Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: m13sjstL6xu82Cz6vsFXS88+bDBbNTw9R2WKe+sQmzw=
Subject key identifier: E3:45:9C:9F:D9:88:AD:D3:FE:E1:1D:DD:52:21:48:53:7A:1C:46:9C
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0197B6D759B957FDF007F6C9FEDCFE091507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0102
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: cSjGAoTE2PQgRT0l7G3CUQ8OX1erj+7y5f8L81grbeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:59:b9:57:fd:f0:07:f6:c9:fe:dc:fe:09:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=e3459c9fd988add3fee11ddd522148537a1c469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:e2:22:d7:33:f0:6b:67:83:5a:ae:68:08:
60:6d:96:2e:48:3e:e2:67:33:5d:b6:f1:a7:6f:04:
43:eb:db:03:47:eb:02:ff:79:35:57:61:71:e6:c9:
84:b8:4f:96:7e:cb:e5:5a:54:c0:21:6c:89:8e:0e:
53:d2:4d:cb:d0:b2:10:5d:b6:a0:20:17:11:ca:a0:
f2:20:5a:7b:14:86:0b:2e:4f:cd:5c:cd:96:94:c2:
01:f2:ba:c1:54:0f:94:09:c0:9e:7a:8c:91:32:fc:
0e:8d:d6:69:a9:26:22:d1:8d:52:a0:49:58:3b:db:
fc:95:6a:b6:56:15:c6:b3:3b:1a:3a:bb:cf:60:79:
e6:db:c5:cc:5d:30:d0:13:a6:c2:6c:7f:bf:43:68:
2f:c0:66:9f:22:af:92:f3:63:72:4c:ff:c6:d1:6f:
3e:18:44:d4:4c:38:e7:48:b2:75:e1:76:7b:71:6b:
5d:cd:0d:f6:e6:af:89:37:92:90:2e:84:67:43:3d:
63:28:7a:c6:6c:fe:23:22:c4:0c:9e:06:94:aa:a0:
49:95:ee:c2:38:70:da:e1:0d:4a:c8:3a:07:3f:8b:
e6:94:8c:e9:19:1e:0e:c6:5f:c3:a6:a0:d7:4c:7e:
89:57:60:df:dd:62:cb:73:05:eb:97:d6:17:7c:c8:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:9C:9F:D9:88:AD:D3:FE:E1:1D:DD:52:21:48:53:7A:1C:46:9C
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:cd:da:c2:56:e3:97:d3:23:62:6a:53:f5:b4:77:36:57:
12:15:15:8e:7e:c8:52:6a:d9:74:fa:16:65:cc:05:22:00:7e:
a0:8f:d0:f2:a0:b1:1a:c8:87:be:bf:7d:15:e3:21:dd:5d:75:
6c:fa:5c:0d:5e:01:31:43:c6:2a:de:5c:6c:f5:91:39:58:b3:
c2:4a:99:f1:ff:cb:55:29:c9:9e:1d:fb:b1:49:f2:cd:99:b4:
3d:5d:3a:96:ac:04:21:a6:a3:bf:51:ca:13:60:5a:f3:92:84:
56:89:28:ce:df:3e:c0:00:28:01:bf:ce:5c:70:8b:fc:23:61:
4f:b1:0f:39:95:61:67:48:3c:c3:ce:a0:f2:4b:d8:32:5d:95:
1c:61:a7:78:25:f8:4e:21:30:c0:fb:09:f7:5c:c4:9e:7f:c7:
cd:a0:7f:19:70:04:e2:e8:af:0f:7f:2f:07:30:9d:71:ed:ab:
c8:be:d9:f2:94:20:d3:b1:9a:79:e6:dd:92:6c:47:bb:86:39:
2e:54:49:54:83:1f:f5:91:46:ec:b9:53:7d:97:21:62:9b:c2:
9f:aa:9b:3d:3a:08:d7:94:92:79:03:34:6c:6d:3d:ac:75:d5:
a4:f9:91:c1:19:8f:31:97:3e:56:79:70:da:ee:8a:98:53:b8:
35:f4:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:20 2025 by rpki-client