Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: X9czZbBITAZA2WmOEwr8u/rH+dgQkfmMjOtSXZZY+/o=
Subject key identifier: 16:10:5E:64:3D:6A:6E:28:09:6D:A7:9D:91:AD:A7:24:73:10:19:BC
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0197613958FE28319DE61A804D1D55E2C621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 23:00:37 +0000
Manifest this update: Wed 11 Jun 2025 23:00:37 +0000
Manifest next update: Thu 12 Jun 2025 23:00:37 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: CIA38GueGX4JGOSvcxWw0SYtxAqmn2mTqoGBtMoJh38=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:58:fe:28:31:9d:e6:1a:80:4d:1d:55:e2:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 11 23:00:37 2025 GMT
Not After : Jun 12 23:00:37 2025 GMT
Subject: CN=16105e643d6a6e28096da79d91ada724731019bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:95:61:f1:b8:c3:9a:29:68:87:4b:b6:2e:
4a:39:a0:a5:db:39:8b:3b:13:8f:da:c2:b2:b6:b4:
fc:0b:d3:a1:94:70:97:1e:38:08:3c:07:91:63:43:
7d:2f:69:af:a9:78:cb:e2:e9:1c:33:cd:2f:31:f0:
72:97:b4:57:d2:28:c5:02:28:b4:67:cd:66:bb:81:
3e:8b:f1:96:4e:eb:39:21:63:38:5f:de:dc:fd:7f:
d4:cd:62:43:cc:eb:4b:ce:d6:c0:67:0e:9e:c3:6d:
33:dc:1d:39:74:87:e0:c6:40:f7:60:59:fd:d3:c1:
f2:13:e7:3b:b6:88:e9:bb:c6:1a:d5:38:0b:3a:c8:
57:93:a8:4e:7e:dd:42:93:2f:06:ef:9b:07:b2:47:
b7:4b:ac:cf:89:59:5d:1d:a8:67:08:7c:ee:a1:9d:
df:41:27:a4:ff:51:b6:ac:93:91:d2:1f:5b:90:be:
10:30:61:57:6c:36:14:d0:16:96:22:de:0a:12:70:
70:58:ba:5e:23:68:c4:5e:01:58:91:76:9b:df:91:
0e:8c:17:14:68:fb:3b:f3:99:6e:4c:34:ea:58:2f:
3f:88:6d:84:c6:72:b5:2c:28:36:fc:c6:02:ba:1a:
58:46:73:62:be:fc:07:9a:f3:66:1c:65:8e:85:3f:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:5E:64:3D:6A:6E:28:09:6D:A7:9D:91:AD:A7:24:73:10:19:BC
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:13:5e:5d:df:cb:48:62:40:82:76:6d:52:b7:e8:d7:87:
d8:67:2b:48:90:a8:02:84:33:fb:8b:30:0b:5c:34:02:b4:6e:
d7:fb:e7:f9:89:c0:c3:d0:2a:45:c2:a5:37:50:6f:7e:1b:eb:
5f:e9:02:32:e8:1f:a1:d5:f2:58:9e:4c:fb:05:46:21:04:8f:
db:b3:4f:2b:d1:29:3a:86:33:67:46:50:2c:a9:23:6e:92:97:
2f:20:89:ea:7d:c2:b9:12:a9:47:17:ea:8e:26:81:73:4b:34:
69:30:c0:1d:9b:ab:d4:fe:ff:04:db:04:f9:77:63:43:e3:0e:
21:f4:ae:33:bc:3d:26:1c:af:2c:6e:ba:63:35:dc:48:ec:ea:
26:c6:91:71:6e:dc:71:05:be:02:5c:ed:bf:5d:03:67:b5:56:
86:cc:4b:7c:3e:c1:85:fb:13:38:32:a0:f3:0c:4a:0a:5b:ff:
d2:14:97:92:ab:cf:fe:26:4c:bf:c9:f7:d4:a9:12:14:8b:55:
43:e1:19:89:61:70:2f:2a:f5:3f:48:ab:af:64:54:d7:7a:cc:
1e:35:2c:08:84:47:7d:55:bc:d9:fc:c4:79:4a:ee:e5:d2:58:
f8:00:ba:f8:7e:c6:71:12:ca:bc:5d:13:3d:4c:19:9c:89:d0:
ed:d9:a3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhOVj+KDGd5hqATR1V4sYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwNjExMjMwMDM3WhcNMjUwNjEyMjMwMDM3WjAzMTEwLwYDVQQD
EygxNjEwNWU2NDNkNmE2ZTI4MDk2ZGE3OWQ5MWFkYTcyNDczMTAxOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHOVYfG4w5opaIdLti5KOaCl2zmL
OxOP2sKytrT8C9OhlHCXHjgIPAeRY0N9L2mvqXjL4ukcM80vMfByl7RX0ijFAii0
Z81mu4E+i/GWTus5IWM4X97c/X/UzWJDzOtLztbAZw6ew20z3B05dIfgxkD3YFn9
08HyE+c7tojpu8Ya1TgLOshXk6hOft1Cky8G75sHske3S6zPiVldHahnCHzuoZ3f
QSek/1G2rJOR0h9bkL4QMGFXbDYU0BaWIt4KEnBwWLpeI2jEXgFYkXab35EOjBcU
aPs785luTDTqWC8/iG2ExnK1LCg2/MYCuhpYRnNivvwHmvNmHGWOhT8AZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYQXmQ9am4oCW2nnZGtpyRzEBm8MB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeITXl3f
y0hiQIJ2bVK36NeH2GcrSJCoAoQz+4swC1w0ArRu1/vn+YnAw9AqRcKlN1Bvfhvr
X+kCMugfodXyWJ5M+wVGIQSP27NPK9EpOoYzZ0ZQLKkjbpKXLyCJ6n3CuRKpRxfq
jiaBc0s0aTDAHZur1P7/BNsE+XdjQ+MOIfSuM7w9JhyvLG66YzXcSOzqJsaRcW7c
cQW+Alztv10DZ7VWhsxLfD7BhfsTODKg8wxKClv/0hSXkqvP/iZMv8n31KkSFItV
Q+EZiWFwLyr1P0irr2RU13rMHjUsCIRHfVW82fzEeUru5dJY+AC6+H7GcRLKvF0T
PUwZnInQ7dmjFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:09:37 2025 by rpki-client