Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: o6SZNcN8J/W3tkg5m4+f3mKNur+wMcdIBgJMjVkTZYI=
Subject key identifier: 58:AB:B1:14:37:C4:70:64:1F:B7:0D:86:32:C9:86:1B:38:1E:85:19
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 0197B8215BAB369F5583E5A368062E40362B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0495
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: b35HDhD7Vu5bweMBOxZMSGVaWBJq+98ix4IG/+gJLek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5b:ab:36:9f:55:83:e5:a3:68:06:2e:40:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=58abb11437c470641fb70d8632c9861b381e8519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:de:ba:f2:93:66:28:bd:27:c6:2d:94:dd:
88:18:a7:21:1f:de:9f:f9:43:6d:1e:b2:ba:f2:34:
4a:4a:66:76:ea:85:63:1f:f0:1c:22:7d:de:f5:3f:
4a:16:67:f7:8e:5b:38:0c:82:3e:cc:c4:d8:19:c5:
64:12:fc:2b:0e:73:43:78:72:81:d1:24:c3:2d:7b:
25:af:be:60:ec:3d:e9:6f:ea:61:15:aa:9e:4d:3d:
96:7e:0d:4f:07:57:27:32:8b:6d:fb:18:a8:ac:20:
27:e5:fb:9a:3e:23:ee:72:3c:78:d6:9c:7b:33:00:
89:55:17:23:2b:f1:9a:9e:e1:0e:ca:74:56:a1:41:
0c:11:62:ee:f5:55:39:96:cd:20:00:4b:eb:35:40:
06:7c:18:d6:7e:91:16:b9:56:f4:f2:d1:ff:b1:bf:
d0:1a:d9:e1:91:42:f9:b9:b9:a5:47:e4:e2:7c:c7:
73:6b:b9:91:fd:29:14:f8:ca:b5:2e:60:b3:65:05:
5d:8c:57:38:cc:e6:79:a1:f4:de:70:71:21:f0:09:
ed:72:ce:ab:66:ab:0b:0e:ce:38:50:67:02:34:a3:
43:f2:65:fb:06:ca:0b:b9:0a:dc:57:ee:63:2d:06:
39:3d:ae:fc:82:29:44:7f:72:66:c3:6c:36:a8:55:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:B1:14:37:C4:70:64:1F:B7:0D:86:32:C9:86:1B:38:1E:85:19
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:a7:e3:c8:42:ee:dc:b0:ca:ac:69:11:5e:7c:77:39:0e:
44:55:f9:2e:bc:15:d5:ea:c0:48:12:ff:a9:6c:b2:da:4b:34:
30:d6:a1:4d:18:64:12:5b:aa:1f:a3:7e:20:31:4e:b3:b5:03:
7d:43:12:3d:8e:8f:57:a9:90:71:81:d5:12:4e:66:97:5d:e0:
23:af:d7:bb:0f:b9:58:a0:cc:0e:b4:eb:35:14:b6:bb:7e:83:
d0:86:1d:ef:d6:dc:a8:b7:9b:be:e0:ba:6f:4d:48:35:18:bc:
48:c7:4a:e6:37:3c:b2:6d:a1:b5:0b:34:21:aa:c4:39:91:0a:
56:ef:ec:cf:a9:ab:e8:3c:83:3d:ac:fb:e1:ab:28:11:ff:1a:
e3:fd:4a:a0:6e:c2:df:40:39:63:e6:7d:18:bb:3b:1e:0f:81:
4a:74:f7:ad:ec:2d:1d:4c:5c:51:c3:d0:61:a4:99:31:0a:0c:
d5:3b:5a:bf:a9:d7:07:08:95:51:ed:57:bd:77:fe:f4:ec:e3:
2a:0f:f8:d0:7a:dc:6f:02:b4:67:b6:fc:b1:e7:1d:73:d4:db:
c6:35:f5:00:60:1a:4a:0a:42:99:82:df:0e:fa:f9:f1:6a:d5:
11:ac:b6:77:95:df:e2:ec:1a:b3:8c:b7:c7:cb:35:7c:e4:50:
f2:f6:96:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IVurNp9Vg+WjaAYuQDYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4
NWMxOTMwHhcNMjUwNjI4MjAwMTIzWhcNMjUwNjI5MjAwMTIzWjAzMTEwLwYDVQQD
Eyg1OGFiYjExNDM3YzQ3MDY0MWZiNzBkODYzMmM5ODYxYjM4MWU4NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TTeuvKTZii9J8YtlN2IGKchH96f
+UNtHrK68jRKSmZ26oVjH/AcIn3e9T9KFmf3jls4DII+zMTYGcVkEvwrDnNDeHKB
0STDLXslr75g7D3pb+phFaqeTT2Wfg1PB1cnMott+xiorCAn5fuaPiPucjx41px7
MwCJVRcjK/GanuEOynRWoUEMEWLu9VU5ls0gAEvrNUAGfBjWfpEWuVb08tH/sb/Q
GtnhkUL5ubmlR+TifMdza7mR/SkU+Mq1LmCzZQVdjFc4zOZ5ofTecHEh8Antcs6r
ZqsLDs44UGcCNKND8mX7BsoLuQrcV+5jLQY5Pa78gilEf3Jmw2w2qFXlRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFirsRQ3xHBkH7cNhjLJhhs4HoUZMB8GA1UdIwQY
MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt
NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk
LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPGn48hC
7tywyqxpEV58dzkORFX5LrwV1erASBL/qWyy2ks0MNahTRhkEluqH6N+IDFOs7UD
fUMSPY6PV6mQcYHVEk5ml13gI6/Xuw+5WKDMDrTrNRS2u36D0IYd79bcqLebvuC6
b01INRi8SMdK5jc8sm2htQs0IarEOZEKVu/sz6mr6DyDPaz74asoEf8a4/1KoG7C
30A5Y+Z9GLs7Hg+BSnT3rewtHUxcUcPQYaSZMQoM1Ttav6nXBwiVUe1XvXf+9Ozj
Kg/40HrcbwK0Z7b8secdc9TbxjX1AGAaSgpCmYLfDvr58WrVEay2d5Xf4uwas4y3
x8s1fORQ8vaWkA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:13 2025 by rpki-client