Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: hsWvJw8gXmPudQVl1iYeeq2I4qjnMXNeRzWcHPy/u2k=
Subject key identifier: C0:39:1E:2F:12:CF:B9:A5:EA:12:40:5C:2E:F7:18:5F:8A:0C:78:03
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0197B6329C3482FEC19ABC411D25BF95DDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: vF+8w/6bvUcRupsq5EjkM7rq9cQBzWKj0zOPQi9s68s=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9c:34:82:fe:c1:9a:bc:41:1d:25:bf:95:dd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=c0391e2f12cfb9a5ea12405c2ef7185f8a0c7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:5c:0e:34:48:62:ae:e3:45:10:da:02:97:
d0:b3:9b:e0:25:c4:e4:cb:6f:dd:bd:24:a2:ef:fc:
c7:49:59:16:a1:bf:f7:bd:bf:6c:b7:04:1b:e1:b7:
c2:30:8c:c6:23:41:bb:67:d3:40:a4:f8:99:ef:a6:
60:25:9f:a8:7c:5d:28:c0:23:1a:17:28:21:b6:2b:
5a:2c:32:91:52:5f:63:3a:77:ee:15:4e:92:eb:28:
74:f0:94:d7:45:9e:1d:a7:80:07:44:dc:91:ff:9b:
a9:2c:cf:b7:e3:f4:40:ba:96:af:93:39:e8:59:d8:
23:f4:3b:91:68:8d:42:59:52:41:e0:c0:23:95:09:
02:33:ef:82:fb:15:2e:55:49:34:a3:b1:68:ba:44:
80:87:89:c8:c9:71:0a:4d:e1:92:92:59:0b:74:ce:
8f:34:bd:5e:70:87:2a:60:79:20:99:e0:11:4d:5a:
2e:a4:b8:fa:fe:38:0d:fb:b4:24:c1:44:5b:5a:99:
e0:b8:01:05:50:a5:98:55:dc:fe:ce:33:99:3e:40:
fd:59:b4:43:62:54:b2:1a:95:ba:0c:12:5d:40:ee:
23:0b:a5:5b:b2:4a:24:0c:77:70:37:10:c3:37:d3:
6d:6d:21:1b:e5:9d:b5:ab:45:67:0f:c3:6a:13:9b:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:1E:2F:12:CF:B9:A5:EA:12:40:5C:2E:F7:18:5F:8A:0C:78:03
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a8:69:ac:0d:15:7a:06:8e:d6:69:08:3f:08:87:57:ac:0f:
da:89:fd:bc:1d:18:71:34:92:16:ca:6e:b9:27:e6:c5:76:f4:
34:ed:8f:e7:3b:06:5e:48:fd:59:8e:83:9c:dc:87:7a:42:1a:
86:f7:9e:3d:33:85:64:de:a2:63:42:d9:ad:c4:2c:05:8b:23:
1f:c1:6c:7f:84:a6:21:4b:7b:d0:f7:39:eb:2f:f9:07:af:02:
be:a0:de:c1:b4:65:45:38:50:08:41:19:5b:54:c7:ea:14:22:
c9:a2:04:7d:ca:f9:22:66:47:cf:16:79:f3:69:66:ae:66:b1:
69:de:2f:bc:98:0b:35:96:47:ef:6d:40:b3:7e:c4:b6:0f:9d:
3b:e2:eb:72:64:44:7a:29:06:b8:09:b8:69:93:da:fd:63:7e:
33:37:99:df:fe:cd:e4:c1:0f:79:3f:86:f9:52:32:85:dd:e1:
93:02:f6:f4:20:57:76:8d:d9:21:6e:ed:49:64:11:c0:63:c4:
e9:57:21:35:ad:45:54:17:a6:56:d5:84:a4:42:d0:f1:c1:ee:
eb:a6:14:f7:36:7a:51:b3:ae:49:4d:b2:54:09:e1:2e:9b:1f:
ac:9b:9f:f6:6f:64:08:c9:57:8b:61:db:a7:b1:c8:cb:04:da:
1b:d7:f6:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mpw0gv7BmrxBHSW/ld3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwNjI4MTEwMDU5WhcNMjUwNjI5MTEwMDU5WjAzMTEwLwYDVQQD
EyhjMDM5MWUyZjEyY2ZiOWE1ZWExMjQwNWMyZWY3MTg1ZjhhMGM3ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBcDjRIYq7jRRDaApfQs5vgJcTk
y2/dvSSi7/zHSVkWob/3vb9stwQb4bfCMIzGI0G7Z9NApPiZ76ZgJZ+ofF0owCMa
FyghtitaLDKRUl9jOnfuFU6S6yh08JTXRZ4dp4AHRNyR/5upLM+34/RAupavkzno
Wdgj9DuRaI1CWVJB4MAjlQkCM++C+xUuVUk0o7FoukSAh4nIyXEKTeGSklkLdM6P
NL1ecIcqYHkgmeARTVoupLj6/jgN+7QkwURbWpnguAEFUKWYVdz+zjOZPkD9WbRD
YlSyGpW6DBJdQO4jC6VbskokDHdwNxDDN9NtbSEb5Z21q0VnD8NqE5uLcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA5Hi8Sz7ml6hJAXC73GF+KDHgDMB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKhprA0V
egaO1mkIPwiHV6wP2on9vB0YcTSSFspuuSfmxXb0NO2P5zsGXkj9WY6DnNyHekIa
hveePTOFZN6iY0LZrcQsBYsjH8Fsf4SmIUt70Pc56y/5B68CvqDewbRlRThQCEEZ
W1TH6hQiyaIEfcr5ImZHzxZ582lmrmaxad4vvJgLNZZH721As37Etg+dO+LrcmRE
eikGuAm4aZPa/WN+MzeZ3/7N5MEPeT+G+VIyhd3hkwL29CBXdo3ZIW7tSWQRwGPE
6VchNa1FVBemVtWEpELQ8cHu66YU9zZ6UbOuSU2yVAnhLpsfrJuf9m9kCMlXi2Hb
p7HIywTaG9f2WA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client