0a:ea:f9:11:bc:9f:84:53:99:73:
f4:41:8f:38:37:4b:9a:df:6a:0d:98:ce:fa:bc:d9:8a:ac:9c:
f9:7f:5f:c1:51:da:94:ad:40:14:3f:85:b8:ed:91:cc:ba:d1:
b9:9b:81:a5:ff:b4:e5:5b:bd:91:36:d5:35:29:ef:9f:1f:93:
bb:45:1f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37B8Hg8ak0a1u1ETLCPceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx
ZWJjMDAwHhcNMjUwNTEwMDIwMDI2WhcNMjUwNTExMDIwMDI2WjAzMTEwLwYDVQQD
EyhmNDJkYjczN2RjZTA4NTFjMzIyZjQyNTFlODFkNzU3Zjc3MDU4NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTxoepgAiQTVGcXe7CjxfYHLJ3fe
lK0xb8VSMA1UA650KA5EjljKAIDNVYBUb424G8NDpUmM0/FFtWzvUeFV5nU8/nvp
RzVBbgaOonwMMV4cLYyPRUU+hxGdvCrCFhU028PBRCsnqYV1x8W05tdjVVAZWmIu
KjLmcpZdQOs+nSyEpYRvjiCWbaZMYG3X7U4DdOofAnr8xKcHiS4+yeXEFOYSe4jI
+Stny0ljbwu/bA0CjvbVk8O++4iYGwXKejuOJcjjWY18VIQXw/gPDnd3Ta61gg+x
ihxbtBMTDKXeZJ5r/7jDVyv41THuCutvCqVchrb84juNLlIUw8YaTeW6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQttzfc4IUcMi9CUegddX93BYRXMB8GA1UdIwQY
MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt
NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0
LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLJxvWVi
c7QKQBX+DJ56XiTkAFaSO4MUcva+BPUpKlMsZIdDu0BLw5GrJM56OzNqgDFSqsLw
URjBTxhk4uh51w7Lj1QAseXs9IFYedfGR0v6BUciGnx3iPL0RWc8FPMrwHShlhRu
+5YXDc7ohyoLwck8itXoGMh4YWiM9ret04oobWhOgGQEohGmPkqc7v6TAd1khS8/
Xo1SD0Hdc8hYD7Je5uWLUpfZ76rPA1Xs/3fPgeRpRD0sZKde0BQK6vkRvJ+EU5lz
9EGPODdLmt9qDZjO+rzZiqyc+X9fwVHalK1AFD+FuO2RzLrRuZuBpf+05Vu9kTbV
NSnvnx+Tu0UfwA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:21:05 2025 by rpki-client