Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: v8AS+tC4qplmeiDgoR4iJoOkDakjpgIvggjJ8vMjmDc=
Subject key identifier: 2D:B6:26:4B:CB:CE:CF:84:05:7B:F5:70:F4:83:E0:E0:80:49:15:82
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0198D5F15AC27A0C56488E0E81B52313435F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: 0OPTRVIDlxyfyerYk5UVOnceN02EhBpzXyxgzfyog2o=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5a:c2:7a:0c:56:48:8e:0e:81:b5:23:13:43:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=2db6264bcbcecf84057bf570f483e0e080491582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:ba:79:ec:95:94:e1:ea:76:a3:03:71:6c:
15:25:91:32:bb:5c:72:9b:e0:7d:ba:87:11:fb:b7:
4a:cc:4f:41:38:d7:32:22:ba:ea:44:91:e3:78:c5:
64:db:2e:36:3a:5a:8f:29:67:ac:2c:06:f0:5b:11:
63:89:b9:4e:0a:ac:0d:9e:9e:e3:b5:c7:e8:8a:89:
ee:5c:fe:26:0b:e4:df:3e:54:8a:d4:1e:fd:3b:4b:
d0:2a:13:94:2c:6f:f0:8a:f3:8b:35:e1:89:e8:e1:
43:a6:89:34:18:d6:c4:06:a9:28:69:3b:fe:82:ce:
5b:74:4f:5e:1b:1f:23:ce:a5:60:6c:4e:39:eb:a9:
47:0b:f4:26:44:05:84:af:cf:93:66:18:15:24:41:
18:e4:1d:6a:68:4f:12:54:24:64:33:59:df:2a:d2:
5f:49:4f:7a:ae:86:e3:36:99:08:cb:21:bb:0b:17:
88:fd:99:a8:6c:64:62:ab:e2:67:e8:44:9f:7b:cb:
b7:56:0a:1e:bd:b5:8c:87:37:84:3f:88:b5:c5:53:
c3:0e:13:c6:15:92:94:de:b8:39:32:7a:d2:8f:27:
a7:1c:20:f6:b6:64:84:4d:72:08:3b:ff:8e:be:79:
74:08:47:11:c0:1a:3b:0f:87:0f:e6:d1:d3:7d:4c:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:26:4B:CB:CE:CF:84:05:7B:F5:70:F4:83:E0:E0:80:49:15:82
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:8f:ee:59:b4:6c:0c:71:79:a6:7a:2b:d0:be:91:2e:4c:
c2:74:83:62:be:b5:b7:fb:0d:23:02:fc:79:e8:32:df:a8:87:
17:63:2d:06:7b:0b:26:ce:ab:e9:19:1c:2c:54:46:1e:8b:be:
f8:be:3d:4a:2a:c5:28:41:85:03:53:54:f0:e1:bb:ae:8b:16:
8d:69:82:28:2f:fa:65:e7:7d:75:14:51:3f:aa:7a:45:a1:ef:
44:f1:0e:1d:0f:aa:26:c1:a3:fe:5e:cf:22:8e:38:af:45:0b:
d7:03:76:9f:16:ae:73:fe:61:44:46:60:87:0c:a9:ee:af:1d:
8b:db:30:21:c7:c0:9c:1a:e8:95:6d:da:97:88:4a:8e:33:11:
d9:ef:09:c8:2d:bd:8b:9f:38:d9:46:a6:0c:62:80:71:8c:3d:
fb:9f:87:f2:a8:19:7b:dc:de:35:2d:c8:26:4c:b4:00:3d:7a:
6f:46:48:d9:1f:e5:55:e0:0e:bd:5a:aa:73:65:cf:6a:bd:00:
ba:09:25:16:1b:ed:d1:0a:57:d7:3c:64:7e:90:70:20:0d:e3:
8b:6c:4f:5b:05:34:8a:3c:f6:6b:a7:be:ea:83:08:63:34:c1:
5b:c8:c1:d8:e5:9d:10:25:75:53:46:d0:a2:4e:2b:e1:cb:9d:
58:53:7b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VrCegxWSI4OgbUjE0NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjUwODIzMDgwMDIxWhcNMjUwODI0MDgwMDIxWjAzMTEwLwYDVQQD
EygyZGI2MjY0YmNiY2VjZjg0MDU3YmY1NzBmNDgzZTBlMDgwNDkxNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIu6eeyVlOHqdqMDcWwVJZEyu1xy
m+B9uocR+7dKzE9BONcyIrrqRJHjeMVk2y42OlqPKWesLAbwWxFjiblOCqwNnp7j
tcfoionuXP4mC+TfPlSK1B79O0vQKhOULG/wivOLNeGJ6OFDpok0GNbEBqkoaTv+
gs5bdE9eGx8jzqVgbE4566lHC/QmRAWEr8+TZhgVJEEY5B1qaE8SVCRkM1nfKtJf
SU96robjNpkIyyG7CxeI/ZmobGRiq+Jn6ESfe8u3VgoevbWMhzeEP4i1xVPDDhPG
FZKU3rg5MnrSjyenHCD2tmSETXIIO/+Ovnl0CEcRwBo7D4cP5tHTfUyEeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC22JkvLzs+EBXv1cPSD4OCASRWCMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhuP7lm0
bAxxeaZ6K9C+kS5MwnSDYr61t/sNIwL8eegy36iHF2MtBnsLJs6r6RkcLFRGHou+
+L49SirFKEGFA1NU8OG7rosWjWmCKC/6Zed9dRRRP6p6RaHvRPEOHQ+qJsGj/l7P
Io44r0UL1wN2nxauc/5hREZghwyp7q8di9swIcfAnBrolW3al4hKjjMR2e8JyC29
i5842UamDGKAcYw9+5+H8qgZe9zeNS3IJky0AD16b0ZI2R/lVeAOvVqqc2XPar0A
ugklFhvt0QpX1zxkfpBwIA3ji2xPWwU0ijz2a6e+6oMIYzTBW8jB2OWdECV1U0bQ
ok4r4cudWFN7/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:41 2025 by rpki-client