Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: kjdBAg4tukAjcKMFsIMWIWGDZviMZUCwajZ7k4jHftc=
Subject key identifier: 50:57:17:15:1F:01:9E:ED:25:07:DD:6C:0A:88:C9:71:4B:26:EE:07
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0198499C7A3DF697611E40B39014C1E5B3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 014E
Signing time: Sun 27 Jul 2025 02:00:48 +0000
Manifest this update: Sun 27 Jul 2025 02:00:48 +0000
Manifest next update: Mon 28 Jul 2025 02:00:48 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: jISSTn4Pz+NKnOgpR2g/OIfh4pIZVOvxJp/4BXbEB3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:7a:3d:f6:97:61:1e:40:b3:90:14:c1:e5:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jul 27 02:00:48 2025 GMT
Not After : Jul 28 02:00:48 2025 GMT
Subject: CN=505717151f019eed2507dd6c0a88c9714b26ee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:38:3e:f8:4f:52:74:26:45:04:54:11:ca:
26:ba:59:a4:0b:8d:49:b8:e4:4b:22:fe:cb:f1:3c:
b3:61:b2:63:46:c6:3c:76:b3:2d:74:1d:a5:55:3b:
f7:5f:f7:94:81:d6:03:ca:3c:ac:e2:65:83:ad:e9:
c1:21:66:b5:0e:52:43:b6:28:a2:a5:1f:a8:e8:25:
9b:8b:67:bc:46:f0:c1:19:4b:c2:6d:80:16:c7:e1:
1e:72:80:4d:72:22:36:6a:a7:7d:37:77:13:3e:fa:
eb:5c:a6:1c:db:d3:03:1c:b2:fa:bd:00:1d:f0:c3:
d3:0b:95:68:48:62:7c:05:dc:55:17:3c:ce:f2:56:
11:6f:5d:b0:fc:e0:1e:a1:77:a7:2f:65:82:39:3d:
d9:45:c1:b8:b3:72:bc:76:08:b3:06:74:c2:bd:b9:
9e:4f:76:48:48:5e:e2:b6:ea:db:11:b0:b2:9a:21:
fc:23:98:31:14:f5:26:04:bf:2f:ec:ee:40:a5:38:
79:62:53:48:98:33:e6:8f:15:2e:08:26:39:b7:ad:
43:12:19:c0:b2:c3:f9:dd:9d:33:3a:a3:33:ee:0a:
de:9f:f1:06:12:b9:80:f5:bf:ba:eb:80:dd:6c:23:
6f:79:b9:52:fe:73:d6:9b:a6:b1:16:59:d4:d9:32:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:17:15:1F:01:9E:ED:25:07:DD:6C:0A:88:C9:71:4B:26:EE:07
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:28:91:25:15:ec:f8:81:ae:3f:e2:f5:b7:eb:f6:74:52:
58:e8:57:cf:b5:4e:d9:cc:37:de:1d:0f:fb:c5:7e:b9:51:e9:
73:e7:28:62:94:7e:84:06:85:fc:e2:9a:7c:39:c9:76:80:70:
41:6c:1e:9b:f9:20:d2:93:aa:02:e0:1d:8a:86:ab:c0:1e:a1:
4b:79:7c:39:b7:28:75:60:47:cb:bb:6f:a9:1b:f2:64:e6:c8:
de:2a:23:66:e8:1e:8e:bc:3d:0b:3c:bb:e9:ae:a9:91:b0:7a:
a4:f6:5f:e4:79:e8:f2:c7:38:5c:fc:e7:9e:40:6a:28:aa:7e:
18:8e:29:57:d3:f1:3f:65:e9:11:c4:e0:85:b8:5c:3f:2e:fc:
72:39:bb:a2:26:f4:8d:8a:c3:f7:37:ee:05:a3:30:e9:bb:e5:
d1:6e:f6:0d:cc:f3:5c:95:34:4c:e4:92:db:1c:62:5b:9a:1d:
9f:00:63:a9:30:08:bd:c5:fe:5f:c4:42:93:71:59:04:34:2e:
b0:03:3c:d2:ef:e2:2e:c9:c0:58:f1:4e:6b:af:a2:17:c1:c5:
70:2b:b4:ef:37:15:d2:61:51:f5:d9:de:50:74:3c:81:0a:cd:
05:5b:3a:f6:07:a7:db:a8:56:e1:7c:63:d7:9f:b7:7c:ca:eb:
36:80:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:25 2025 by rpki-client