Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: 0MyrCsoRhTgL6q11V7IVqoi8VHNp8+q88QkluCj28tY=
Subject key identifier: CA:47:83:C3:F5:41:B5:8F:83:99:11:3A:2C:D3:99:8C:54:F5:A1:D6
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0197729B002B51085D63B4C8A27C01B54C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 08:00:50 +0000
Manifest this update: Sun 15 Jun 2025 08:00:50 +0000
Manifest next update: Mon 16 Jun 2025 08:00:50 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: C5Rv2jZvu2Uzfch25gA03IrcuAewyS4LxkrwtgdaMAE=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9b:00:2b:51:08:5d:63:b4:c8:a2:7c:01:b5:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 15 08:00:50 2025 GMT
Not After : Jun 16 08:00:50 2025 GMT
Subject: CN=ca4783c3f541b58f8399113a2cd3998c54f5a1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:aa:9e:70:63:e8:70:18:62:a2:cf:87:fd:
fc:4e:80:09:f6:95:a8:82:87:84:81:b1:a9:ae:24:
71:bc:74:9b:43:60:97:87:2d:20:70:c9:13:f4:5e:
3b:3a:04:78:90:77:f0:7e:2f:20:d3:bf:f1:8b:31:
27:4d:50:8d:06:23:6a:84:19:bc:49:45:c9:54:af:
b0:9d:96:47:d7:65:1e:40:95:f6:a6:0f:e1:21:bf:
c7:71:76:e1:33:4c:ea:60:bf:b6:2e:38:8e:62:20:
bd:8f:f1:b8:3e:1a:a4:f3:e7:29:96:45:88:fb:12:
13:a8:30:d4:96:b3:55:39:4b:1d:8d:d2:b2:65:98:
a5:06:3c:c9:c0:8d:f3:6f:9d:3a:78:d6:82:10:59:
b0:c5:35:85:d5:ee:67:22:61:5d:c7:fb:13:f5:aa:
60:a7:ad:f7:77:4c:ff:7d:02:bd:67:39:79:b8:c2:
5a:34:df:04:0c:0c:1a:4f:4a:6e:52:3d:75:a0:03:
6d:ae:8c:9a:50:47:e5:5c:09:3e:e6:70:b6:9c:a3:
5f:14:c0:ca:41:7b:32:0f:a5:a2:bb:5c:0e:09:c4:
5d:23:7d:ce:05:91:9f:17:ab:0d:0a:11:13:85:26:
45:d2:cb:d5:31:74:8b:b7:e3:eb:fa:aa:2e:0d:fb:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:83:C3:F5:41:B5:8F:83:99:11:3A:2C:D3:99:8C:54:F5:A1:D6
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0c:95:a8:aa:64:14:63:33:af:b2:2f:61:08:a2:35:3f:f2:
64:22:2c:4d:47:a3:98:db:97:7a:d5:4e:7e:f2:c2:9c:d1:88:
9b:e8:50:ca:06:8f:38:cb:47:5d:14:20:29:34:17:38:6a:6d:
88:d8:6e:c9:a0:9f:b3:c5:7b:33:12:28:9d:4f:4b:04:d8:9e:
ad:70:29:55:b3:e7:e2:d1:aa:8a:30:43:18:32:a1:d0:ac:6d:
5b:a8:0d:6a:9d:33:20:8b:cb:0c:d8:75:14:b7:6b:94:ce:ed:
05:b4:8b:c2:96:32:12:62:03:66:d3:2b:5a:bc:7d:db:43:2c:
1a:66:05:db:79:cc:1d:28:48:db:5e:68:bb:ab:78:94:dc:31:
f2:4b:a3:06:b2:f0:e1:ae:c1:f7:f7:44:b0:ce:e3:0d:e4:ef:
f5:7c:53:d4:74:7e:da:c1:a9:39:8a:55:f6:7e:c1:a1:44:cb:
6d:af:79:aa:12:d8:cf:6c:7d:27:27:f8:6c:6d:ba:4a:ec:71:
dc:cb:cc:32:c0:f4:7f:01:fd:a1:62:13:66:03:bf:16:12:b8:
3a:f7:10:fd:af:f6:bd:15:f8:9d:b6:24:e1:0d:10:e1:aa:6e:
d3:2d:c7:08:a5:6c:7b:2e:71:20:c1:31:86:7b:68:6e:91:4b:
69:7c:7b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdymwArUQhdY7TIonwBtUx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwNjE1MDgwMDUwWhcNMjUwNjE2MDgwMDUwWjAzMTEwLwYDVQQD
EyhjYTQ3ODNjM2Y1NDFiNThmODM5OTExM2EyY2QzOTk4YzU0ZjVhMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApliqnnBj6HAYYqLPh/38ToAJ9pWo
goeEgbGpriRxvHSbQ2CXhy0gcMkT9F47OgR4kHfwfi8g07/xizEnTVCNBiNqhBm8
SUXJVK+wnZZH12UeQJX2pg/hIb/HcXbhM0zqYL+2LjiOYiC9j/G4Phqk8+cplkWI
+xITqDDUlrNVOUsdjdKyZZilBjzJwI3zb506eNaCEFmwxTWF1e5nImFdx/sT9apg
p633d0z/fQK9Zzl5uMJaNN8EDAwaT0puUj11oANtroyaUEflXAk+5nC2nKNfFMDK
QXsyD6Wiu1wOCcRdI33OBZGfF6sNChEThSZF0svVMXSLt+Pr+qouDftxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpHg8P1QbWPg5kROizTmYxU9aHWMB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAyVqKpk
FGMzr7IvYQiiNT/yZCIsTUejmNuXetVOfvLCnNGIm+hQygaPOMtHXRQgKTQXOGpt
iNhuyaCfs8V7MxIonU9LBNierXApVbPn4tGqijBDGDKh0KxtW6gNap0zIIvLDNh1
FLdrlM7tBbSLwpYyEmIDZtMrWrx920MsGmYF23nMHShI215ou6t4lNwx8kujBrLw
4a7B9/dEsM7jDeTv9XxT1HR+2sGpOYpV9n7BoUTLba95qhLYz2x9Jyf4bG26Suxx
3MvMMsD0fwH9oWITZgO/FhK4OvcQ/a/2vRX4nbYk4Q0Q4apu0y3HCKVsey5xIMEx
hntobpFLaXx77A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:49 2025 by rpki-client