Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: bl4X+y9lHIEjCa/imN9/C6ELnSXiBuuYLeTayFBKqbY=
Subject key identifier: 59:2D:2E:74:59:57:AC:3D:A1:83:82:58:E1:68:5F:29:FD:81:6C:34
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0197C793D3F9423CCCC8D29031AA24920C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 20:00:43 +0000
Manifest this update: Tue 01 Jul 2025 20:00:43 +0000
Manifest next update: Wed 02 Jul 2025 20:00:43 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: nJhOFRMqFEHhIkriUv8FmvsYt8oke1712lsV1tZ7wxI=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:93:d3:f9:42:3c:cc:c8:d2:90:31:aa:24:92:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Jul 1 20:00:43 2025 GMT
Not After : Jul 2 20:00:43 2025 GMT
Subject: CN=592d2e745957ac3da1838258e1685f29fd816c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:28:40:fc:25:43:b8:74:e5:ae:68:f5:35:
44:5a:0f:18:ba:69:4b:9c:08:b2:8b:ba:7a:9e:20:
05:0f:58:b2:9b:ad:54:29:be:4f:76:02:ac:b3:98:
03:f7:30:6b:3b:4e:66:a3:91:82:a9:9d:fe:45:76:
ee:dd:2c:33:c2:5d:07:fc:65:b6:ab:98:52:d1:9a:
c7:00:8f:cc:54:7e:af:aa:c6:e1:15:52:9b:b4:80:
93:31:14:6a:2a:19:56:b1:24:db:2d:65:a1:ca:45:
c7:9a:eb:2e:00:46:15:be:80:ea:e7:9a:c2:9d:74:
f5:bd:f8:c2:de:90:16:88:94:30:8c:3d:7d:9d:ef:
0d:54:03:48:90:71:77:10:cc:3c:e1:04:d5:89:6b:
23:ab:fb:c0:13:6f:7a:6d:6a:01:22:39:06:2a:93:
c8:f9:6e:8f:53:d3:65:2b:df:6d:2d:70:bc:1d:65:
ae:8e:2f:1a:4e:6c:a7:40:83:cf:09:22:01:97:e9:
96:72:02:cb:43:e8:f1:ec:5f:46:29:2b:c5:1a:9a:
60:9b:19:f9:16:f8:56:07:41:ce:f3:95:92:83:99:
bf:a9:4e:9b:1f:ca:d8:b6:77:52:77:3a:a2:9d:45:
bc:e9:fd:e0:db:27:f6:22:1f:46:ea:fc:1d:1c:52:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:2E:74:59:57:AC:3D:A1:83:82:58:E1:68:5F:29:FD:81:6C:34
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:03:cd:9f:35:7e:46:04:1e:c3:ce:28:08:13:77:4a:a1:60:
7e:36:89:95:6b:97:6f:96:b8:02:a9:d3:01:01:ee:dc:d5:ab:
84:8b:49:8d:00:0a:8e:1d:d4:aa:73:5a:77:c9:9b:5e:93:6b:
71:1f:25:5d:f2:c5:2b:85:97:b1:a9:b6:0a:84:ce:f0:10:18:
cc:3b:e0:e0:65:c8:48:e5:f0:61:c1:72:84:26:50:26:90:0a:
7f:32:35:57:8a:8f:7a:e8:91:b6:7e:7a:bb:5f:c2:e8:1d:67:
7a:a1:b5:26:a6:1d:85:a9:d2:0d:23:47:be:f4:fb:d5:b6:df:
0a:64:3e:c2:46:33:e0:be:5e:e1:ad:b5:0c:91:a9:80:8f:e2:
fe:40:a6:4e:73:9f:66:8c:3a:40:8e:60:df:c7:f3:ca:14:bf:
ad:ce:e3:52:a6:d4:60:d0:8d:db:a4:d6:10:68:21:e3:6b:3a:
43:d6:f5:76:11:68:bd:bd:9b:26:47:86:b3:a2:f6:89:cc:e5:
9d:e6:0d:b3:09:7d:91:f4:de:e0:70:4f:fe:b6:33:9d:04:7b:
8d:d9:4b:b3:04:40:08:ae:10:6e:32:2c:b3:37:72:7e:82:8e:
5b:1b:75:20:8f:bc:18:59:93:20:8e:b4:62:b1:36:9c:ca:49:
43:30:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:33:30 2025 by rpki-client