Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: V9ag/onmwug3U9qzhEvPfxgPhAk9EDoMRMe74QitbT0=
Subject key identifier: D1:D8:F7:9D:29:78:DB:C6:04:EF:2C:1F:25:D4:79:2B:C8:D7:4D:8F
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 0197477A0B5A80DD01E28BCADAEC52EC48A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 0302
Signing time: Fri 06 Jun 2025 23:01:09 +0000
Manifest this update: Fri 06 Jun 2025 23:01:09 +0000
Manifest next update: Sat 07 Jun 2025 23:01:09 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: AzfP0fll9Cq2lJX+Ylq8ZtqeQ3aQd6YjaGCtR9oH6jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0b:5a:80:dd:01:e2:8b:ca:da:ec:52:ec:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jun 6 23:01:09 2025 GMT
Not After : Jun 7 23:01:09 2025 GMT
Subject: CN=d1d8f79d2978dbc604ef2c1f25d4792bc8d74d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:8c:d5:2e:d2:9e:db:90:f2:d2:1c:7d:1b:
20:b7:94:a6:c0:16:ab:60:8c:92:7c:d3:98:90:ff:
ed:f1:84:59:b0:83:c2:da:c5:4c:a6:43:9b:1b:d5:
d8:e3:8d:7a:9f:63:fb:57:cf:df:70:8c:e0:c1:cd:
2d:df:12:4c:36:8a:12:0a:db:a3:2a:00:44:d6:ec:
f9:82:81:ac:35:40:7f:55:82:34:00:17:08:9d:0a:
64:e1:9c:96:62:ac:ba:dc:ad:5f:b1:15:55:1d:c0:
10:f7:06:90:aa:38:52:ef:e4:73:bc:ad:ab:3e:dd:
cd:2a:0c:6b:5e:79:64:d9:3f:53:ab:94:d8:48:d4:
8c:29:79:9f:6e:e6:e9:fa:16:3b:b0:a8:3f:15:6d:
4b:a0:86:5e:31:25:80:fb:02:cd:0c:54:4f:50:c5:
90:a3:60:dd:68:b4:c2:0a:ad:c0:08:20:fe:d5:2b:
d9:aa:77:1d:bf:d3:3c:2d:37:8c:62:1b:5b:31:71:
d2:b8:2b:7d:4d:ce:61:a0:a0:88:d2:4c:a4:45:0f:
4a:93:67:83:2f:76:62:65:63:32:69:20:6e:dd:f3:
b4:bb:5c:4a:4e:1d:5b:d4:8e:4a:b2:eb:e2:4c:0b:
fd:6c:67:ab:f3:c6:4e:f7:7e:93:13:82:ee:05:6a:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D8:F7:9D:29:78:DB:C6:04:EF:2C:1F:25:D4:79:2B:C8:D7:4D:8F
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:17:8f:73:4a:90:c0:d1:94:73:74:d8:4f:cb:2a:27:fb:
04:1c:80:0b:12:d1:4d:87:9e:b1:30:5c:35:82:b0:95:43:d5:
ec:9e:6b:e4:1c:63:fa:c1:6b:90:87:32:1f:a5:72:db:06:df:
b4:db:27:6d:e0:b9:e4:4b:e8:6d:16:53:8c:f3:6d:01:b8:e9:
1a:3a:02:e3:12:29:a7:28:08:30:e0:ef:33:a8:2c:d2:1d:4f:
6e:91:bb:92:7e:bf:b7:22:91:58:bc:aa:53:47:eb:a2:99:68:
66:32:85:91:1e:aa:8e:13:b6:f1:ee:0c:9b:3d:e4:d5:7d:96:
cd:4e:51:b1:60:52:d9:76:1c:4a:01:78:99:1a:6c:83:d6:d7:
c9:8a:49:a6:ae:ab:0c:38:c6:19:f4:83:ae:3e:77:81:83:db:
49:1d:7c:2d:b3:eb:aa:99:2e:ab:e9:a3:8c:7e:d4:c7:9b:43:
8d:8b:41:9b:10:19:82:69:77:7d:af:2d:8a:b3:c9:73:0e:78:
7a:38:09:9a:32:d3:43:a4:e8:16:d0:d0:b6:0c:39:e8:76:d4:
61:e6:c4:8f:15:99:52:1a:63:88:07:cf:dc:b5:98:86:15:b4:
18:18:1a:6f:c9:88:af:19:4b:05:90:3d:d1:8f:04:2a:18:b3:
7e:13:b5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHegtagN0B4ovK2uxS7EijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2
OGVkMGUwHhcNMjUwNjA2MjMwMTA5WhcNMjUwNjA3MjMwMTA5WjAzMTEwLwYDVQQD
EyhkMWQ4Zjc5ZDI5NzhkYmM2MDRlZjJjMWYyNWQ0NzkyYmM4ZDc0ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmM1S7SntuQ8tIcfRsgt5SmwBar
YIySfNOYkP/t8YRZsIPC2sVMpkObG9XY4416n2P7V8/fcIzgwc0t3xJMNooSCtuj
KgBE1uz5goGsNUB/VYI0ABcInQpk4ZyWYqy63K1fsRVVHcAQ9waQqjhS7+RzvK2r
Pt3NKgxrXnlk2T9Tq5TYSNSMKXmfbubp+hY7sKg/FW1LoIZeMSWA+wLNDFRPUMWQ
o2DdaLTCCq3ACCD+1SvZqncdv9M8LTeMYhtbMXHSuCt9Tc5hoKCI0kykRQ9Kk2eD
L3ZiZWMyaSBu3fO0u1xKTh1b1I5KsuviTAv9bGer88ZO936TE4LuBWrJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHY950peNvGBO8sHyXUeSvI102PMB8GA1UdIwQY
MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt
OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj
LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMEXj3NK
kMDRlHN02E/LKif7BByACxLRTYeesTBcNYKwlUPV7J5r5Bxj+sFrkIcyH6Vy2wbf
tNsnbeC55EvobRZTjPNtAbjpGjoC4xIppygIMODvM6gs0h1PbpG7kn6/tyKRWLyq
U0froploZjKFkR6qjhO28e4Mmz3k1X2WzU5RsWBS2XYcSgF4mRpsg9bXyYpJpq6r
DDjGGfSDrj53gYPbSR18LbPrqpkuq+mjjH7Ux5tDjYtBmxAZgml3fa8tirPJcw54
ejgJmjLTQ6ToFtDQtgw56HbUYebEjxWZUhpjiAfP3LWYhhW0GBgab8mIrxlLBZA9
0Y8EKhizfhO19g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:21 2025 by rpki-client