Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: m38mo+otLcaoZgPywLUrmF6NE58AZoQ6Hf3+s3KGklE=
Subject key identifier: D7:F4:F1:3B:65:88:BD:B4:9E:D5:A9:6A:CD:B1:A5:AE:F9:27:51:73
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 01977C42FCFE94CA6DBBD6B0EF08E45A991C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 05:00:54 +0000
Manifest this update: Tue 17 Jun 2025 05:00:54 +0000
Manifest next update: Wed 18 Jun 2025 05:00:54 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: IHsDFiKrivdsdLe0awODoDRPxLcd+0UHOVl6WpOSkEA=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:fc:fe:94:ca:6d:bb:d6:b0:ef:08:e4:5a:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Jun 17 05:00:54 2025 GMT
Not After : Jun 18 05:00:54 2025 GMT
Subject: CN=d7f4f13b6588bdb49ed5a96acdb1a5aef9275173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:a6:5c:6f:78:e3:65:d0:59:8e:77:79:43:
b8:20:09:f8:78:c7:5d:89:f6:20:fd:97:e1:79:eb:
0e:30:b6:74:ea:50:39:83:67:41:f7:d2:3e:87:a2:
cd:19:f4:af:84:64:a2:cd:9f:9d:02:70:0f:ff:42:
69:5e:9b:af:47:02:85:07:1c:d2:8c:28:cf:e9:a3:
92:e4:dc:0c:50:32:81:44:7e:ce:67:8d:3b:6c:42:
f9:cd:6a:e4:3d:7a:05:9f:93:61:d9:43:ce:bd:85:
24:42:cd:f0:10:34:7c:f0:61:3b:f5:63:08:91:bb:
d4:fa:28:26:73:55:3f:17:28:24:50:0a:d0:66:fa:
b2:87:21:f4:6e:68:19:6f:44:c7:9d:56:8a:3e:e1:
1f:1d:61:6b:18:84:29:df:1c:c2:a8:2b:c6:3a:ec:
aa:1a:7d:5d:8c:e1:4c:ad:26:68:f2:e2:e6:43:89:
3d:f8:a4:31:38:06:56:b3:fa:3a:c9:02:aa:05:49:
23:66:6b:f3:f4:f4:51:d4:78:ab:70:d1:11:1e:42:
6a:35:51:5d:e9:f3:6e:4c:51:91:b6:94:05:18:00:
d6:f3:cf:05:f9:cb:dd:6f:df:8f:01:4c:b2:29:6e:
d9:21:e7:66:24:0e:1c:cb:75:e0:87:95:25:2f:f8:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:F1:3B:65:88:BD:B4:9E:D5:A9:6A:CD:B1:A5:AE:F9:27:51:73
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:76:85:96:d0:ca:7c:1a:53:bb:c6:82:87:a5:df:ff:7b:
0b:fa:09:3e:b4:10:b6:ab:af:96:1b:86:0e:8e:98:29:5c:5d:
89:f0:93:9b:10:4b:e1:c7:b5:2e:2f:50:bc:58:3a:78:81:05:
2c:eb:a1:4c:20:03:ae:fa:bf:1b:05:f9:e2:89:d6:ba:6f:2d:
a7:26:59:85:cc:b3:3a:5c:22:6e:79:22:24:9f:da:eb:fd:26:
66:eb:9c:db:a9:2e:12:c4:02:d7:34:b3:c3:1f:9b:90:c3:fd:
2c:83:8e:ad:7f:8e:f3:eb:56:65:73:5c:52:98:a5:ce:28:f6:
c8:01:1f:0a:f5:80:02:50:ee:17:36:8d:7b:74:0f:90:22:63:
3b:8f:b7:74:b5:89:b6:fe:c1:ee:34:94:c2:94:01:92:85:a6:
df:76:02:82:82:8e:2e:15:7c:0b:d3:f9:c9:69:59:b5:90:6a:
17:27:f5:fe:b0:62:a8:ac:21:51:fb:94:8b:ab:d2:17:c2:bd:
c0:0b:b3:d6:6c:55:ac:02:57:35:88:ab:75:ad:a8:24:7a:a3:
60:2a:19:b5:15:b3:24:3b:76:fd:aa:55:22:4f:84:f9:2f:38:
d1:f8:79:86:95:bc:10:02:2b:06:54:05:7b:9b:54:87:a0:bf:
81:8e:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:11:24 2025 by rpki-client