Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: uWDw/z0H/uVOLaBkdQHT+vosecWh0aLrMfs23Br6oGE=
Subject key identifier: 73:3F:CB:B3:99:B8:39:3C:38:4F:87:F9:24:DD:DF:B0:9D:24:E6:BD
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019A24AEFBBD7BC36F8F23A727647346DAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0244
Signing time: Mon 27 Oct 2025 08:00:38 +0000
Manifest this update: Mon 27 Oct 2025 08:00:38 +0000
Manifest next update: Tue 28 Oct 2025 08:00:38 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: Ty2TPo2hg+CaQmko86hC9mCWiWXtXnHYB7ZK9sIW9qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:fb:bd:7b:c3:6f:8f:23:a7:27:64:73:46:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Oct 27 08:00:38 2025 GMT
Not After : Oct 28 08:00:38 2025 GMT
Subject: CN=733fcbb399b8393c384f87f924dddfb09d24e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:ee:d9:48:f3:42:24:fa:78:ee:2b:33:fc:
ac:30:02:34:5d:eb:16:88:a1:0c:98:4a:86:73:20:
67:67:2e:3e:9e:77:bb:a5:66:31:75:01:a4:09:2e:
a4:86:cb:cd:0d:70:96:a2:77:a1:3d:b0:f7:ce:74:
0c:af:f0:43:aa:01:27:9a:c5:cf:b1:b6:7a:80:fe:
b1:8a:f7:24:67:63:bc:b2:12:89:e6:a0:2a:cd:f3:
f7:99:de:50:22:b5:86:44:e0:37:c2:c9:f1:b3:a7:
d1:db:a2:b3:43:48:fe:5d:8d:a1:45:72:e9:9c:21:
f7:46:85:c8:5c:5c:8f:22:65:80:53:26:4b:8c:87:
22:6b:fd:75:0b:79:4f:fe:f5:d5:d5:1e:18:e1:47:
ab:f7:c7:f8:e1:13:17:b1:36:24:86:a4:1a:e7:48:
75:4f:01:84:a3:e8:6e:3c:2b:ef:70:a1:c3:dd:58:
00:32:b2:ab:2f:ba:e2:9c:94:6f:ea:01:d8:02:17:
85:9a:f1:a5:b1:92:4f:5e:d4:af:51:b4:d2:af:b5:
d8:04:11:30:c5:ae:4b:a6:75:5f:b1:bf:49:ec:38:
a1:8a:01:bc:d3:9b:b0:3b:bf:30:1b:4b:86:f1:30:
12:8c:49:48:a9:64:c8:a0:f5:84:da:04:31:63:d9:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:CB:B3:99:B8:39:3C:38:4F:87:F9:24:DD:DF:B0:9D:24:E6:BD
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:88:d7:18:66:6e:a8:64:d8:f1:39:3e:ca:cf:91:9d:38:82:
89:96:f2:60:00:95:11:94:df:26:f7:c5:cb:32:ea:8e:1c:cc:
b9:ae:89:ef:3c:08:2e:db:a7:14:b7:b4:e9:42:83:4d:43:7b:
5b:15:9c:b4:c7:0e:e7:ea:fb:f0:0c:6a:20:1e:22:6f:dc:eb:
1e:24:8d:d7:18:79:1e:1c:70:72:dd:81:06:7e:c4:ad:9d:3b:
01:53:73:b5:ee:b1:20:b8:58:66:e6:f9:fa:58:30:97:fd:fb:
e0:32:86:26:0e:52:92:38:f7:0c:62:a9:fb:ba:15:00:3c:91:
0c:69:39:9f:24:5f:56:2b:ef:8a:19:22:0b:70:a0:13:2b:f0:
71:36:97:0b:ed:ef:fb:2e:b9:14:84:98:bb:c1:f7:01:37:50:
75:bf:de:39:ab:bc:f8:ff:fa:31:93:fb:22:2d:59:f8:1b:0f:
2d:70:86:f6:77:ae:95:ef:0b:57:df:c5:b1:f2:17:cb:92:1a:
38:08:29:33:06:56:db:cb:32:b1:e1:24:7b:de:ab:36:2e:d9:
9a:7f:b3:20:3d:ee:5b:d4:73:40:1c:78:0e:ea:63:03:32:af:
60:50:17:e7:f5:9a:b1:b1:2c:80:57:58:05:b8:78:9a:ea:80:
d2:74:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:53:18 2025 by rpki-client