Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: 1sX1FeLRXlclNvJDzvXIArB2dcojXTp4C4CMrl8CX0s=
Subject key identifier: BF:0F:0F:4F:64:E8:9B:FA:E9:18:15:A4:5E:E2:4C:B1:E4:C5:A1:7A
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 01975DCAFB6D52DDBBE65406E8BE34469C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0CFE
Signing time: Wed 11 Jun 2025 07:01:13 +0000
Manifest this update: Wed 11 Jun 2025 07:01:13 +0000
Manifest next update: Thu 12 Jun 2025 07:01:13 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: I3GzIhkfVz/MS0o6lQHDebul40VXDhrgUJuxrUtY8mE=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:fb:6d:52:dd:bb:e6:54:06:e8:be:34:46:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jun 11 07:01:13 2025 GMT
Not After : Jun 12 07:01:13 2025 GMT
Subject: CN=bf0f0f4f64e89bfae91815a45ee24cb1e4c5a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:78:be:19:81:75:4f:49:fd:fc:6a:1f:ba:
a2:81:e9:17:3a:f9:bc:d1:28:1e:d7:93:46:70:20:
12:d2:1b:a7:02:56:5e:b5:06:be:1d:c0:e4:59:e1:
21:23:15:6e:db:86:b3:2f:52:cc:33:94:62:63:67:
ad:fd:a2:9d:f6:6d:b3:64:e5:71:c9:6a:14:ca:0e:
3c:bc:5a:23:71:3c:6e:b6:02:87:3b:ea:25:05:4c:
8c:14:70:de:99:b4:7d:e5:53:e3:f2:ef:fc:bd:d7:
4b:d4:a6:dd:c5:30:43:63:dd:d2:30:69:33:9d:9a:
dc:04:31:e4:18:8a:33:7c:03:97:1e:13:3f:a8:e6:
63:f2:25:7b:84:05:70:42:6b:00:9a:32:43:66:aa:
89:b1:29:c1:8c:26:b8:8a:76:76:9e:58:53:1b:0b:
7a:3e:f1:e1:4b:c9:66:f7:2e:8a:49:18:ff:20:12:
a3:60:c2:41:4c:fd:34:31:5c:5e:03:e5:16:3f:8d:
c4:29:52:78:e1:23:31:22:2b:43:73:3c:73:e0:11:
6b:6d:60:1e:7e:f2:cd:22:7d:98:9b:67:71:a0:8a:
ad:ac:17:c3:d2:6b:5d:9c:66:da:fa:eb:d4:d6:c8:
54:90:b7:5a:9e:4e:a3:41:08:65:0b:39:ac:96:b1:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0F:0F:4F:64:E8:9B:FA:E9:18:15:A4:5E:E2:4C:B1:E4:C5:A1:7A
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c4:d5:7f:d6:fe:38:ce:6c:e1:96:ec:7c:39:92:42:9f:e5:
82:84:90:15:a2:92:b8:6d:9a:cc:cc:83:66:93:c8:6d:00:af:
c7:51:22:46:c7:f5:35:de:34:50:ea:0f:51:39:a6:73:6a:ad:
e8:d8:6b:a1:ec:5a:44:40:72:8f:af:ff:ec:5d:7e:a7:63:bb:
d4:6b:73:dc:78:a4:23:c3:63:2c:e5:07:4e:76:01:b7:69:8b:
32:26:6f:ce:5d:5a:ee:c3:af:1a:fd:27:e7:5e:e6:64:df:20:
1b:3a:d8:18:24:4c:9a:ba:ff:79:14:45:af:42:68:1e:ce:35:
d5:4c:df:05:45:ef:8b:d8:ed:32:d9:f0:47:68:f3:26:1a:a7:
40:96:e1:e3:7b:94:d9:b7:40:5b:64:a5:20:b5:25:b0:1f:fa:
bd:98:13:50:78:93:32:ee:3f:ed:45:b0:89:76:cd:47:fb:02:
14:44:71:22:96:e3:1e:48:c4:ff:7c:58:ce:1d:70:81:5e:be:
2d:2b:44:ba:e3:13:36:de:3f:77:2b:b5:35:56:a6:69:cb:89:
90:47:1d:b5:d3:fa:c7:c9:70:b6:42:41:c3:59:0e:73:f9:f7:
64:14:fc:f7:35:86:3e:a1:5a:75:2c:bd:75:ee:63:0c:8b:14:
d8:42:07:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyvttUt275lQG6L40Rpw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjUwNjExMDcwMTEzWhcNMjUwNjEyMDcwMTEzWjAzMTEwLwYDVQQD
EyhiZjBmMGY0ZjY0ZTg5YmZhZTkxODE1YTQ1ZWUyNGNiMWU0YzVhMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+t4vhmBdU9J/fxqH7qigekXOvm8
0Sge15NGcCAS0hunAlZetQa+HcDkWeEhIxVu24azL1LMM5RiY2et/aKd9m2zZOVx
yWoUyg48vFojcTxutgKHO+olBUyMFHDembR95VPj8u/8vddL1KbdxTBDY93SMGkz
nZrcBDHkGIozfAOXHhM/qOZj8iV7hAVwQmsAmjJDZqqJsSnBjCa4inZ2nlhTGwt6
PvHhS8lm9y6KSRj/IBKjYMJBTP00MVxeA+UWP43EKVJ44SMxIitDczxz4BFrbWAe
fvLNIn2Ym2dxoIqtrBfD0mtdnGba+uvU1shUkLdank6jQQhlCzmslrHIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8PD09k6Jv66RgVpF7iTLHkxaF6MB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMTVf9b+
OM5s4ZbsfDmSQp/lgoSQFaKSuG2azMyDZpPIbQCvx1EiRsf1Nd40UOoPUTmmc2qt
6NhroexaREByj6//7F1+p2O71Gtz3HikI8NjLOUHTnYBt2mLMiZvzl1a7sOvGv0n
517mZN8gGzrYGCRMmrr/eRRFr0JoHs411UzfBUXvi9jtMtnwR2jzJhqnQJbh43uU
2bdAW2SlILUlsB/6vZgTUHiTMu4/7UWwiXbNR/sCFERxIpbjHkjE/3xYzh1wgV6+
LStEuuMTNt4/dyu1NVamacuJkEcdtdP6x8lwtkJBw1kOc/n3ZBT89zWGPqFadSy9
de5jDIsU2EIHZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:58 2025 by rpki-client