Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: rjxeDGQ59g9mKRW0E/mH15hjFK3VqKIiAqnFv7DF+Xc=
Subject key identifier: 00:07:21:9E:D1:62:ED:D6:9E:FF:C7:F1:30:E7:17:59:43:C7:33:AC
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019645567A1EC81DC4D742975F89DEC14D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 20:00:17 +0000
Manifest this update: Thu 17 Apr 2025 20:00:17 +0000
Manifest next update: Fri 18 Apr 2025 20:00:17 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: FK20A0cU+WzH/ZszzA8ALTbxPFH0btFE41Z4aHgiajo=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:7a:1e:c8:1d:c4:d7:42:97:5f:89:de:c1:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Apr 17 20:00:17 2025 GMT
Not After : Apr 18 20:00:17 2025 GMT
Subject: CN=0007219ed162edd69effc7f130e7175943c733ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:29:88:b0:f7:37:96:eb:e9:af:7c:07:4b:
95:ca:b6:2a:7f:2d:82:48:9b:2e:83:c1:93:aa:97:
16:d3:9e:70:68:ba:21:45:3c:24:63:26:ff:b7:62:
e9:b6:71:29:fa:34:9c:2a:d8:22:a2:34:9d:10:bf:
15:c0:cc:3f:6b:91:8e:47:0b:5e:28:a3:6c:83:26:
88:50:f2:27:3a:9e:32:c2:c3:ef:25:b4:3a:d3:24:
f5:ab:56:2e:a5:3e:87:c6:e0:bc:09:ae:b2:6e:10:
23:11:42:52:b4:b2:4f:ba:36:45:8b:c0:5b:55:97:
32:d7:b4:fe:ed:85:e7:c1:8a:ad:8e:78:ed:b0:94:
a5:1d:84:42:e5:61:89:69:36:d1:c3:0c:25:d1:21:
61:e3:99:eb:4e:1f:4b:1d:db:4a:91:91:02:c5:85:
41:aa:04:18:ca:80:b8:c2:52:4a:79:fe:9c:61:55:
e6:7c:fe:f8:15:40:d3:68:cd:71:5b:d8:50:72:dd:
d2:94:ab:d2:ef:d8:61:11:22:8f:e2:f9:e2:e9:e2:
07:7f:01:db:8c:50:0d:09:f1:e7:ff:31:24:0d:7f:
7e:65:36:75:59:d7:46:c5:1d:6b:f8:81:a9:77:dd:
a4:c4:63:b1:ca:e0:1a:e9:03:61:dc:c2:ea:ab:24:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:21:9E:D1:62:ED:D6:9E:FF:C7:F1:30:E7:17:59:43:C7:33:AC
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fe:37:af:ac:e5:33:3e:74:84:25:ff:d4:35:c9:fa:2b:e5:
5d:7c:be:5f:a1:f3:75:74:b5:97:41:29:2e:c0:7d:35:99:f2:
6c:89:7b:87:d7:78:b8:ed:54:b8:e5:4f:f8:02:e7:b8:c8:62:
00:2d:04:69:8a:1a:2c:2f:b6:cd:5b:6a:1b:3f:d6:82:90:bf:
83:60:08:62:3e:2a:9f:9f:73:83:bf:75:86:c4:8b:bf:4d:c1:
0a:b0:c4:5d:0c:b0:4a:a5:cc:42:40:b0:7b:24:54:25:23:1a:
5f:f7:b7:d7:5d:4b:fc:e1:51:95:fc:d1:12:1e:85:4e:6f:84:
5e:75:0b:4e:49:58:6d:aa:0a:ea:f6:3c:71:bb:66:3a:41:5b:
20:0b:17:10:bb:87:e0:9c:2d:78:d4:63:7a:67:8f:e4:cc:be:
31:05:10:9f:c4:d7:ee:4e:8d:a6:06:39:3b:56:f2:e3:ec:8a:
8a:f3:54:ed:16:81:9a:51:f7:56:f8:8a:c2:7d:48:46:6b:23:
c4:c7:49:72:9f:91:f3:50:ca:8c:9e:2f:22:ce:51:c2:02:51:
35:1c:55:89:b8:e6:e8:fc:46:b1:ba:71:8c:6a:68:ef:83:1d:
28:53:b1:91:65:64:77:ce:e6:12:f1:b2:88:97:7a:2e:2a:fe:
cc:20:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:07 2025 by rpki-client