Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: Jbtsb59O+TiY0gogONiHH+2TIURlcKTl0MsgtxBY98s=
Subject key identifier: F3:E3:67:58:9D:A6:8F:C8:C3:00:59:FF:F3:A9:4C:1C:AC:29:4B:20
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 019A4E864F6627D83ACE1B248A354369BC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: GMkZlRij6UJ1f7d4SLveMblwgb60ho99whswrRI/lo0=)
2: wUNIEVtYpwrG63HG0eeD7I7tvcM.roa (hash: oXVfh0sTirB6aA53rQRtUtH/R5Wu4DiNaIy7B2RuTkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4f:66:27:d8:3a:ce:1b:24:8a:35:43:69:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=f3e367589da68fc8c30059fff3a94c1cac294b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:12:c6:b4:7e:e3:82:6a:00:f2:4c:2f:20:
4a:f4:5f:1f:18:ae:a6:26:36:44:4b:06:37:3a:1c:
fe:a9:fc:91:de:cd:78:4c:6a:db:de:5c:38:f1:a6:
7c:94:e5:25:ad:59:03:5e:ca:a8:8a:4b:79:40:a1:
6b:fd:50:59:03:e0:a9:c8:a9:64:78:6b:aa:73:1a:
b4:c3:96:9f:d0:e7:ac:60:da:e9:ef:44:d8:8d:81:
ed:20:35:8e:79:f3:5f:7f:f7:cd:08:f6:83:c7:20:
f8:12:d5:0d:85:93:98:44:7e:3d:8e:00:ee:d7:4e:
56:44:5f:23:ea:6c:43:81:a0:a2:5b:b5:11:b2:be:
34:d5:8a:4c:60:c2:f0:98:1c:04:02:65:50:d0:2d:
82:72:c5:78:e3:b9:64:51:e8:f3:c4:04:a0:76:9b:
1a:12:9c:b7:e8:3a:80:62:7a:b1:eb:b6:e5:7f:50:
4f:09:67:93:62:fd:92:31:97:c4:ca:f5:b0:58:fb:
bf:3a:9c:c8:ca:65:0b:ed:65:f3:bf:77:a6:7f:31:
bd:c1:1f:70:77:32:34:b4:93:e9:4f:24:67:b1:5a:
25:88:15:82:27:6d:96:d3:cc:d2:70:32:73:9d:be:
51:c0:d4:07:22:c9:2b:5e:58:9f:83:05:88:70:85:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:67:58:9D:A6:8F:C8:C3:00:59:FF:F3:A9:4C:1C:AC:29:4B:20
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:fb:f2:5a:71:a0:f0:b8:c4:30:70:30:d0:58:b3:17:a4:
46:aa:04:f5:09:b8:fb:26:1c:a2:45:06:28:85:bb:e4:db:98:
d0:71:d3:3b:5d:d3:b0:57:ce:9b:d2:3b:93:04:8f:41:5c:7d:
c8:a3:96:72:a9:be:b5:09:26:95:37:f5:bc:76:52:37:7b:58:
45:64:bb:a0:7b:03:6b:a5:7a:fc:a4:52:54:4e:6a:6e:c8:78:
31:63:ab:38:87:54:31:ba:9b:68:9b:26:8a:84:df:d1:45:58:
0e:04:fe:7d:aa:75:de:69:de:08:27:50:25:74:d6:3b:6a:38:
d7:c0:05:32:19:ba:98:1b:2e:96:5a:bd:da:57:37:8f:5a:89:
94:b7:c1:e6:50:33:5e:18:e9:5d:9e:c2:6e:35:d6:dc:74:ba:
61:4d:44:f3:49:51:a2:e0:49:b7:3f:1c:55:16:fc:dc:45:4c:
f6:ef:6e:d6:61:25:1d:db:62:a2:0e:e2:84:af:79:ab:cb:7a:
a2:a9:a7:19:4d:e3:ed:29:66:58:6d:e0:0b:ef:46:59:25:1a:
ed:c6:c8:d0:97:24:0b:83:99:86:5d:de:fc:53:14:4e:3e:24:
32:65:4a:0a:23:01:6e:a4:cb:ed:11:94:ae:39:9c:6f:eb:f4:
63:4c:40:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhk9mJ9g6zhskijVDabyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh
YzhmNTIwHhcNMjUxMTA0MTEwMDE2WhcNMjUxMTA1MTEwMDE2WjAzMTEwLwYDVQQD
EyhmM2UzNjc1ODlkYTY4ZmM4YzMwMDU5ZmZmM2E5NGMxY2FjMjk0YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuASxrR+44JqAPJMLyBK9F8fGK6m
JjZESwY3Ohz+qfyR3s14TGrb3lw48aZ8lOUlrVkDXsqoikt5QKFr/VBZA+CpyKlk
eGuqcxq0w5af0OesYNrp70TYjYHtIDWOefNff/fNCPaDxyD4EtUNhZOYRH49jgDu
105WRF8j6mxDgaCiW7URsr401YpMYMLwmBwEAmVQ0C2CcsV447lkUejzxASgdpsa
Epy36DqAYnqx67blf1BPCWeTYv2SMZfEyvWwWPu/OpzIymUL7WXzv3emfzG9wR9w
dzI0tJPpTyRnsVoliBWCJ22W08zScDJznb5RwNQHIskrXlifgwWIcIVMkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPjZ1idpo/IwwBZ//OpTBysKUsgMB8GA1UdIwQY
MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt
YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj
LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNX78lpx
oPC4xDBwMNBYsxekRqoE9Qm4+yYcokUGKIW75NuY0HHTO13TsFfOm9I7kwSPQVx9
yKOWcqm+tQkmlTf1vHZSN3tYRWS7oHsDa6V6/KRSVE5qbsh4MWOrOIdUMbqbaJsm
ioTf0UVYDgT+fap13mneCCdQJXTWO2o418AFMhm6mBsullq92lc3j1qJlLfB5lAz
XhjpXZ7CbjXW3HS6YU1E80lRouBJtz8cVRb83EVM9u9u1mElHdtiog7ihK95q8t6
oqmnGU3j7SlmWG3gC+9GWSUa7cbI0JckC4OZhl3e/FMUTj4kMmVKCiMBbqTL7RGU
rjmcb+v0Y0xAlg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:22 2025 by rpki-client