Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: +40SWAEyau1O9Az5ISFXmRReIJQv1bkBhWhIkrdBJL8=
Subject key identifier: 90:92:61:7D:A4:88:EF:F5:27:77:BA:D0:04:7E:60:B8:8A:BC:4A:17
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01976997E00B3AFAA95054DB130AFD491201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: DA
Signing time: Fri 13 Jun 2025 14:00:50 +0000
Manifest this update: Fri 13 Jun 2025 14:00:50 +0000
Manifest next update: Sat 14 Jun 2025 14:00:50 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: yw/FsfrzcpVkTmlmTAV2mW0ntg6iHM/PwsvqdLQRqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e0:0b:3a:fa:a9:50:54:db:13:0a:fd:49:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jun 13 14:00:50 2025 GMT
Not After : Jun 14 14:00:50 2025 GMT
Subject: CN=9092617da488eff52777bad0047e60b88abc4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:d1:f5:0d:34:8f:75:c8:d9:6b:e4:c6:f1:
17:79:43:9d:7a:03:b7:f1:b2:a7:5c:64:38:2a:35:
b4:c5:44:f9:fd:e1:1c:5d:62:95:16:98:b7:4a:5a:
b4:79:f3:fe:99:e0:1e:ad:f0:25:e1:d2:e2:0a:c5:
f7:73:fb:2b:7a:d5:af:34:4a:83:36:69:67:fd:05:
97:b1:d4:a0:e4:32:16:96:d7:1b:1c:d8:41:89:f7:
a6:e1:bb:a1:9d:8a:d0:10:0e:a7:98:54:39:6f:26:
50:16:68:43:73:79:37:4a:a3:0f:d2:db:a1:bb:f0:
cd:32:56:f8:28:84:24:a4:db:06:69:a2:36:11:dd:
61:6b:0e:4b:93:66:b8:e2:88:64:0b:fd:cb:83:09:
45:8c:ea:a4:97:58:4d:04:88:b1:b5:85:2e:9d:3d:
9d:51:52:21:24:48:88:c3:c3:c1:3d:87:52:84:1f:
0a:46:fb:0c:f2:de:e4:e0:3c:32:fa:3f:ca:a7:42:
34:17:37:e8:89:d6:a1:b0:b7:84:7b:55:65:59:8b:
25:76:b2:20:e5:cb:8f:69:7a:08:d8:2a:65:fc:ab:
45:90:16:17:23:4f:e5:f2:ca:10:1a:fd:d6:1a:c6:
d7:8b:ec:a0:7b:8a:d4:78:ee:78:8f:be:e9:30:2e:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:92:61:7D:A4:88:EF:F5:27:77:BA:D0:04:7E:60:B8:8A:BC:4A:17
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:71:12:4d:c3:83:ab:d8:f1:b5:13:67:a3:8d:e3:82:ee:72:
27:5d:4c:12:26:65:38:59:95:67:88:0a:82:9c:13:ec:b5:39:
d5:04:be:dc:fe:4b:72:5b:43:50:5f:0f:aa:96:5b:d3:81:b3:
eb:a9:17:db:01:e1:da:6b:7c:6e:90:70:71:f8:81:56:ea:78:
57:c1:19:82:57:55:0c:08:3f:5e:92:68:68:0d:3e:56:98:e5:
8a:1c:d9:b8:a2:a0:7f:99:c0:b5:0e:71:3a:67:65:88:37:90:
5c:e1:5b:7e:a4:dd:5e:0d:4b:ce:2c:4a:69:66:07:8c:b6:30:
37:24:7d:78:2a:d5:db:0c:c3:72:5a:6b:d1:d4:dc:aa:ff:de:
88:56:ee:59:b9:78:3b:3c:d2:50:e6:86:64:ba:08:14:61:6a:
b2:a4:18:9c:75:8b:af:c7:0f:8e:bb:f6:45:60:08:a2:93:88:
97:41:a9:59:d2:e6:9b:68:73:59:8d:2d:48:39:f3:bc:34:fa:
d3:d1:ad:6d:a7:07:10:57:58:77:1d:b1:57:13:04:17:4d:aa:
c5:66:52:f1:31:84:77:9f:68:64:0e:9d:fa:94:e2:79:9d:6c:
0f:46:6a:10:55:10:76:41:7f:b6:ee:bb:46:8a:d2:9e:41:ce:
ce:9e:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:00 2025 by rpki-client