Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: oV970u1JdXOp+gedjf66viMV/KkDVsem/trFvckJgLc=
Subject key identifier: 58:D1:52:D4:47:6B:A5:46:9B:C4:F6:27:E9:31:0C:A7:AF:9B:CA:95
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 01975E6F15719E6014DB0D95B78DBF99B308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 14E5
Signing time: Wed 11 Jun 2025 10:00:27 +0000
Manifest this update: Wed 11 Jun 2025 10:00:27 +0000
Manifest next update: Thu 12 Jun 2025 10:00:27 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: yK8YrHu6pN6+Zca4qNw2/dmC/oBfqLWIQcqcd2yn20k=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:15:71:9e:60:14:db:0d:95:b7:8d:bf:99:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jun 11 10:00:27 2025 GMT
Not After : Jun 12 10:00:27 2025 GMT
Subject: CN=58d152d4476ba5469bc4f627e9310ca7af9bca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:9a:fc:5c:ee:21:9b:f8:17:ee:70:ef:ee:
73:5f:8f:25:a0:f1:39:7c:9e:e2:51:1a:53:4f:59:
e9:1f:1a:ab:84:44:e9:2d:cd:70:54:05:41:bb:ef:
da:ed:ec:47:1b:37:22:f7:13:92:c4:a8:cf:c4:84:
45:0f:a8:c9:3d:ba:51:33:f6:15:f1:8a:b0:ed:1a:
ef:02:8d:a2:6b:70:22:4d:9f:b0:79:4d:23:80:30:
94:d1:66:18:df:0f:7a:08:f6:15:6b:63:f5:4f:51:
0e:fb:57:43:0d:32:89:5b:44:65:83:2f:01:1f:8e:
d1:d7:5e:1b:2d:3d:40:fc:a7:33:92:b1:e9:08:b6:
e3:f1:ee:19:3a:1e:71:e7:50:66:89:35:72:61:5c:
20:5c:3a:a1:29:32:f1:0b:d2:15:8d:3f:bd:2f:3e:
34:6b:a1:9e:76:e1:49:68:1a:c0:f1:77:57:2c:ba:
60:e7:ff:8b:79:58:61:6e:8f:13:01:90:dd:cb:a0:
1d:84:ee:20:34:09:2a:9f:59:73:c7:85:5a:96:55:
5e:3a:27:10:49:be:3c:15:f5:d3:3d:6c:77:95:30:
80:07:d3:b3:a8:58:df:78:fb:49:0e:df:77:97:39:
b0:ae:b2:e7:37:ca:91:25:8f:f5:f2:1c:98:dd:cf:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:52:D4:47:6B:A5:46:9B:C4:F6:27:E9:31:0C:A7:AF:9B:CA:95
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:13:92:5e:24:36:70:d2:88:fc:c6:df:72:d9:7c:97:87:ab:
34:38:16:12:ec:5c:73:2a:a4:23:ad:d9:19:55:ce:41:ff:ff:
c3:b3:20:41:89:a3:7b:ac:70:e0:46:76:aa:9c:1f:65:f5:e6:
24:f5:a0:b0:ca:c7:b7:7f:58:8f:03:8b:6c:ec:b0:1e:37:a1:
80:06:64:06:87:cf:11:22:3e:0a:be:7d:cc:d1:76:ff:47:56:
22:58:79:7f:be:05:ba:81:17:a8:ed:1f:26:0d:06:53:fc:82:
9d:83:65:b0:be:07:0c:74:04:b3:65:89:ba:85:17:e6:48:80:
a8:1c:df:a3:e5:34:d6:f6:2e:a0:ef:ee:e4:6a:60:f1:f8:9e:
11:04:52:2d:66:b7:90:9b:c3:6c:e0:67:03:b7:9c:5f:ab:b1:
39:b9:c8:34:15:c5:56:d7:32:ae:b7:eb:64:05:08:df:87:c1:
bb:7b:6e:a1:3c:e6:7f:59:1f:03:2d:d0:02:b9:58:ca:11:c6:
4f:10:25:94:c5:75:22:fa:b2:ad:35:5d:d5:73:d8:4b:f8:01:
2c:cf:6a:2e:7a:3d:8b:e8:7d:2f:f1:2c:0b:74:79:0f:33:df:
15:df:d0:3c:1d:60:2e:98:37:12:74:21:47:ad:bd:7e:5d:67:
73:42:fa:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdebxVxnmAU2w2Vt42/mbMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTI3MjBjNTdkYjAyNzYxMGM4MjFjODQwNDdiMTEwYmMz
NmRkYzMwHhcNMjUwNjExMTAwMDI3WhcNMjUwNjEyMTAwMDI3WjAzMTEwLwYDVQQD
Eyg1OGQxNTJkNDQ3NmJhNTQ2OWJjNGY2MjdlOTMxMGNhN2FmOWJjYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPua/FzuIZv4F+5w7+5zX48loPE5
fJ7iURpTT1npHxqrhETpLc1wVAVBu+/a7exHGzci9xOSxKjPxIRFD6jJPbpRM/YV
8Yqw7RrvAo2ia3AiTZ+weU0jgDCU0WYY3w96CPYVa2P1T1EO+1dDDTKJW0Rlgy8B
H47R114bLT1A/KczkrHpCLbj8e4ZOh5x51BmiTVyYVwgXDqhKTLxC9IVjT+9Lz40
a6GeduFJaBrA8XdXLLpg5/+LeVhhbo8TAZDdy6AdhO4gNAkqn1lzx4VallVeOicQ
Sb48FfXTPWx3lTCAB9OzqFjfePtJDt93lzmwrrLnN8qRJY/18hyY3c/aWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjRUtRHa6VGm8T2J+kxDKevm8qVMB8GA1UdIwQY
MBaAFA3icgxX2wJ2EMghyEBHsRC8Nt3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAt
NjMxMGJmNjMwNTFmLzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAtNjMxMGJmNjMwNTFm
LzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehOSXiQ2
cNKI/Mbfctl8l4erNDgWEuxccyqkI63ZGVXOQf//w7MgQYmje6xw4EZ2qpwfZfXm
JPWgsMrHt39YjwOLbOywHjehgAZkBofPESI+Cr59zNF2/0dWIlh5f74FuoEXqO0f
Jg0GU/yCnYNlsL4HDHQEs2WJuoUX5kiAqBzfo+U01vYuoO/u5Gpg8fieEQRSLWa3
kJvDbOBnA7ecX6uxObnINBXFVtcyrrfrZAUI34fBu3tuoTzmf1kfAy3QArlYyhHG
TxAllMV1IvqyrTVd1XPYS/gBLM9qLno9i+h9L/EsC3R5DzPfFd/QPB1gLpg3EnQh
R629fl1nc0L68w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:21:49 2025 by rpki-client