Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: dHkvHPISJz5bysUEM+4buNQk0VQQ2aiUbALBPSgb/3Y=
Subject key identifier: 3D:23:8C:E6:6C:49:C7:72:99:8C:F2:42:B8:18:90:F9:88:0F:5F:6A
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 01975C13037DB470F6FFCF15EBC47838A6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 23:00:39 +0000
Manifest this update: Tue 10 Jun 2025 23:00:39 +0000
Manifest next update: Wed 11 Jun 2025 23:00:39 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: SM4Ezwt/WN86U+YiaJTpS7NYDyxlgSX1uNH/cfO5RpY=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:03:7d:b4:70:f6:ff:cf:15:eb:c4:78:38:a6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jun 10 23:00:39 2025 GMT
Not After : Jun 11 23:00:39 2025 GMT
Subject: CN=3d238ce66c49c772998cf242b81890f9880f5f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:24:23:fb:e4:09:fc:2c:82:ed:78:c5:1e:
43:61:0a:95:06:83:e1:4b:6a:27:0c:de:77:f7:cd:
f3:b3:fb:e8:29:a3:19:14:c5:5e:6e:8d:e7:d4:89:
88:26:5f:1e:61:cf:db:ce:f7:f0:c8:e7:ba:56:f2:
93:ee:51:64:42:cd:1c:19:f3:01:b4:9e:ef:50:fd:
19:bb:92:c1:c3:3b:84:98:fa:e9:c2:c3:d4:da:58:
ce:9e:85:3f:53:34:43:0f:99:71:99:5f:4e:ba:91:
8e:fe:c9:51:76:77:3c:3d:39:7e:c3:6f:01:73:ff:
57:f2:ba:77:0f:f1:f6:88:07:57:0c:57:e8:f4:f6:
3b:3f:09:66:81:49:a5:d4:55:7b:f3:c7:45:11:4c:
df:ae:d2:bd:80:ee:4d:16:36:ec:ff:0e:af:c3:14:
1f:bd:b8:aa:92:9b:27:28:9b:ef:f3:8c:4c:8c:ba:
f8:e7:4d:d3:7c:b4:55:3d:ea:28:41:f5:0a:0a:a5:
7a:0f:95:18:9e:9b:b9:72:4c:ad:5e:b3:44:2e:91:
e4:ea:26:f4:6d:4d:c8:74:a0:e3:bf:ee:bf:5a:b9:
f3:b5:af:f6:83:a9:e9:6e:0f:8c:0e:ec:0e:cc:e5:
bb:74:28:5d:10:f1:b2:0b:17:95:e0:a2:78:9e:fc:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:23:8C:E6:6C:49:C7:72:99:8C:F2:42:B8:18:90:F9:88:0F:5F:6A
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:23:bc:6a:0f:d2:c0:92:be:01:68:e0:87:e1:d4:44:13:6e:
72:13:51:bf:f8:6b:09:6d:8d:66:31:0a:f0:19:3f:32:57:ba:
73:81:4a:c5:e7:17:05:99:ac:6a:7b:1a:0b:9a:fe:f1:73:8e:
ff:9b:c6:17:03:28:71:03:d4:91:c1:c4:ba:9c:8f:e8:d1:c3:
d9:f6:5e:80:88:85:9d:de:ea:f6:e5:7e:6c:4c:1c:d9:00:ed:
ab:60:97:f1:94:2f:1c:7d:71:17:68:8b:f9:3d:30:82:2b:26:
7f:26:b4:7b:8e:77:87:6b:6f:7e:d4:8a:d0:1f:d1:81:9c:3f:
94:bf:15:fb:0b:71:39:4d:89:1d:90:56:8e:6c:56:88:8e:c0:
cb:b2:0f:f3:a6:c3:a9:a0:79:b9:a0:f2:0f:a0:d7:8e:53:f7:
ce:46:a5:64:ca:a5:e0:00:44:50:c7:d6:f5:26:9d:44:c4:88:
ac:4a:d1:99:1e:af:4e:ab:42:ca:15:d6:87:0b:9e:bd:ac:c9:
bc:1d:91:ee:5a:64:25:37:c6:32:58:10:c0:b2:9f:20:f1:3a:
62:79:7b:29:46:c0:b9:2b:7d:07:ba:3b:68:f0:90:55:a2:e6:
f7:3b:0f:f0:f0:df:36:ce:f3:24:4a:6d:2c:50:1f:74:30:51:
de:93:7a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcEwN9tHD2/88V68R4OKb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjUwNjEwMjMwMDM5WhcNMjUwNjExMjMwMDM5WjAzMTEwLwYDVQQD
EygzZDIzOGNlNjZjNDljNzcyOTk4Y2YyNDJiODE4OTBmOTg4MGY1ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2skI/vkCfwsgu14xR5DYQqVBoPh
S2onDN53983zs/voKaMZFMVebo3n1ImIJl8eYc/bzvfwyOe6VvKT7lFkQs0cGfMB
tJ7vUP0Zu5LBwzuEmPrpwsPU2ljOnoU/UzRDD5lxmV9OupGO/slRdnc8PTl+w28B
c/9X8rp3D/H2iAdXDFfo9PY7PwlmgUml1FV788dFEUzfrtK9gO5NFjbs/w6vwxQf
vbiqkpsnKJvv84xMjLr4503TfLRVPeooQfUKCqV6D5UYnpu5ckytXrNELpHk6ib0
bU3IdKDjv+6/Wrnzta/2g6npbg+MDuwOzOW7dChdEPGyCxeV4KJ4nvwk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0jjOZsScdymYzyQrgYkPmID19qMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSO8ag/S
wJK+AWjgh+HURBNuchNRv/hrCW2NZjEK8Bk/Mle6c4FKxecXBZmsansaC5r+8XOO
/5vGFwMocQPUkcHEupyP6NHD2fZegIiFnd7q9uV+bEwc2QDtq2CX8ZQvHH1xF2iL
+T0wgismfya0e453h2tvftSK0B/RgZw/lL8V+wtxOU2JHZBWjmxWiI7Ay7IP86bD
qaB5uaDyD6DXjlP3zkalZMql4ABEUMfW9SadRMSIrErRmR6vTqtCyhXWhwuevazJ
vB2R7lpkJTfGMlgQwLKfIPE6Ynl7KUbAuSt9B7o7aPCQVaLm9zsP8PDfNs7zJEpt
LFAfdDBR3pN6jA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:53:14 2025 by rpki-client