Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: RjT6PAwkIuvJYU7Cpt5Gf0fp4hMncNW7wIe7yfFrCfE=
Subject key identifier: 3D:9C:20:CC:16:77:5C:C6:96:73:CB:3F:59:5B:47:04:98:8F:A7:0C
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01976EBDEDC1FB20AF93E0BE9EC21517126C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 14:00:30 +0000
Manifest this update: Sat 14 Jun 2025 14:00:30 +0000
Manifest next update: Sun 15 Jun 2025 14:00:30 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: EPZyKRh7xExtXt9T4Lp1D9LnS6oOH9uGzs3hlH1eBTY=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:ed:c1:fb:20:af:93:e0:be:9e:c2:15:17:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 14 14:00:30 2025 GMT
Not After : Jun 15 14:00:30 2025 GMT
Subject: CN=3d9c20cc16775cc69673cb3f595b4704988fa70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:8d:ed:75:56:e2:8f:3c:4f:a7:39:50:61:
20:a9:b1:8a:83:fd:bc:af:1b:d0:33:1d:8d:a2:be:
fc:7e:3c:f7:76:e2:2d:0c:6e:49:ac:9f:45:3d:70:
fa:1a:f1:b4:a5:93:49:e0:c1:06:53:55:a4:a2:c9:
a6:42:ba:e7:fe:ef:c6:9b:d6:c0:1c:ff:fe:db:5e:
ee:7e:f1:dd:3e:43:27:e1:ae:ea:4b:89:c9:f1:3a:
fd:91:b3:0c:c2:e4:40:ad:19:b1:3e:fe:d5:46:ac:
39:b5:c6:a0:ae:a9:33:0f:c6:46:b9:35:ed:39:39:
9f:9c:fc:94:92:a9:f5:09:e4:ac:1c:24:40:3a:25:
19:e3:f7:4e:97:be:b0:e0:9e:dd:20:a7:2e:e8:8f:
57:67:a1:04:e4:a4:73:27:cc:e3:18:0f:1e:bb:e9:
29:29:06:fc:6f:07:91:13:91:a0:2a:1f:f7:95:3f:
a9:cb:79:d9:e1:b0:18:ac:5a:b5:5c:a4:98:88:ce:
ac:a5:b4:66:43:0f:40:ca:e3:59:89:cd:71:2f:c5:
be:76:1e:fc:b8:d0:67:95:ac:f7:47:6d:16:39:4c:
38:45:49:01:1f:55:fc:10:75:51:0a:c2:6d:6c:a3:
4d:1b:f3:61:3c:1d:02:63:22:92:e4:68:3b:6e:79:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:20:CC:16:77:5C:C6:96:73:CB:3F:59:5B:47:04:98:8F:A7:0C
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:c7:bd:74:6e:ae:47:48:bf:0b:9d:86:da:ea:6b:7c:ce:
85:b4:72:bb:6c:eb:61:8b:43:24:34:74:2b:6a:39:d6:ef:f7:
37:68:78:da:28:49:ea:01:d4:61:57:ef:a8:6f:f1:3c:c8:40:
fa:be:3b:8c:d2:7d:1f:18:3a:49:e9:24:2d:d1:1c:71:fa:3e:
e2:73:bd:49:bf:b7:10:50:04:6f:fa:d3:78:4a:72:62:ae:b5:
92:ca:3f:7c:e5:3e:31:ce:ad:4f:ef:af:61:8a:ef:2e:18:a3:
39:49:f5:f3:1f:19:dd:23:0c:e0:cc:f2:93:7f:bd:eb:92:32:
d0:59:1f:47:f4:1c:0d:5d:fc:c0:62:a2:19:c5:a7:88:2b:c2:
1c:c6:1f:84:54:f3:c9:e8:62:e6:70:c2:2a:86:43:c4:65:c4:
57:fe:66:99:f9:55:fa:eb:0c:39:c7:03:e8:75:60:96:36:26:
c6:65:a4:67:a1:0d:35:21:e3:20:8a:b9:7d:30:5f:6a:60:20:
7a:57:0c:42:bc:a7:a6:a7:bb:d3:37:ab:40:cf:fd:c4:8e:7c:
f7:14:fa:d5:6d:9d:1d:f6:18:22:11:bb:ca:ef:ec:69:23:5d:
34:b6:86:19:28:9a:27:cb:d9:48:17:31:11:db:db:24:58:d3:
fd:91:32:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduve3B+yCvk+C+nsIVFxJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwNjE0MTQwMDMwWhcNMjUwNjE1MTQwMDMwWjAzMTEwLwYDVQQD
EygzZDljMjBjYzE2Nzc1Y2M2OTY3M2NiM2Y1OTViNDcwNDk4OGZhNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPaN7XVW4o88T6c5UGEgqbGKg/28
rxvQMx2Nor78fjz3duItDG5JrJ9FPXD6GvG0pZNJ4MEGU1WkosmmQrrn/u/Gm9bA
HP/+217ufvHdPkMn4a7qS4nJ8Tr9kbMMwuRArRmxPv7VRqw5tcagrqkzD8ZGuTXt
OTmfnPyUkqn1CeSsHCRAOiUZ4/dOl76w4J7dIKcu6I9XZ6EE5KRzJ8zjGA8eu+kp
KQb8bweRE5GgKh/3lT+py3nZ4bAYrFq1XKSYiM6spbRmQw9AyuNZic1xL8W+dh78
uNBnlaz3R20WOUw4RUkBH1X8EHVRCsJtbKNNG/NhPB0CYyKS5Gg7bnnSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2cIMwWd1zGlnPLP1lbRwSYj6cMMB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDLHvXRu
rkdIvwudhtrqa3zOhbRyu2zrYYtDJDR0K2o51u/3N2h42ihJ6gHUYVfvqG/xPMhA
+r47jNJ9Hxg6SekkLdEccfo+4nO9Sb+3EFAEb/rTeEpyYq61kso/fOU+Mc6tT++v
YYrvLhijOUn18x8Z3SMM4Mzyk3+965Iy0FkfR/QcDV38wGKiGcWniCvCHMYfhFTz
yehi5nDCKoZDxGXEV/5mmflV+usMOccD6HVgljYmxmWkZ6ENNSHjIIq5fTBfamAg
elcMQrynpqe70zerQM/9xI589xT61W2dHfYYIhG7yu/saSNdNLaGGSiaJ8vZSBcx
EdvbJFjT/ZEyUA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:33:51 2025 by rpki-client