Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: Kfztq06y6RSjXLy8OqubeMtu66cd3bco4bskRjICNNg=
Subject key identifier: 37:66:D0:07:C3:A7:91:8F:57:43:46:42:DB:A3:04:19:BF:1D:36:0C
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0196C0EF2AB8F3E894F22CCBAC88D7F6C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 20:00:21 +0000
Manifest this update: Sun 11 May 2025 20:00:21 +0000
Manifest next update: Mon 12 May 2025 20:00:21 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: D4ofKFi7FbD4Szb9HzzN3oxFI8joZjyZQqhN+s4gHAU=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:2a:b8:f3:e8:94:f2:2c:cb:ac:88:d7:f6:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: May 11 20:00:21 2025 GMT
Not After : May 12 20:00:21 2025 GMT
Subject: CN=3766d007c3a7918f57434642dba30419bf1d360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:a7:98:ae:53:65:5c:d2:e0:f6:31:c5:49:
a6:63:15:19:bb:9e:29:95:28:bd:06:40:f3:33:63:
9a:2f:f6:f9:91:4e:34:ea:bc:32:9e:3f:fa:ad:ef:
26:a1:d5:bd:ac:17:01:e8:ba:aa:9c:5a:fd:24:20:
87:6b:37:bd:f3:23:2a:03:c4:b8:52:99:52:32:14:
62:1a:1f:f5:3e:3e:04:c5:45:ae:6b:e3:ef:f6:d9:
08:b7:bc:f2:36:b2:ab:a3:3f:57:bb:ae:02:8e:a8:
77:49:80:ab:4a:c7:ff:23:1f:a8:bf:e3:98:4b:00:
25:66:9f:98:53:ce:e5:ee:75:a0:d8:4f:5f:59:dc:
5f:9e:84:a4:75:97:04:c5:bd:51:fc:34:1d:f4:78:
c4:02:24:c2:f4:31:58:c5:c6:dd:8b:16:b9:d9:b1:
5e:4e:b5:85:b3:37:6d:f4:5a:24:64:ae:e3:59:52:
c2:c6:7a:96:cb:c8:9f:f4:04:d6:f8:be:6e:89:c3:
24:00:86:8f:70:bb:ae:54:fb:9c:87:61:ab:fb:8f:
db:56:cb:97:43:da:50:0f:5f:bf:dd:a1:81:44:96:
04:33:f2:a4:ec:4c:25:e2:a4:99:b8:09:5e:4b:62:
d3:49:a7:22:30:da:84:b4:d6:07:db:da:b5:3c:65:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:D0:07:C3:A7:91:8F:57:43:46:42:DB:A3:04:19:BF:1D:36:0C
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:79:00:f6:35:74:0a:41:28:d0:96:f0:53:e3:b9:3e:04:11:
d0:3d:65:90:74:08:26:2c:55:ed:14:ea:a7:5b:4b:4f:17:49:
9a:bc:ee:58:ce:ab:87:3d:b5:5b:f9:93:93:e8:d3:dc:42:fd:
b1:cf:cc:07:fe:28:02:d1:15:4d:09:3b:e7:6b:7a:65:f1:7c:
b7:d2:2c:91:f1:b1:10:c5:00:ca:2d:df:aa:5e:fc:71:b6:8b:
89:70:8a:f9:79:5c:e2:a9:8e:20:75:80:11:77:04:6e:15:f6:
5f:10:17:9b:a8:a6:80:fd:7e:86:1d:18:1d:f7:93:91:bc:7c:
1c:23:e9:79:94:70:37:85:5e:42:9a:7e:74:3c:59:8e:c0:88:
a3:63:01:94:a5:68:a8:79:a4:3e:5a:24:4f:ed:8a:3a:8f:d9:
c9:5b:e1:bd:46:20:1b:ce:3f:40:cb:0c:f0:07:e5:9d:96:14:
04:7f:e0:31:11:c5:1d:84:86:7b:1d:5a:25:7a:23:55:14:63:
8c:5b:39:82:05:02:a3:d2:e3:71:18:1f:cb:06:65:72:62:7e:
c1:ab:bd:21:87:d3:0b:d4:a0:b0:e4:f3:55:80:c3:7b:1d:8f:
90:20:55:16:d3:15:a5:d5:6a:65:76:46:5e:8f:17:9b:29:d6:
1c:5c:23:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA7yq48+iU8izLrIjX9sR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjUwNTExMjAwMDIxWhcNMjUwNTEyMjAwMDIxWjAzMTEwLwYDVQQD
EygzNzY2ZDAwN2MzYTc5MThmNTc0MzQ2NDJkYmEzMDQxOWJmMWQzNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoSnmK5TZVzS4PYxxUmmYxUZu54p
lSi9BkDzM2OaL/b5kU406rwynj/6re8modW9rBcB6LqqnFr9JCCHaze98yMqA8S4
UplSMhRiGh/1Pj4ExUWua+Pv9tkIt7zyNrKroz9Xu64Cjqh3SYCrSsf/Ix+ov+OY
SwAlZp+YU87l7nWg2E9fWdxfnoSkdZcExb1R/DQd9HjEAiTC9DFYxcbdixa52bFe
TrWFszdt9FokZK7jWVLCxnqWy8if9ATW+L5uicMkAIaPcLuuVPuch2Gr+4/bVsuX
Q9pQD1+/3aGBRJYEM/Kk7Ewl4qSZuAleS2LTSaciMNqEtNYH29q1PGVGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdm0AfDp5GPV0NGQtujBBm/HTYMMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3kA9jV0
CkEo0JbwU+O5PgQR0D1lkHQIJixV7RTqp1tLTxdJmrzuWM6rhz21W/mTk+jT3EL9
sc/MB/4oAtEVTQk752t6ZfF8t9IskfGxEMUAyi3fql78cbaLiXCK+Xlc4qmOIHWA
EXcEbhX2XxAXm6imgP1+hh0YHfeTkbx8HCPpeZRwN4VeQpp+dDxZjsCIo2MBlKVo
qHmkPlokT+2KOo/ZyVvhvUYgG84/QMsM8AflnZYUBH/gMRHFHYSGex1aJXojVRRj
jFs5ggUCo9LjcRgfywZlcmJ+wau9IYfTC9SgsOTzVYDDex2PkCBVFtMVpdVqZXZG
Xo8XmynWHFwjug==
-----END CERTIFICATE-----
Generated at Mon May 12 03:59:16 2025 by rpki-client