Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: Ru8OH3GnVabaJrmxHz+ct48OjvGvbAUHNZrd6SfHtJs=
Subject key identifier: CD:84:55:7F:56:FE:52:C6:40:88:F2:2B:BB:D3:50:7C:AF:0D:49:41
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019A714A1D54828089450820C714E91F50BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: oNe1Ksx6fcV5iH1wLh2pLoMm38axDHGPJSi+OX/ulhE=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1d:54:82:80:89:45:08:20:c7:14:e9:1f:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=cd84557f56fe52c64088f22bbbd3507caf0d4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:bb:b6:1b:29:bf:13:66:21:57:09:fe:c9:
f4:95:38:31:89:85:c4:56:2d:bf:d9:48:d6:c8:7b:
23:bf:3f:9a:02:08:76:71:3a:e3:f1:56:be:97:65:
01:2c:6e:e1:45:c2:d9:b6:70:18:a6:ed:5a:15:bb:
ef:18:c0:78:4c:95:bd:13:ec:e9:d6:4f:4b:4a:5f:
7b:9e:fe:00:1d:b5:7f:45:1e:c6:b7:85:5b:ea:35:
10:f3:c2:67:20:94:53:3a:14:c0:02:ea:9a:56:f6:
6a:80:28:8e:79:aa:8f:98:f8:26:4e:f3:a6:fa:95:
28:f5:c5:20:b8:67:1b:4e:7e:af:5b:da:86:14:4f:
d0:ea:7e:39:08:36:79:cc:95:e0:40:45:5d:cd:c0:
94:07:dc:bf:fb:d7:74:b5:12:be:86:6f:b8:37:ed:
25:c3:6f:31:a8:ef:42:b4:78:46:bc:da:1f:fd:fe:
01:48:c3:d5:99:91:f9:43:35:d8:43:48:45:24:c1:
16:4d:e2:ef:85:ac:1b:85:93:9f:24:1f:07:64:2e:
a1:63:74:ef:c9:5f:26:bb:8d:be:54:4c:19:5f:89:
99:48:9c:d1:27:92:83:b4:ba:cb:99:20:87:8c:da:
db:ec:12:35:96:10:19:6b:ce:07:55:a7:f9:39:4d:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:55:7F:56:FE:52:C6:40:88:F2:2B:BB:D3:50:7C:AF:0D:49:41
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:be:28:84:c7:d6:03:c9:d9:a2:69:4d:54:84:3c:43:83:
9e:3f:94:9b:4e:26:2c:48:92:ce:d6:5e:9e:c6:65:b5:34:5c:
16:98:c5:1c:0b:a1:87:60:9d:02:82:d1:9f:3b:f2:45:24:47:
34:d3:d5:fb:66:de:82:fb:a8:fe:54:b8:37:ed:6d:e8:f3:38:
79:b2:01:34:9a:40:ab:13:97:f9:d2:fe:9b:0f:bc:2d:fc:14:
f3:4b:bd:6e:63:98:7f:12:4f:e6:02:25:bb:70:0e:6d:6c:9a:
a8:1c:13:89:5a:a2:cd:da:cd:1d:31:c4:54:1d:6f:4f:b8:70:
15:de:79:19:43:c8:e0:0e:10:63:a4:52:9f:5f:0b:51:de:3b:
2e:91:a6:e9:7a:9b:a9:66:32:d2:91:f1:47:57:1a:08:5e:46:
a5:7a:ac:bc:06:72:74:22:5f:52:e7:cf:cf:5f:f0:fd:0f:71:
9d:97:4c:46:9e:67:16:74:8c:8a:a3:da:e1:85:56:f7:1f:a9:
60:9d:54:79:e5:e8:9a:f8:7a:e2:a8:0f:38:6e:22:d4:b1:4b:
12:39:c9:bc:ed:ea:b2:cf:34:93:ec:21:65:1c:b0:a0:d5:d7:
33:e1:c5:b7:ce:51:eb:80:04:38:84:e3:ee:b2:2b:5a:6d:bb:
31:82:11:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSh1UgoCJRQggxxTpH1C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjUxMTExMDUwMTEzWhcNMjUxMTEyMDUwMTEzWjAzMTEwLwYDVQQD
EyhjZDg0NTU3ZjU2ZmU1MmM2NDA4OGYyMmJiYmQzNTA3Y2FmMGQ0OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CW7thspvxNmIVcJ/sn0lTgxiYXE
Vi2/2UjWyHsjvz+aAgh2cTrj8Va+l2UBLG7hRcLZtnAYpu1aFbvvGMB4TJW9E+zp
1k9LSl97nv4AHbV/RR7Gt4Vb6jUQ88JnIJRTOhTAAuqaVvZqgCiOeaqPmPgmTvOm
+pUo9cUguGcbTn6vW9qGFE/Q6n45CDZ5zJXgQEVdzcCUB9y/+9d0tRK+hm+4N+0l
w28xqO9CtHhGvNof/f4BSMPVmZH5QzXYQ0hFJMEWTeLvhawbhZOfJB8HZC6hY3Tv
yV8mu42+VEwZX4mZSJzRJ5KDtLrLmSCHjNrb7BI1lhAZa84HVaf5OU0nkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2EVX9W/lLGQIjyK7vTUHyvDUlBMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/G+KITH
1gPJ2aJpTVSEPEODnj+Um04mLEiSztZensZltTRcFpjFHAuhh2CdAoLRnzvyRSRH
NNPV+2begvuo/lS4N+1t6PM4ebIBNJpAqxOX+dL+mw+8LfwU80u9bmOYfxJP5gIl
u3AObWyaqBwTiVqizdrNHTHEVB1vT7hwFd55GUPI4A4QY6RSn18LUd47LpGm6Xqb
qWYy0pHxR1caCF5GpXqsvAZydCJfUufPz1/w/Q9xnZdMRp5nFnSMiqPa4YVW9x+p
YJ1UeeXomvh64qgPOG4i1LFLEjnJvO3qss80k+whZRywoNXXM+HFt85R64AEOITj
7rIrWm27MYIR0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client