Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: wUprLHmbhCCT7/4gfQIy6GUGTrBvHYfyeLg50ReqKb0=
Subject key identifier: 12:D1:41:8A:84:25:E4:78:D2:FF:15:E8:77:E5:D1:38:5E:03:18:43
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0197499F8657A5DD053EFED827A6A3C2F7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0C64
Signing time: Sat 07 Jun 2025 09:01:20 +0000
Manifest this update: Sat 07 Jun 2025 09:01:20 +0000
Manifest next update: Sun 08 Jun 2025 09:01:20 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: n5IyL6Pb/fJF0KDaJTfp1DJ0NDMVNVB+bBiczLNTK48=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:86:57:a5:dd:05:3e:fe:d8:27:a6:a3:c2:f7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jun 7 09:01:20 2025 GMT
Not After : Jun 8 09:01:20 2025 GMT
Subject: CN=12d1418a8425e478d2ff15e877e5d1385e031843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:ca:c2:99:64:12:6c:ef:0b:5f:41:f0:02:
86:65:93:df:86:42:47:63:11:55:cc:a2:86:67:1a:
2f:bd:c2:ba:7f:b9:db:b2:41:07:1d:c1:96:c5:69:
eb:e7:75:8f:ea:ff:33:62:f6:44:c5:6f:99:40:6e:
26:bc:f7:9e:1f:d9:bb:21:1f:e7:fc:58:50:c5:e1:
da:2a:7f:4e:f3:40:c0:16:66:0b:0b:54:96:65:9c:
ca:bf:45:ac:77:35:83:4a:19:db:ea:13:ec:cc:21:
68:90:bf:5b:9c:4e:be:e2:1d:dd:7f:61:9b:2d:d2:
f6:e4:3a:c3:ab:75:a1:77:c0:0e:2d:68:8b:b5:a6:
a9:8c:35:e0:0c:02:ce:8c:26:4f:66:41:ae:72:f2:
76:d3:d7:a0:fe:9e:aa:66:fb:0c:7f:87:c2:b3:84:
f3:e6:e5:13:f6:c6:20:12:47:a2:10:d4:6a:4d:1f:
9d:75:73:20:1b:97:d9:07:5b:e7:8d:e8:5d:6c:b6:
a0:81:f1:8f:a1:5b:71:04:48:c5:7e:b6:10:ef:04:
9d:93:31:87:99:b8:7d:d2:73:ef:29:92:2d:4e:ba:
ec:8f:c6:ad:5a:fe:2d:e2:01:47:8c:c0:60:b9:6c:
44:0b:ed:e3:11:44:08:ea:a1:79:1b:97:bd:51:c0:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:41:8A:84:25:E4:78:D2:FF:15:E8:77:E5:D1:38:5E:03:18:43
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d8:6b:8a:23:e1:ee:83:14:af:35:f6:3b:c8:a6:1b:5f:29:
9a:cd:1d:91:c6:c8:de:1d:48:e7:e4:25:61:ca:ad:0e:82:63:
09:e3:4c:6a:0f:52:40:0c:e3:ec:b5:d4:91:86:16:8c:41:24:
52:ba:ea:21:14:fe:8f:01:8e:72:ba:d5:f2:a0:f8:38:34:18:
e1:10:5b:49:67:59:95:13:65:a7:f9:73:3c:ee:f7:25:82:d1:
8d:9e:22:8c:34:b8:e6:85:ed:cc:a8:fa:3f:f9:43:36:a2:67:
74:e7:8d:80:f6:fd:ff:b0:db:2c:1d:f4:b4:33:50:07:bd:1a:
5f:a0:c3:ad:22:93:ec:a4:65:f7:ca:ba:cb:8c:f7:e8:5d:8e:
84:07:94:3b:97:fa:ce:a2:27:99:fc:91:df:71:fe:03:33:f5:
40:8e:7f:68:62:eb:83:6e:96:0b:43:a0:19:fa:56:e4:99:1f:
7f:55:1d:e8:0f:3b:aa:0d:ff:e1:e0:50:67:0d:ce:bb:a5:55:
b1:25:8e:ed:14:ad:b7:5f:5d:ba:e1:5f:cc:59:97:e8:35:d9:
96:20:c2:23:07:2c:3f:4b:1a:e2:64:5b:ce:5e:8e:b3:bb:89:
cc:e2:d3:b0:bb:b9:ff:ad:40:ba:c0:f6:78:5f:43:dd:23:4e:
87:d9:28:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn4ZXpd0FPv7YJ6ajwve/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy
OTk0OGUwHhcNMjUwNjA3MDkwMTIwWhcNMjUwNjA4MDkwMTIwWjAzMTEwLwYDVQQD
EygxMmQxNDE4YTg0MjVlNDc4ZDJmZjE1ZTg3N2U1ZDEzODVlMDMxODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8vKwplkEmzvC19B8AKGZZPfhkJH
YxFVzKKGZxovvcK6f7nbskEHHcGWxWnr53WP6v8zYvZExW+ZQG4mvPeeH9m7IR/n
/FhQxeHaKn9O80DAFmYLC1SWZZzKv0WsdzWDShnb6hPszCFokL9bnE6+4h3df2Gb
LdL25DrDq3Whd8AOLWiLtaapjDXgDALOjCZPZkGucvJ209eg/p6qZvsMf4fCs4Tz
5uUT9sYgEkeiENRqTR+ddXMgG5fZB1vnjehdbLaggfGPoVtxBEjFfrYQ7wSdkzGH
mbh90nPvKZItTrrsj8atWv4t4gFHjMBguWxEC+3jEUQI6qF5G5e9UcDYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLRQYqEJeR40v8V6Hfl0TheAxhDMB8GA1UdIwQY
MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt
YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3
LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNhriiPh
7oMUrzX2O8imG18pms0dkcbI3h1I5+QlYcqtDoJjCeNMag9SQAzj7LXUkYYWjEEk
UrrqIRT+jwGOcrrV8qD4ODQY4RBbSWdZlRNlp/lzPO73JYLRjZ4ijDS45oXtzKj6
P/lDNqJndOeNgPb9/7DbLB30tDNQB70aX6DDrSKT7KRl98q6y4z36F2OhAeUO5f6
zqInmfyR33H+AzP1QI5/aGLrg26WC0OgGfpW5Jkff1Ud6A87qg3/4eBQZw3Ou6VV
sSWO7RStt19duuFfzFmX6DXZliDCIwcsP0sa4mRbzl6Os7uJzOLTsLu5/61AusD2
eF9D3SNOh9ko7w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:56 2025 by rpki-client