
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: Adhuj99c/mRMlgON5b0K31OPBa9fV6fUk7kb0baPSJI=
Subject key identifier: 28:87:F0:8D:D9:79:80:B1:5F:3D:AE:2A:A0:D3:0A:F4:7A:1A:57:DE
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 01976F62E447AA148309E27BEB8ABC35642D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 04F9
Signing time: Sat 14 Jun 2025 17:00:41 +0000
Manifest this update: Sat 14 Jun 2025 17:00:41 +0000
Manifest next update: Sun 15 Jun 2025 17:00:41 +0000
Files and hashes: 1: C34tazcwNVlNSOFrV60y2M-X8qQ.roa (hash: b9R8fiAJDWhh3NSy/h3YHxxWL9I8BBsmTu4q52FZ+Mo=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: 9c1Kl5vRYy/hRZUIutgkqfXhqiHqAJLZBk0FETGs8Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e4:47:aa:14:83:09:e2:7b:eb:8a:bc:35:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Jun 14 17:00:41 2025 GMT
Not After : Jun 15 17:00:41 2025 GMT
Subject: CN=2887f08dd97980b15f3dae2aa0d30af47a1a57de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:6b:e1:48:a7:f4:c5:c5:1a:2a:38:fe:7a:
84:fe:62:0d:11:96:70:d1:75:3c:88:83:35:36:7c:
4e:ac:ce:d4:14:56:b8:0b:f7:ac:11:40:3a:6d:02:
ee:3b:95:ee:79:00:ae:ff:a2:61:f8:83:d8:5d:c6:
94:9a:af:fb:6c:39:31:eb:7b:e3:1b:55:bc:92:08:
09:11:78:1d:0d:bc:8a:03:5b:fa:96:4c:c8:4e:e2:
b5:af:31:27:32:cd:52:1a:ad:21:b3:bf:0c:26:69:
a2:46:3c:47:04:e8:99:83:22:9e:f1:c8:ec:70:f6:
0e:a3:06:47:52:ba:07:d6:db:0d:08:69:44:e2:ba:
06:76:85:a7:a2:99:3b:b3:9e:9c:f7:d9:e6:30:b6:
a4:e9:73:b7:39:46:ce:96:a4:92:78:f5:31:04:b1:
2d:3b:f8:1e:cf:1c:47:61:e1:6c:2e:7a:0f:04:49:
13:6a:65:4e:da:2a:64:c5:74:9a:bd:7d:9f:75:2e:
fa:81:23:0a:76:82:0b:24:d2:7f:d9:56:6e:6f:57:
73:3c:ef:5e:1a:25:b9:88:2d:c7:63:44:a5:59:50:
df:1e:e2:06:a7:0c:9e:e9:27:31:d9:f4:29:aa:c2:
51:4d:07:7e:b7:07:42:79:a0:68:6e:1a:9e:a3:0c:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:F0:8D:D9:79:80:B1:5F:3D:AE:2A:A0:D3:0A:F4:7A:1A:57:DE
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:08:9a:f8:b2:fa:aa:d3:e8:37:9d:ba:83:d7:44:79:0e:
9d:ef:b6:9e:c6:7c:14:e8:f1:b3:7e:6b:a5:c0:e3:f9:b4:8c:
a2:a6:3b:7e:2f:d5:22:1c:7e:3d:99:90:e4:fe:20:6a:1e:64:
f7:68:11:b3:df:af:b1:44:6d:ff:9c:26:e0:7c:91:2b:5c:b7:
0e:ba:e8:a9:36:11:4f:62:3d:ee:0f:7f:9e:b7:76:17:11:18:
53:f6:7e:a7:38:a6:4e:39:8a:35:85:17:41:0d:34:6f:31:d6:
ad:30:32:38:4e:e5:0c:90:d9:c8:9d:c8:3a:99:e2:f7:0d:97:
4d:21:11:c8:49:0d:3a:a2:23:22:bf:f2:a7:5a:8e:51:24:0f:
56:e7:1a:6b:ff:29:32:db:f1:69:50:85:92:cb:59:f1:45:9b:
4f:0a:86:29:cd:56:b6:b2:0a:85:e9:33:2a:9a:c4:1b:34:dc:
a9:e3:2d:da:a9:ae:79:ae:02:6c:74:8b:bf:46:09:22:5c:77:
c0:06:3a:91:ec:fa:42:91:6f:cd:30:32:8a:86:a3:55:2b:3e:
0b:6f:b7:ed:37:44:b4:c0:8e:32:10:3d:82:c0:ed:48:7c:a6:
44:3d:75:f0:3e:bc:7c:4c:e2:5f:18:08:98:19:93:a9:46:d2:
3d:dd:ea:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYuRHqhSDCeJ764q8NWQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4
MDhlYWUwHhcNMjUwNjE0MTcwMDQxWhcNMjUwNjE1MTcwMDQxWjAzMTEwLwYDVQQD
EygyODg3ZjA4ZGQ5Nzk4MGIxNWYzZGFlMmFhMGQzMGFmNDdhMWE1N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOZr4Uin9MXFGio4/nqE/mINEZZw
0XU8iIM1NnxOrM7UFFa4C/esEUA6bQLuO5XueQCu/6Jh+IPYXcaUmq/7bDkx63vj
G1W8kggJEXgdDbyKA1v6lkzITuK1rzEnMs1SGq0hs78MJmmiRjxHBOiZgyKe8cjs
cPYOowZHUroH1tsNCGlE4roGdoWnopk7s56c99nmMLak6XO3OUbOlqSSePUxBLEt
O/gezxxHYeFsLnoPBEkTamVO2ipkxXSavX2fdS76gSMKdoILJNJ/2VZub1dzPO9e
GiW5iC3HY0SlWVDfHuIGpwye6Scx2fQpqsJRTQd+twdCeaBobhqeowx3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiH8I3ZeYCxXz2uKqDTCvR6GlfeMB8GA1UdIwQY
MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt
NWY4MTY3MDI0OTY4LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4
LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzQImviy
+qrT6DeduoPXRHkOne+2nsZ8FOjxs35rpcDj+bSMoqY7fi/VIhx+PZmQ5P4gah5k
92gRs9+vsURt/5wm4HyRK1y3DrroqTYRT2I97g9/nrd2FxEYU/Z+pzimTjmKNYUX
QQ00bzHWrTAyOE7lDJDZyJ3IOpni9w2XTSERyEkNOqIjIr/yp1qOUSQPVucaa/8p
MtvxaVCFkstZ8UWbTwqGKc1WtrIKhekzKprEGzTcqeMt2qmuea4CbHSLv0YJIlx3
wAY6kez6QpFvzTAyioajVSs+C2+37TdEtMCOMhA9gsDtSHymRD118D68fEziXxgI
mBmTqUbSPd3qHA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:47 2025 by rpki-client