Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: ya7/27kYGsoyW1XL/vlv8BgS+L7QOo9bGpYA+rKtUEA=
Subject key identifier: 18:7E:D7:1F:10:B3:D8:E6:76:34:B5:A1:CA:3B:EA:23:A7:29:C4:A7
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0197C537EDDBAE550BE1A8033C81135E85F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0CA4
Signing time: Tue 01 Jul 2025 09:01:06 +0000
Manifest this update: Tue 01 Jul 2025 09:01:06 +0000
Manifest next update: Wed 02 Jul 2025 09:01:06 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: UPGCjvZbAcvZceW7ZqOA4meB7P1c+vafSjpEb9JzR7E=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:ed:db:ae:55:0b:e1:a8:03:3c:81:13:5e:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jul 1 09:01:06 2025 GMT
Not After : Jul 2 09:01:06 2025 GMT
Subject: CN=187ed71f10b3d8e67634b5a1ca3bea23a729c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:69:a7:13:9e:34:55:bd:17:ab:e5:ca:fd:
a4:85:5d:ab:0a:09:b9:ad:09:0e:31:89:9d:25:bd:
29:b5:30:e9:14:f5:46:d3:ce:fb:14:0e:15:d4:79:
89:17:f3:af:78:74:c3:d7:ee:bf:a0:5c:5d:5b:9e:
5f:08:9d:33:b8:cb:e0:ea:5c:ca:22:28:73:a8:66:
fb:a2:42:dc:ee:38:32:19:6e:19:d3:9a:c6:70:92:
3d:a4:b4:e0:53:d4:1e:ee:01:05:ef:ea:e9:3e:fa:
b0:0b:b8:98:98:55:d0:c1:c2:cd:b1:e5:97:71:77:
33:06:58:86:da:f2:ce:8a:fd:b0:3c:ef:bd:2b:9c:
2e:8e:10:cb:ca:66:c7:97:1a:7a:98:d9:95:ce:23:
b9:51:cc:49:74:7a:9a:a2:56:98:f4:91:ae:ad:7e:
73:75:7a:19:4d:4d:77:a3:2e:25:f6:6a:5f:7b:28:
40:bc:0d:f0:0e:bc:cf:0c:7f:56:59:7b:95:be:df:
5a:16:15:c8:05:5e:4a:87:f0:70:db:78:24:81:cc:
a7:26:95:f3:27:74:cf:d5:ed:4e:17:c6:3a:ee:0f:
e3:5e:f8:5b:9d:b0:76:51:30:0f:0d:ea:fb:4a:6c:
62:6c:2a:83:96:32:5f:6f:48:5e:23:57:4c:8c:ce:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:D7:1F:10:B3:D8:E6:76:34:B5:A1:CA:3B:EA:23:A7:29:C4:A7
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ba:a2:24:cc:17:94:33:b3:4c:f2:29:b8:7c:60:19:25:33:
ab:f6:97:21:4d:67:13:a1:c5:73:98:77:19:0e:8f:3e:8e:11:
51:fa:d4:b5:13:a6:a8:c9:85:15:80:d5:e0:50:c7:fc:bd:40:
81:e5:f3:78:bd:cd:48:95:0d:41:db:3c:b9:24:08:0d:4f:d3:
16:02:aa:74:e9:bc:d5:b3:50:e8:49:e0:d7:b2:e3:3c:6d:b4:
97:73:30:44:c9:3d:e1:b5:7d:f1:cc:cc:13:ab:98:eb:2b:86:
52:44:ed:1e:e3:7b:ef:87:f8:25:06:8f:d1:0c:8a:64:c9:22:
58:f2:83:bf:60:db:2d:96:23:3c:96:f0:c1:18:cb:56:45:f4:
4b:09:86:7b:14:70:b9:5e:3a:2a:04:6d:f5:63:75:0f:7f:c4:
c1:b2:c6:d6:45:2f:d1:8a:f0:be:77:e9:ee:57:af:d3:b5:f6:
1f:3a:1a:5a:b7:e9:39:e3:ce:12:c6:ce:bf:f2:22:d6:47:8b:
7e:a7:9f:29:ae:b3:a9:4c:e3:1c:42:02:13:7d:be:2a:b2:3e:
22:ff:00:0b:69:e6:39:c7:a8:c2:74:d0:11:4f:cc:14:25:2f:
e5:27:e0:39:6a:1c:80:48:ee:56:e6:e6:65:ad:8b:c3:bc:1c:
4e:a9:d3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFN+3brlUL4agDPIETXoXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy
OTk0OGUwHhcNMjUwNzAxMDkwMTA2WhcNMjUwNzAyMDkwMTA2WjAzMTEwLwYDVQQD
EygxODdlZDcxZjEwYjNkOGU2NzYzNGI1YTFjYTNiZWEyM2E3MjljNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY1ppxOeNFW9F6vlyv2khV2rCgm5
rQkOMYmdJb0ptTDpFPVG0877FA4V1HmJF/OveHTD1+6/oFxdW55fCJ0zuMvg6lzK
IihzqGb7okLc7jgyGW4Z05rGcJI9pLTgU9Qe7gEF7+rpPvqwC7iYmFXQwcLNseWX
cXczBliG2vLOiv2wPO+9K5wujhDLymbHlxp6mNmVziO5UcxJdHqaolaY9JGurX5z
dXoZTU13oy4l9mpfeyhAvA3wDrzPDH9WWXuVvt9aFhXIBV5Kh/Bw23gkgcynJpXz
J3TP1e1OF8Y67g/jXvhbnbB2UTAPDer7SmxibCqDljJfb0heI1dMjM7Q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh+1x8Qs9jmdjS1oco76iOnKcSnMB8GA1UdIwQY
MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt
YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3
LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7qiJMwX
lDOzTPIpuHxgGSUzq/aXIU1nE6HFc5h3GQ6PPo4RUfrUtROmqMmFFYDV4FDH/L1A
geXzeL3NSJUNQds8uSQIDU/TFgKqdOm81bNQ6Eng17LjPG20l3MwRMk94bV98czM
E6uY6yuGUkTtHuN774f4JQaP0QyKZMkiWPKDv2DbLZYjPJbwwRjLVkX0SwmGexRw
uV46KgRt9WN1D3/EwbLG1kUv0Yrwvnfp7lev07X2HzoaWrfpOePOEsbOv/Ii1keL
fqefKa6zqUzjHEICE32+KrI+Iv8AC2nmOceownTQEU/MFCUv5SfgOWocgEjuVubm
Za2Lw7wcTqnT7g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:17:33 2025 by rpki-client