Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: FuG9Y7X8BUgxASIkoCrAeNnzSOLS6bpSbRXAgPRxfkc=
Subject key identifier: B7:0E:56:99:3A:25:96:02:64:DA:17:0B:AF:E1:61:48:28:43:7D:FB
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01987FAFB60668A0DC6035593A129195DC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 016A
Signing time: Wed 06 Aug 2025 14:01:18 +0000
Manifest this update: Wed 06 Aug 2025 14:01:18 +0000
Manifest next update: Thu 07 Aug 2025 14:01:18 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: F0SfWV6yMQ2fjnEph7eG5q+M8lfgwhwCBCj5cZ8dEzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:b6:06:68:a0:dc:60:35:59:3a:12:91:95:dc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Aug 6 14:01:18 2025 GMT
Not After : Aug 7 14:01:18 2025 GMT
Subject: CN=b70e56993a25960264da170bafe1614828437dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:25:f7:0b:fd:a4:00:95:4b:50:af:84:fd:
f7:46:f1:ed:65:2b:b8:ee:02:38:7f:55:ec:6d:a4:
4b:88:65:ae:f7:c8:87:62:1f:11:26:bd:94:34:2d:
a7:ff:e7:14:27:8e:18:3b:b2:f8:8e:9d:8f:ce:34:
66:6f:88:2b:2f:17:88:ed:91:59:a9:f5:30:07:aa:
1f:c2:0f:da:53:09:f8:54:a5:73:14:80:c5:26:42:
f0:e9:19:1c:9d:90:62:25:16:3d:5b:72:98:6f:a2:
ec:fb:23:e4:fc:06:cd:52:7d:21:2d:18:0a:50:ea:
e7:02:cc:5d:da:47:40:35:bd:8f:7d:17:65:81:22:
d2:09:63:a9:e8:a6:83:97:08:8e:0b:ea:f7:0c:27:
7e:01:93:3d:34:9f:ce:b6:11:29:b8:aa:25:3b:8f:
ac:69:a3:6e:64:1f:41:37:1b:80:3b:f9:d6:6e:94:
13:05:a7:5f:54:0b:03:88:ba:0f:ab:85:32:e8:cd:
f1:b0:61:6a:3d:75:c2:0f:09:45:fc:8e:f5:0b:a1:
d6:b7:5a:eb:dd:05:f1:b4:5d:6a:42:de:3e:bc:17:
a7:5d:a7:c7:30:4c:ee:32:75:71:09:9e:47:23:90:
ad:62:e8:4c:e6:d3:4b:04:d0:4c:4e:03:5b:69:ae:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:56:99:3A:25:96:02:64:DA:17:0B:AF:E1:61:48:28:43:7D:FB
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:14:7f:cc:5a:35:52:b5:40:0c:52:61:d0:45:7e:60:c5:
f7:05:42:9d:cd:0c:88:d0:0f:37:c4:da:17:2c:30:47:36:1d:
c7:46:9a:dc:24:92:71:a5:30:68:f2:85:71:8b:fc:4d:f9:a1:
80:0a:80:4b:09:08:a1:5f:01:c5:fb:e4:6b:90:7a:71:e0:24:
88:d3:52:a9:9e:68:f3:e5:84:ed:da:7f:2c:81:49:d0:6f:ae:
25:30:30:a7:c0:50:db:52:2a:ac:e2:54:25:6d:06:81:f8:0a:
d8:7c:ec:b8:ff:df:bf:9a:3a:1c:1d:52:fa:18:c9:84:5a:a5:
b3:80:25:41:75:72:99:47:af:68:a4:98:3f:ae:13:e2:c7:4d:
ba:95:9b:61:67:ec:6b:5c:5f:e7:8b:a9:43:c4:7e:ab:8f:ed:
c9:11:5c:29:ff:c2:31:8b:0b:e8:ba:7f:77:e0:5c:d6:da:84:
48:72:78:a6:e7:a5:8c:17:bf:aa:5c:96:ee:7e:d1:f5:5b:b4:
13:0d:d9:51:e5:b1:8f:6a:6f:ab:3a:53:10:a1:12:9b:9b:1a:
07:59:9e:15:5f:7a:37:bb:7b:02:b6:b4:71:3d:32:30:f0:c4:
46:73:51:d2:5a:fc:20:39:2f:48:d0:ad:d3:92:6d:40:e3:b4:
73:dc:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:34 2025 by rpki-client