Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: 5mpPhsUn2HuUV1zGtRvax/v53dlij8eG4y06S+IYoUM=
Subject key identifier: 01:4D:E6:7B:AA:61:57:CA:1B:F0:6E:B7:25:4F:D0:10:FE:16:24:F8
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 0199353786DF1C88D471B3D8BA3D4990E59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 01C8
Signing time: Wed 10 Sep 2025 20:00:55 +0000
Manifest this update: Wed 10 Sep 2025 20:00:55 +0000
Manifest next update: Thu 11 Sep 2025 20:00:55 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: KS5qMFcS/guxoBB0NqNlh0ytGDXmeIFSyFh5cL7HLYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:86:df:1c:88:d4:71:b3:d8:ba:3d:49:90:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Sep 10 20:00:55 2025 GMT
Not After : Sep 11 20:00:55 2025 GMT
Subject: CN=014de67baa6157ca1bf06eb7254fd010fe1624f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:6a:5d:4b:c5:4b:45:a6:3a:d8:6d:4a:f6:
bc:5a:49:be:05:1f:bc:f9:0f:b7:15:15:dc:68:7d:
e5:3d:bd:01:97:36:3f:c7:d2:2a:bc:9d:8d:94:58:
2e:f9:7c:da:2a:36:04:22:6b:c5:fa:18:ca:0b:d2:
2f:f6:2c:19:15:f1:d7:b6:f3:08:42:fb:6a:52:ae:
18:8f:9e:9e:76:95:19:30:67:a9:c8:0b:af:2d:00:
bd:d0:3e:69:2c:86:8f:9e:98:cf:d8:fb:1a:2a:41:
0b:b0:c7:db:5d:49:68:d1:72:4b:10:07:79:23:ee:
c6:69:b8:9d:78:1e:06:2b:2f:e4:70:23:65:03:ba:
26:bb:6f:88:65:3d:27:8d:ed:2d:8f:02:7a:52:b2:
17:25:77:f2:9c:04:9c:d5:cd:a3:c0:0e:7a:f1:e0:
e9:6c:7c:da:e1:c8:52:cf:01:da:89:93:22:e8:87:
35:39:8b:e5:36:13:78:5f:f2:30:fa:41:ed:d8:24:
1f:42:63:e4:ce:2b:83:6f:8c:80:76:97:0f:51:ab:
5c:61:b3:64:2b:83:46:ac:0d:2a:92:59:4f:20:45:
a9:ed:06:0d:ff:d6:93:ac:0d:0a:2c:fc:65:be:3b:
94:14:97:a8:6d:d8:4e:e9:a7:c2:93:ee:21:d5:9c:
fd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:E6:7B:AA:61:57:CA:1B:F0:6E:B7:25:4F:D0:10:FE:16:24:F8
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:eb:c2:3b:e8:3e:b5:74:51:68:a8:40:b4:c1:ae:6c:5a:e8:
71:f8:2e:1f:a6:ff:fc:71:b4:5d:75:0a:ae:f9:e3:b0:48:80:
18:62:ba:e9:b4:07:cd:be:6f:df:08:a4:18:ac:0c:ee:c9:5f:
73:67:93:6d:8f:a4:67:3c:49:aa:3c:91:73:30:d4:c7:d7:21:
d5:fa:ee:1b:69:0a:be:7a:0b:3b:e0:a3:9d:ef:da:14:89:d5:
dc:52:81:a9:e2:93:0c:fa:f6:09:70:43:d3:ad:a9:45:4d:ca:
e6:a8:f5:b8:17:ae:8c:38:1b:2c:94:e9:e4:7e:01:34:db:fd:
aa:3a:05:7f:34:79:b5:b5:74:72:57:e1:de:bf:f0:19:16:ed:
0d:99:9a:3d:85:ca:f5:0a:7c:ba:dc:54:b4:52:e3:25:8f:75:
21:7b:6f:4f:2f:58:4e:2c:d5:98:40:78:05:1b:a6:a0:a5:7d:
92:1a:d4:ef:80:63:fb:7d:d7:fd:7e:f8:3b:1c:88:7c:31:64:
82:16:7a:68:d8:d2:7b:e2:90:7f:31:0e:86:8a:5f:ea:7d:9a:
04:ad:4c:d4:98:3a:1d:3b:a1:04:bc:6a:0f:71:e6:9a:7e:a2:
8b:dd:d9:e6:b4:a4:0b:74:9a:a4:b3:5f:a6:07:88:14:74:b5:
12:4a:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 05:19:01 2025 by rpki-client