Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: EkXdpglEkfbdP/nZ5CbZFGdPSAUrwXG4tBOrncUQu20=
Subject key identifier: C5:4D:58:A9:B4:36:E9:50:8A:09:40:DE:E6:14:BD:2E:F5:30:B2:91
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 01974FD7EC09F646D80B2B64D340D8C29A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 14:00:40 +0000
Manifest this update: Sun 08 Jun 2025 14:00:40 +0000
Manifest next update: Mon 09 Jun 2025 14:00:40 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: Bv/4dg2UrHXBBoAO5AiZ2J41k0YmDttYHT/iLN0BJHs=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:ec:09:f6:46:d8:0b:2b:64:d3:40:d8:c2:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Jun 8 14:00:40 2025 GMT
Not After : Jun 9 14:00:40 2025 GMT
Subject: CN=c54d58a9b436e9508a0940dee614bd2ef530b291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:be:47:fb:f4:af:78:77:81:a2:ce:85:14:
ab:7a:39:47:f2:21:61:db:54:1c:ae:64:cf:94:44:
b6:a9:39:d6:d6:be:af:58:78:e0:a4:76:79:2b:88:
09:cb:66:8d:cd:de:d3:13:3b:a9:12:11:ce:08:bf:
5d:5d:5d:0b:b5:fe:12:87:50:b2:e1:9e:f6:70:21:
7e:b7:bd:2e:fb:0d:9b:33:bb:b7:5e:bf:7e:5f:3f:
e7:9c:66:a2:02:d6:88:83:c0:ec:93:f0:1c:de:11:
96:47:e8:04:a8:54:a5:e7:bd:6a:08:18:11:50:2d:
ba:93:3a:62:38:66:46:b8:64:91:c8:af:8e:2b:18:
f1:9f:0f:eb:5b:2e:31:a1:12:70:32:db:9e:80:d8:
45:f2:1e:ac:b0:5b:aa:fc:7b:fb:f1:54:86:fb:64:
7b:62:5a:ee:a2:fa:c0:9a:82:1b:43:02:86:1d:9e:
c0:89:2e:32:b5:53:ca:6d:5d:98:e7:b1:d7:c6:8d:
41:79:a6:af:78:87:75:53:d0:f9:2b:3f:53:ff:17:
aa:4a:89:49:4f:55:de:f3:4a:52:43:f8:83:08:44:
94:73:8c:df:41:80:65:55:10:e1:bb:6b:3c:72:08:
5d:b8:07:e6:c5:a6:a8:16:72:4a:12:c6:31:1b:c6:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:58:A9:B4:36:E9:50:8A:09:40:DE:E6:14:BD:2E:F5:30:B2:91
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:78:53:60:ff:65:02:e3:21:e9:0c:09:f0:54:4c:ff:2a:
98:ec:5f:89:b6:2a:6f:3a:44:44:1f:ac:fd:51:fe:ab:5a:4d:
33:a2:4c:16:a7:e1:3d:fb:29:ac:0b:d6:94:19:57:5c:34:5a:
70:d3:c3:fc:25:27:9c:2a:e9:34:d6:db:de:d0:f1:0c:09:00:
49:c8:70:ae:91:f3:3e:69:b9:ed:84:ee:6b:d2:2d:12:6c:40:
38:59:f5:75:cc:ec:db:29:4b:96:eb:9a:70:58:4e:2f:03:4e:
ae:ff:df:9e:c9:0d:76:40:c4:e7:9a:13:0e:e8:48:d5:ab:37:
b6:e1:8a:2a:a4:26:54:28:d4:fe:99:79:df:12:1f:d6:76:b0:
83:32:1f:d8:b3:c1:eb:c7:15:8d:a9:ff:70:d6:de:61:ce:e0:
52:96:5b:e1:76:67:4e:45:a6:a8:0f:7e:59:6a:70:a7:9e:a9:
5e:fd:29:6d:da:5c:4c:8d:f7:59:30:b6:04:0d:ad:14:80:5f:
d4:7d:24:f7:b4:76:16:58:4f:97:6e:fd:ad:7d:c9:15:f3:a2:
f3:3f:5f:ab:2d:47:c6:84:b4:e4:60:6e:96:45:0e:43:6e:b9:
9f:b8:4a:fd:4c:4d:c3:7d:92:67:97:01:a7:e2:65:a6:8b:fd:
e8:c5:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:50 2025 by rpki-client