Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: +xx4AC8uM13mZzVFJeN7Sv/C+Y12wLejGhtktDrMrN0=
Subject key identifier: DB:44:BC:3A:35:E9:57:E4:3F:A5:23:3C:E5:3E:A0:97:2A:A5:0E:8D
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 01988AA0F51E00AD154A3FB139531DDA6B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 17:01:00 +0000
Manifest this update: Fri 08 Aug 2025 17:01:00 +0000
Manifest next update: Sat 09 Aug 2025 17:01:00 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: XwVko1kjiydHV+oM0UXMqlDNC3Flv3JwWh1pgsuaV5w=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:f5:1e:00:ad:15:4a:3f:b1:39:53:1d:da:6b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Aug 8 17:01:00 2025 GMT
Not After : Aug 9 17:01:00 2025 GMT
Subject: CN=db44bc3a35e957e43fa5233ce53ea0972aa50e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:b2:b6:d1:b3:6f:d3:20:82:fc:9b:51:e9:
38:c5:3d:b0:ce:7a:10:b0:78:8b:e5:1b:70:00:f0:
dd:ba:1c:b6:2a:56:a0:0a:78:24:15:2e:b0:0b:21:
4c:7c:95:61:ba:6f:bc:92:4f:ef:8c:1d:9f:b1:13:
68:97:1c:94:0d:50:43:68:3f:30:82:1a:1d:f7:5f:
65:9a:b0:22:fa:92:48:7b:2f:9d:4e:ad:b6:7d:fd:
bc:9b:ad:d6:b6:76:ce:d7:90:4d:2c:af:15:0b:53:
1e:7d:ab:61:63:5c:1b:f7:c0:8b:bf:1a:0f:7e:48:
39:44:89:31:41:50:fe:48:ca:b9:38:a9:27:f5:6e:
c8:d5:ac:8b:d6:e8:e8:e0:ef:f8:5d:01:bb:ce:2b:
56:20:e4:c4:e0:c4:c4:4c:cc:fc:43:80:1c:15:0e:
0f:8c:af:8d:15:89:8e:d4:ef:49:b8:c0:a8:2a:6d:
27:9b:a7:c6:be:b2:f3:15:59:14:a9:da:52:9b:de:
6a:27:8b:b3:b1:ac:4f:60:59:b4:42:82:b8:a9:3b:
ff:10:b1:6a:04:61:9d:0d:1a:fe:ec:df:81:bc:d5:
4f:eb:0e:fa:4e:00:1d:94:2c:4b:e8:ed:d3:ea:51:
f7:74:fd:0f:bd:a2:ce:b6:7f:25:b6:89:f0:78:32:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:BC:3A:35:E9:57:E4:3F:A5:23:3C:E5:3E:A0:97:2A:A5:0E:8D
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9f:6d:f0:98:64:63:f6:20:e3:a5:fd:97:17:13:a5:bb:60:
9e:29:50:50:0e:d4:9b:ad:c8:50:8b:98:6c:01:b2:39:88:53:
fa:70:c2:df:73:5f:3b:01:8f:ea:4a:7f:57:84:39:8c:18:32:
22:ce:e1:55:31:8e:65:65:0d:88:13:1a:dd:f6:cf:c5:d5:41:
9a:f0:4f:78:57:53:57:dd:2b:a6:f0:63:01:98:27:9b:98:1f:
a0:68:23:51:a8:53:dc:9b:17:70:8d:75:6d:f7:eb:b3:ae:fe:
cb:fc:33:dc:b5:7f:29:58:b2:61:23:4d:f8:cb:21:fe:55:ca:
20:92:5c:05:b8:5b:49:a3:1a:5b:b7:67:ac:9f:99:c2:05:40:
7a:b7:1a:74:a5:de:ae:40:7c:00:42:a5:18:fa:1e:bb:9f:6f:
7e:8d:ea:57:bf:a4:75:1d:da:44:ec:11:69:b8:26:6a:e1:c3:
df:d0:1e:63:ea:9d:20:70:01:43:7c:18:c6:2d:04:ae:e8:5d:
eb:3f:1b:8b:27:da:d6:51:08:15:92:1c:1c:02:c0:e8:e3:52:
17:bc:d4:47:57:5d:31:a2:09:ce:76:5b:e8:63:d1:30:11:4d:
a0:63:71:ff:08:6c:46:1b:57:4c:8e:28:f3:fd:5c:83:6f:fa:
56:4b:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:16 2025 by rpki-client