Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: k+TKRVTcf1ehDVRXNChlfUV2RX2bET17GVnxmANXuSY=
Subject key identifier: 88:7B:3F:BB:B9:AF:0C:BA:99:E5:1F:3D:8F:B7:5E:64:C1:FB:11:04
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 0197C8DE39A33586B11B8A438CDA603F25EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 0119
Signing time: Wed 02 Jul 2025 02:01:36 +0000
Manifest this update: Wed 02 Jul 2025 02:01:36 +0000
Manifest next update: Thu 03 Jul 2025 02:01:36 +0000
Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: kRHZ0KV4Pdm25adPzpjGVrlP8wzwCfyuYHdYde7U1pg=)
2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:39:a3:35:86:b1:1b:8a:43:8c:da:60:3f:25:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Jul 2 02:01:36 2025 GMT
Not After : Jul 3 02:01:36 2025 GMT
Subject: CN=887b3fbbb9af0cba99e51f3d8fb75e64c1fb1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:de:86:e1:c0:e7:35:17:40:c4:12:38:c6:
13:a7:4c:0b:a2:04:89:81:42:2b:7e:83:07:a1:a2:
e2:39:b7:a8:0e:e1:a8:42:8e:6e:06:6c:13:87:69:
ee:21:90:63:aa:a1:a0:69:36:d5:c7:4b:f9:0a:3d:
7e:2e:a3:f3:dd:6d:fe:79:fa:28:72:b1:a7:92:f2:
bb:54:99:d2:e8:5d:64:9c:3a:fd:16:a1:4f:2d:38:
b0:95:1e:7e:f3:d2:01:fd:fc:f9:f1:6c:25:4b:4e:
2f:6e:61:21:81:c4:6e:d6:c5:1b:ff:5a:8d:70:ea:
cc:f7:45:b4:e4:54:ca:27:aa:51:e2:17:bd:3e:8d:
ee:b6:fa:82:44:05:e9:ab:c7:47:84:72:75:5b:0a:
e2:21:d4:6a:37:18:58:65:91:d1:44:cf:3b:1c:99:
6a:a4:59:71:cc:52:67:72:1f:0f:44:d9:23:85:b4:
21:f8:9f:66:f1:1b:09:88:68:5d:fa:22:69:87:a0:
9a:61:38:c5:8d:51:dc:66:14:d6:d5:6c:e9:c2:9e:
a0:db:fd:fb:74:fa:8c:ba:14:9d:af:46:aa:d7:66:
1b:75:3f:43:71:fb:4f:cb:54:d0:1d:4b:39:a9:e3:
ca:24:f5:8a:ed:33:21:ad:ff:05:8b:21:44:63:ab:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:3F:BB:B9:AF:0C:BA:99:E5:1F:3D:8F:B7:5E:64:C1:FB:11:04
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:8a:5c:fd:eb:ca:3f:08:31:87:db:22:a0:9d:84:e6:a5:
12:86:9b:7c:fe:67:ec:3e:f3:b0:a5:71:c8:c9:86:16:16:b7:
de:40:30:a8:e8:9d:77:39:f0:e8:34:35:e7:b8:2b:57:cf:d3:
8b:8c:37:ca:7d:e8:83:9b:0f:22:98:56:d1:17:3b:fa:d0:25:
89:46:d8:eb:22:8f:a0:6e:a1:3d:91:c7:88:a7:86:15:11:bf:
e7:20:d4:30:3d:27:d5:0b:58:a6:22:65:67:7a:d7:11:64:17:
3a:0b:7b:fd:5a:d5:4a:69:32:33:f4:75:e6:ce:5c:05:16:cc:
ac:0c:c8:6c:c0:1f:a4:b1:64:b2:04:50:20:e7:e2:2e:95:97:
73:63:b5:fa:5a:da:9b:bc:c5:50:15:05:b0:d8:94:9d:5e:23:
a4:e1:aa:00:e2:43:93:ee:32:cf:48:f7:d4:49:1c:87:1f:3b:
0d:f4:4d:0e:bc:f9:8a:6c:1f:2f:2c:74:94:87:82:7d:fc:29:
4b:06:1d:d8:06:11:94:69:fb:c0:71:31:c6:b2:e7:2a:9e:4e:
a3:12:5c:8f:60:f6:ae:6e:f4:7b:24:30:a0:2d:1a:a5:86:42:
17:ab:c7:d1:3a:e9:91:80:90:f3:66:b9:38:5e:ea:21:ae:74:
0f:8e:83:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfI3jmjNYaxG4pDjNpgPyXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzhiMzYwMjQ1ZmU0NGIxNzU3YTY5ZTk3N2ExNWUwN2Zh
YWY2OWIwHhcNMjUwNzAyMDIwMTM2WhcNMjUwNzAzMDIwMTM2WjAzMTEwLwYDVQQD
Eyg4ODdiM2ZiYmI5YWYwY2JhOTllNTFmM2Q4ZmI3NWU2NGMxZmIxMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UrehuHA5zUXQMQSOMYTp0wLogSJ
gUIrfoMHoaLiObeoDuGoQo5uBmwTh2nuIZBjqqGgaTbVx0v5Cj1+LqPz3W3+efoo
crGnkvK7VJnS6F1knDr9FqFPLTiwlR5+89IB/fz58WwlS04vbmEhgcRu1sUb/1qN
cOrM90W05FTKJ6pR4he9Po3utvqCRAXpq8dHhHJ1WwriIdRqNxhYZZHRRM87HJlq
pFlxzFJnch8PRNkjhbQh+J9m8RsJiGhd+iJph6CaYTjFjVHcZhTW1Wzpwp6g2/37
dPqMuhSdr0aq12YbdT9DcftPy1TQHUs5qePKJPWK7TMhrf8FiyFEY6tdmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh7P7u5rwy6meUfPY+3XmTB+xEEMB8GA1UdIwQY
MBaAFHY4s2AkX+RLF1emnpd6FeB/qvabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAt
OGYyNjFkMmZiNjRlLzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAtOGYyNjFkMmZiNjRl
LzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsKKXP3r
yj8IMYfbIqCdhOalEoabfP5n7D7zsKVxyMmGFha33kAwqOiddznw6DQ157grV8/T
i4w3yn3og5sPIphW0Rc7+tAliUbY6yKPoG6hPZHHiKeGFRG/5yDUMD0n1QtYpiJl
Z3rXEWQXOgt7/VrVSmkyM/R15s5cBRbMrAzIbMAfpLFksgRQIOfiLpWXc2O1+lra
m7zFUBUFsNiUnV4jpOGqAOJDk+4yz0j31Ekchx87DfRNDrz5imwfLyx0lIeCffwp
SwYd2AYRlGn7wHExxrLnKp5OoxJcj2D2rm70eyQwoC0apYZCF6vH0TrpkYCQ82a5
OF7qIa50D46Dcw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:29:39 2025 by rpki-client