Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: XVjXhi8lPngoqj0WSswpWPcnu6he7JbOEKguthaRK3Y=
Subject key identifier: 3C:38:6C:0C:AF:44:06:18:DF:C8:47:33:CD:28:67:A2:8A:86:FF:46
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019748C36795BE6AD6FF6879F9FB81FD1448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: C9
Signing time: Sat 07 Jun 2025 05:00:54 +0000
Manifest this update: Sat 07 Jun 2025 05:00:54 +0000
Manifest next update: Sun 08 Jun 2025 05:00:54 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: Euy58VqNOy5Cwq287YhQK54mUBenJYQzjnki+Nuthdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:67:95:be:6a:d6:ff:68:79:f9:fb:81:fd:14:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jun 7 05:00:54 2025 GMT
Not After : Jun 8 05:00:54 2025 GMT
Subject: CN=3c386c0caf440618dfc84733cd2867a28a86ff46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:50:9c:39:2a:b7:b2:35:af:ad:d1:25:cb:
ba:c0:bb:c3:1e:b1:c9:71:12:78:3f:52:0f:61:c5:
15:97:31:22:68:70:bc:6b:fe:b0:f3:5a:3e:bc:69:
7b:cb:ff:0b:0b:65:a4:29:f3:bd:d8:0c:d2:16:23:
4f:14:b6:9a:50:ac:f1:86:8e:c4:74:35:e0:7d:24:
08:13:58:72:f6:d8:bc:78:7b:39:e0:b0:4f:49:99:
e3:32:47:18:bf:47:27:4a:fd:4d:4b:dd:b2:c8:0f:
48:88:01:65:a9:a6:e0:36:ac:0e:be:ad:ff:c3:4c:
0a:46:39:b6:18:ef:f5:38:33:a4:ad:f3:fc:7d:c7:
58:db:49:59:91:77:b9:50:f2:e4:00:a6:cb:4b:fc:
48:c3:16:bc:12:44:76:9f:fb:24:d2:e4:08:e1:56:
e8:2a:c6:33:fd:c6:90:76:39:1b:1e:d3:d2:cd:71:
d7:22:89:98:9a:fe:3c:3c:f9:dd:6f:e7:68:9d:35:
ae:e5:08:92:80:27:5c:71:89:3c:fc:8e:ce:79:5b:
f4:89:d6:4d:01:49:1f:ea:4c:9a:2f:7d:7d:17:2e:
97:33:72:77:2b:f6:85:2e:80:c0:13:35:28:46:37:
9c:30:9d:90:9e:2b:1f:cc:4e:59:5c:38:34:22:cf:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:6C:0C:AF:44:06:18:DF:C8:47:33:CD:28:67:A2:8A:86:FF:46
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:d7:66:09:20:31:13:d2:a2:d5:90:61:0e:6a:1f:5a:a0:
35:8a:52:69:c9:22:ad:e4:06:ba:3a:c8:dc:d6:bf:9f:28:bd:
0d:cf:a6:65:95:38:27:cc:25:e9:8b:dd:e7:18:6c:ad:43:34:
62:d7:b8:ec:f3:3b:c1:58:e9:20:06:a5:bb:3c:71:7f:25:5e:
97:2f:68:b2:20:38:c9:24:20:9a:9c:2e:98:39:94:46:13:d8:
39:65:1a:42:03:27:02:22:09:0e:07:a8:1f:9a:fe:33:c4:84:
d1:f2:fb:a5:53:0a:15:24:1a:cc:4d:7c:a3:68:f3:92:3d:c7:
4c:d5:08:05:46:de:6b:a6:98:59:25:33:31:79:35:9c:53:3c:
75:79:bf:61:b7:19:4b:78:4c:9d:7e:53:f5:e2:55:01:56:d6:
8d:0f:4d:48:db:4c:1e:0f:8f:4c:76:14:a8:79:6d:1a:93:98:
d3:d0:c4:e8:05:f9:c1:b5:5b:17:ee:c6:28:87:8d:b2:af:3f:
36:0e:80:4a:2a:bf:d7:90:a1:0c:12:26:83:3e:82:c4:f2:23:
0a:e3:9b:ed:91:54:21:94:90:4f:0b:db:49:7f:27:65:d9:b0:
82:be:e9:b4:ed:7c:b4:3c:3f:e0:ed:6d:dc:34:f2:e4:75:37:
91:d8:a6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw2eVvmrW/2h5+fuB/RRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx
ZWJjMDAwHhcNMjUwNjA3MDUwMDU0WhcNMjUwNjA4MDUwMDU0WjAzMTEwLwYDVQQD
EygzYzM4NmMwY2FmNDQwNjE4ZGZjODQ3MzNjZDI4NjdhMjhhODZmZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TZQnDkqt7I1r63RJcu6wLvDHrHJ
cRJ4P1IPYcUVlzEiaHC8a/6w81o+vGl7y/8LC2WkKfO92AzSFiNPFLaaUKzxho7E
dDXgfSQIE1hy9ti8eHs54LBPSZnjMkcYv0cnSv1NS92yyA9IiAFlqabgNqwOvq3/
w0wKRjm2GO/1ODOkrfP8fcdY20lZkXe5UPLkAKbLS/xIwxa8EkR2n/sk0uQI4Vbo
KsYz/caQdjkbHtPSzXHXIomYmv48PPndb+donTWu5QiSgCdccYk8/I7OeVv0idZN
AUkf6kyaL319Fy6XM3J3K/aFLoDAEzUoRjecMJ2QnisfzE5ZXDg0Is8qbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw4bAyvRAYY38hHM80oZ6KKhv9GMB8GA1UdIwQY
MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt
NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0
LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItHXZgkg
MRPSotWQYQ5qH1qgNYpSackireQGujrI3Na/nyi9Dc+mZZU4J8wl6Yvd5xhsrUM0
Yte47PM7wVjpIAaluzxxfyVely9osiA4ySQgmpwumDmURhPYOWUaQgMnAiIJDgeo
H5r+M8SE0fL7pVMKFSQazE18o2jzkj3HTNUIBUbea6aYWSUzMXk1nFM8dXm/YbcZ
S3hMnX5T9eJVAVbWjQ9NSNtMHg+PTHYUqHltGpOY09DE6AX5wbVbF+7GKIeNsq8/
Ng6ASiq/15ChDBImgz6CxPIjCuOb7ZFUIZSQTwvbSX8nZdmwgr7ptO18tDw/4O1t
3DTy5HU3kdimMg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:33 2025 by rpki-client