Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: w645d5GIKQdcLwuV8oQzoUHeKr3OVNfQx7KR2ko/M5Y=
Subject key identifier: 1B:B4:92:D5:16:72:90:27:E6:13:2A:7E:E9:87:AA:42:A9:1E:85:37
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019766292EA3C24D0325945AD9ED51A55ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 14E9
Signing time: Thu 12 Jun 2025 22:01:04 +0000
Manifest this update: Thu 12 Jun 2025 22:01:04 +0000
Manifest next update: Fri 13 Jun 2025 22:01:04 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: eyIQz+HCWhNS7KNAxp2niEXlhkZ6oBr6jr74QGL5jqA=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:2e:a3:c2:4d:03:25:94:5a:d9:ed:51:a5:5a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jun 12 22:01:04 2025 GMT
Not After : Jun 13 22:01:04 2025 GMT
Subject: CN=1bb492d516729027e6132a7ee987aa42a91e8537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:21:76:03:c1:8e:db:23:34:41:b3:d0:69:
70:09:28:4b:72:ef:e0:da:33:08:41:63:0d:78:0f:
46:85:b1:8f:7c:e3:04:0e:b8:90:d5:46:a4:89:7f:
c5:60:4a:e6:01:2e:97:ec:0f:ee:bc:d0:bd:b2:23:
ea:0f:e1:43:30:ed:4b:ef:7a:90:ce:06:c5:92:25:
06:2f:dd:a1:7c:01:ed:ed:a2:ed:86:34:27:7f:a2:
3f:ff:ef:47:2e:e7:d4:d5:78:47:5f:2c:e7:aa:b8:
64:84:90:98:de:19:10:e3:01:2e:74:e4:49:e8:65:
a1:7e:18:ff:6e:85:2e:fb:9e:2c:63:6e:bb:20:fd:
91:6a:6c:e7:f2:7b:d6:76:80:a0:53:b9:e5:ce:27:
73:13:b4:4e:19:70:65:2c:1b:66:56:a9:8e:97:f1:
ff:df:65:ff:e6:13:d8:32:0a:f0:7b:99:49:23:f5:
a7:e1:fb:e0:3e:e7:e3:a1:14:f2:96:9f:b6:94:66:
00:f0:a7:84:ea:1c:da:84:53:8c:af:8a:41:79:c9:
e4:14:0b:ee:72:1c:25:52:d8:2f:ac:46:84:54:66:
de:2e:69:aa:d6:f3:fb:ef:d7:f8:82:e8:29:9c:55:
da:d4:08:5c:04:d8:0c:b0:9d:ec:05:63:f7:6f:c6:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:92:D5:16:72:90:27:E6:13:2A:7E:E9:87:AA:42:A9:1E:85:37
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:4a:2d:31:4b:86:ba:7d:45:32:55:c3:df:fd:84:a1:e5:
f7:d6:94:f6:70:76:d4:1a:fe:b8:bc:b6:c8:82:4f:83:3c:84:
db:f5:d8:e1:d1:49:8f:70:78:f3:f5:4b:00:b4:bb:3d:46:3d:
c6:1c:2a:f7:db:59:7d:7c:45:ab:2c:d3:26:4f:15:77:b7:c0:
20:46:95:da:f9:5f:b8:1c:50:2c:f7:d9:c6:57:db:ae:d4:6c:
bf:d4:fa:83:d6:cf:22:af:f2:45:54:e2:26:a8:55:14:02:14:
cd:c9:01:c7:a5:0d:ea:92:05:3a:e9:c7:ab:4a:cb:4c:c5:bd:
1f:55:b1:6f:46:85:f3:88:90:6b:0c:1b:1e:ea:fb:68:67:90:
34:15:a1:e0:32:ee:ee:01:9f:96:b9:8e:eb:e1:72:5e:1c:77:
ff:32:a5:02:c6:34:8e:ba:bf:7b:c6:a7:0a:17:6e:7b:69:dc:
60:25:24:83:b1:39:28:23:50:aa:b4:47:32:09:18:74:bf:08:
3e:e6:40:c3:f0:c2:77:e2:20:88:5d:85:7c:a2:a9:03:de:7b:
27:d2:6f:9f:5a:3d:7b:fd:c5:e8:88:ba:5e:92:76:9b:32:fe:
72:1d:1e:aa:74:02:2e:33:26:0d:d7:c9:98:ed:f8:cd:2a:c1:
b6:76:0e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmKS6jwk0DJZRa2e1RpVq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTI3MjBjNTdkYjAyNzYxMGM4MjFjODQwNDdiMTEwYmMz
NmRkYzMwHhcNMjUwNjEyMjIwMTA0WhcNMjUwNjEzMjIwMTA0WjAzMTEwLwYDVQQD
EygxYmI0OTJkNTE2NzI5MDI3ZTYxMzJhN2VlOTg3YWE0MmE5MWU4NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsQhdgPBjtsjNEGz0GlwCShLcu/g
2jMIQWMNeA9GhbGPfOMEDriQ1UakiX/FYErmAS6X7A/uvNC9siPqD+FDMO1L73qQ
zgbFkiUGL92hfAHt7aLthjQnf6I//+9HLufU1XhHXyznqrhkhJCY3hkQ4wEudORJ
6GWhfhj/boUu+54sY267IP2Ramzn8nvWdoCgU7nlzidzE7ROGXBlLBtmVqmOl/H/
32X/5hPYMgrwe5lJI/Wn4fvgPufjoRTylp+2lGYA8KeE6hzahFOMr4pBecnkFAvu
chwlUtgvrEaEVGbeLmmq1vP779f4gugpnFXa1AhcBNgMsJ3sBWP3b8axiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu0ktUWcpAn5hMqfumHqkKpHoU3MB8GA1UdIwQY
MBaAFA3icgxX2wJ2EMghyEBHsRC8Nt3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAt
NjMxMGJmNjMwNTFmLzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAtNjMxMGJmNjMwNTFm
LzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANINKLTFL
hrp9RTJVw9/9hKHl99aU9nB21Br+uLy2yIJPgzyE2/XY4dFJj3B48/VLALS7PUY9
xhwq99tZfXxFqyzTJk8Vd7fAIEaV2vlfuBxQLPfZxlfbrtRsv9T6g9bPIq/yRVTi
JqhVFAIUzckBx6UN6pIFOunHq0rLTMW9H1Wxb0aF84iQawwbHur7aGeQNBWh4DLu
7gGflrmO6+FyXhx3/zKlAsY0jrq/e8anChdue2ncYCUkg7E5KCNQqrRHMgkYdL8I
PuZAw/DCd+IgiF2FfKKpA957J9Jvn1o9e/3F6Ii6XpJ2mzL+ch0eqnQCLjMmDdfJ
mO34zSrBtnYOsA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 23:22:40 2025 by rpki-client