Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: PA5uZVgX00ODNro0YpScJkNGJClyZT40ov/InPdZHok=
Subject key identifier: 8A:A8:1C:30:E8:6D:EA:00:FE:96:A8:D4:7B:BD:3B:87:40:73:99:EC
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01989636EE2117503B367388D5E8AD086BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 23:00:38 +0000
Manifest this update: Sun 10 Aug 2025 23:00:38 +0000
Manifest next update: Mon 11 Aug 2025 23:00:38 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: /Lv2kLAZxfxLflSWnPQsIglX0L4vHDY339DFw5o3RKo=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:ee:21:17:50:3b:36:73:88:d5:e8:ad:08:6b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Aug 10 23:00:38 2025 GMT
Not After : Aug 11 23:00:38 2025 GMT
Subject: CN=8aa81c30e86dea00fe96a8d47bbd3b87407399ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:96:94:8f:41:4b:69:42:46:8b:eb:3a:9a:
f7:9d:ad:fe:79:d4:87:86:40:af:c8:0b:8d:4f:93:
25:18:bc:1f:e6:73:47:1e:18:6f:dd:a5:61:35:0f:
f2:7b:0d:16:73:78:42:71:81:d3:b1:bf:e5:32:66:
cc:37:86:fa:ad:93:38:29:ba:29:6e:d5:28:3e:82:
32:ba:01:6e:b2:70:c1:7d:6f:b0:4a:81:d9:41:18:
11:8e:9c:c7:72:4c:d1:4d:ea:b1:f5:17:54:00:ed:
5b:a9:64:e0:96:24:28:68:23:a0:7c:dc:b8:ae:05:
1e:12:56:e9:e3:62:bc:59:0f:1e:54:87:df:5c:df:
2e:af:2c:c3:dc:d7:96:a5:d9:ff:41:b5:b4:81:b9:
98:2b:a0:76:8e:ea:b6:cb:52:45:b7:ab:01:ba:10:
ac:b4:0c:a0:2f:5e:6e:e1:33:bd:6a:dd:8b:6b:90:
40:78:1f:29:06:90:d3:1f:66:23:22:35:95:10:b4:
60:78:43:c9:79:51:c3:dd:fa:91:2e:0d:66:2e:e0:
d9:8e:a7:26:9b:31:9b:ee:db:d3:70:44:e0:1c:fd:
11:61:77:db:af:7a:76:35:c0:c5:e9:21:e0:ef:52:
96:c8:64:13:e9:c4:2b:39:0c:4c:b4:5f:c2:4f:3c:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:1C:30:E8:6D:EA:00:FE:96:A8:D4:7B:BD:3B:87:40:73:99:EC
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a1:33:86:48:f9:9f:35:07:2e:02:9c:c3:0f:f6:6f:fc:da:
bb:e6:08:c1:3e:46:84:94:35:8b:6c:26:cc:a7:0f:80:9c:cc:
7b:cc:74:54:bf:fb:05:fb:c3:35:3f:24:f0:38:ff:53:2d:fe:
62:4a:4e:c0:d2:51:e8:27:91:bf:83:7e:ae:aa:a4:2e:1f:44:
d8:f9:8a:36:db:30:f7:b2:02:e1:56:40:4f:fd:bb:53:92:a1:
58:d4:de:36:46:60:b8:e7:87:6a:e7:81:b9:83:83:b2:f9:9e:
66:2f:ae:56:cd:44:12:dd:8d:da:f7:b5:72:5d:db:2a:25:3b:
e8:1f:60:eb:35:1c:ba:a5:bf:5f:28:9b:01:29:57:88:06:7c:
d6:f1:c4:48:4b:01:65:90:dc:f3:5d:60:eb:ac:b7:b9:15:dc:
da:2e:6f:07:da:af:f0:01:52:d2:46:95:ab:2f:72:75:03:82:
81:1d:aa:9f:db:c0:6e:0b:65:81:3c:c7:8a:cd:25:85:60:ea:
f5:5f:42:c8:28:63:19:c8:5a:85:18:75:0a:2b:a2:ac:6f:87:
43:2c:c0:a6:42:0d:c2:34:d2:a9:b8:a4:37:16:7a:18:3e:44:
bf:f8:0e:3d:d4:20:8e:b6:20:85:c4:e3:74:55:fa:a8:30:d8:
2d:b2:b5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNu4hF1A7NnOI1eitCGurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk
N2JjNzUwHhcNMjUwODEwMjMwMDM4WhcNMjUwODExMjMwMDM4WjAzMTEwLwYDVQQD
Eyg4YWE4MWMzMGU4NmRlYTAwZmU5NmE4ZDQ3YmJkM2I4NzQwNzM5OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0uWlI9BS2lCRovrOpr3na3+edSH
hkCvyAuNT5MlGLwf5nNHHhhv3aVhNQ/yew0Wc3hCcYHTsb/lMmbMN4b6rZM4Kbop
btUoPoIyugFusnDBfW+wSoHZQRgRjpzHckzRTeqx9RdUAO1bqWTgliQoaCOgfNy4
rgUeElbp42K8WQ8eVIffXN8uryzD3NeWpdn/QbW0gbmYK6B2juq2y1JFt6sBuhCs
tAygL15u4TO9at2La5BAeB8pBpDTH2YjIjWVELRgeEPJeVHD3fqRLg1mLuDZjqcm
mzGb7tvTcETgHP0RYXfbr3p2NcDF6SHg71KWyGQT6cQrOQxMtF/CTzyRtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqoHDDobeoA/pao1Hu9O4dAc5nsMB8GA1UdIwQY
MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt
NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl
LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKEzhkj5
nzUHLgKcww/2b/zau+YIwT5GhJQ1i2wmzKcPgJzMe8x0VL/7BfvDNT8k8Dj/Uy3+
YkpOwNJR6CeRv4N+rqqkLh9E2PmKNtsw97IC4VZAT/27U5KhWNTeNkZguOeHaueB
uYODsvmeZi+uVs1EEt2N2ve1cl3bKiU76B9g6zUcuqW/XyibASlXiAZ81vHESEsB
ZZDc811g66y3uRXc2i5vB9qv8AFS0kaVqy9ydQOCgR2qn9vAbgtlgTzHis0lhWDq
9V9CyChjGchahRh1CiuirG+HQyzApkINwjTSqbikNxZ6GD5Ev/gOPdQgjrYghcTj
dFX6qDDYLbK11g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:17 2025 by rpki-client