Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: uC2J5+emIprRBFWOHElCMWB67FoQ8A0fLX3mRrEF5Dw=
Subject key identifier: D4:CA:95:85:EA:A2:40:B8:2B:0A:BA:2A:53:79:BD:7C:4B:8F:3A:CE
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0196851135A8B09A7144C29DF25669875FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 05:00:19 +0000
Manifest this update: Wed 30 Apr 2025 05:00:19 +0000
Manifest next update: Thu 01 May 2025 05:00:19 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: w4OR2Tkg1CmOYBMu6/DpYAMehId3X9wY/Ro9Q2yRn7o=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:35:a8:b0:9a:71:44:c2:9d:f2:56:69:87:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Apr 30 05:00:19 2025 GMT
Not After : May 1 05:00:19 2025 GMT
Subject: CN=d4ca9585eaa240b82b0aba2a5379bd7c4b8f3ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:63:5b:6d:4d:3f:8a:94:44:91:b8:64:60:
35:5c:cf:01:64:d2:5a:7e:c2:56:59:f0:f8:f8:6a:
ac:94:d6:81:38:ff:91:96:39:ad:4a:72:d0:08:71:
db:49:f8:24:fc:3e:a3:66:d9:75:9f:f4:de:da:17:
e0:e6:5a:e4:35:b1:85:42:86:7e:c6:36:1e:f0:68:
3b:db:0f:28:64:47:07:ed:b4:2c:bf:d5:19:c9:85:
fb:a1:6f:da:74:ce:d1:59:54:f3:4f:c9:25:ec:f3:
78:9a:d7:fb:a0:f3:96:33:0a:42:db:70:88:7a:05:
28:bc:25:a1:94:94:af:e2:00:9e:85:23:44:c4:1b:
f9:7c:a8:8e:f2:5a:4c:1b:9f:d8:07:d5:06:14:31:
b8:98:c2:35:1d:66:90:1d:e6:ae:34:5a:a8:2b:1e:
d2:20:c4:6b:a3:8a:c3:5a:69:ec:f5:6e:92:38:7e:
d4:90:b5:9f:e0:d7:12:de:d1:ad:bf:27:79:63:88:
cc:dd:ba:05:c5:cf:cd:d1:0a:bf:bc:f7:0b:a2:68:
33:af:0b:9e:cf:91:0b:2d:e4:37:f3:09:b1:e4:e9:
f9:2e:76:b8:5c:14:4e:4f:69:69:44:aa:03:4a:fb:
1a:3d:2d:fd:3d:e2:3d:56:fd:31:95:b0:ec:4a:f2:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:95:85:EA:A2:40:B8:2B:0A:BA:2A:53:79:BD:7C:4B:8F:3A:CE
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:32:f2:9c:31:3d:4c:f4:f2:3a:d0:2a:52:1a:c3:01:7d:
c5:5e:d3:95:03:0d:96:61:74:f4:d0:db:e2:17:a2:2d:de:f8:
1c:96:02:42:33:6e:80:b8:2d:86:90:30:43:a1:7a:f1:29:b1:
86:0a:7d:3b:a3:2d:39:aa:9a:5a:91:de:2a:dc:97:f0:ab:99:
1f:f2:98:9e:c2:1e:d1:b1:d0:7d:d6:d7:3c:a8:38:b6:0f:86:
44:08:92:d2:d1:14:60:d9:aa:c9:c2:53:c6:2b:b5:1c:15:23:
16:18:9b:e5:33:60:0f:fd:f8:f8:aa:aa:e1:04:ec:cc:e5:88:
9c:6f:59:02:a6:79:8f:6c:a9:ee:75:ba:b5:5c:92:22:8a:69:
f0:9a:a1:ce:3d:d1:e7:ea:8a:8e:ac:67:45:21:c3:80:94:74:
c3:67:be:d6:13:c4:e4:4d:87:f6:d4:78:21:df:1c:b6:5c:0f:
ad:99:7b:e5:fe:7b:20:20:cf:0e:ee:c6:52:2f:fc:d5:6d:2d:
f9:82:08:b6:16:8e:31:56:ad:ca:ea:cf:51:47:a3:3c:d6:88:
a3:3d:24:45:94:44:2c:8b:5e:2a:0a:46:87:50:5c:4a:5d:c7:
67:cd:b6:23:a6:4a:1c:50:fe:3f:3f:6a:ec:4f:f2:91:4e:c1:
86:51:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:46 2025 by rpki-client