Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: QfBBinMI0od+OkAhTQQ1lNmKc/8SzwWyQjTp3vPDmvY=
Subject key identifier: 4F:BC:85:BE:8C:F5:2C:28:CF:A7:BB:B0:E6:E1:FF:B6:0E:B5:D4:7A
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01984E1E7B4EA9F43BEC32A05D435F57C31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1596
Signing time: Sun 27 Jul 2025 23:01:17 +0000
Manifest this update: Sun 27 Jul 2025 23:01:17 +0000
Manifest next update: Mon 28 Jul 2025 23:01:17 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: NzmjWevIYuULFOmV6JEMisXh+r2ztVZj4SveUrID6y8=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:7b:4e:a9:f4:3b:ec:32:a0:5d:43:5f:57:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jul 27 23:01:17 2025 GMT
Not After : Jul 28 23:01:17 2025 GMT
Subject: CN=4fbc85be8cf52c28cfa7bbb0e6e1ffb60eb5d47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:e4:4e:bd:59:38:17:f2:a0:19:00:f9:0e:
dc:c2:7c:87:87:37:1f:31:dd:01:9a:1d:fc:3f:61:
28:84:d9:e4:04:84:34:4b:7d:48:fa:e9:d9:b4:a0:
4b:98:fd:e0:e3:38:f9:a6:18:3d:83:82:d1:21:29:
74:7d:8c:a0:6e:93:7b:92:48:17:fb:38:95:4e:d7:
1d:98:5a:51:02:ad:64:76:9b:51:b1:ff:51:10:91:
95:15:e6:79:6b:01:13:d0:f1:f5:58:26:82:b6:72:
60:62:23:87:8a:6e:ea:31:50:05:91:1e:af:97:6b:
39:a5:03:f7:59:07:b6:4e:a0:c2:dd:f0:3d:2a:41:
f9:fb:e9:41:1d:93:a4:ab:89:d9:9c:d0:11:64:46:
9f:d3:83:10:44:58:18:3a:22:74:44:bd:e9:dd:14:
d5:e4:c5:a2:52:04:1d:75:0f:7d:e9:10:3b:22:d8:
87:b2:90:18:8a:a4:3b:bf:a7:64:dd:cd:4b:fc:f1:
a2:a6:a6:69:44:d0:14:07:df:64:dc:b1:4f:2d:c2:
89:b8:32:37:34:2e:60:a9:c9:d3:83:f6:66:bc:e9:
2f:10:ca:9d:43:0e:d1:d5:e3:0d:1e:27:d9:4b:3f:
1b:72:14:df:93:38:6d:59:b7:dd:56:a3:ec:e6:e0:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:85:BE:8C:F5:2C:28:CF:A7:BB:B0:E6:E1:FF:B6:0E:B5:D4:7A
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b5:b4:6a:da:06:27:9d:2c:21:6a:16:6e:7c:0c:17:bd:ab:
ff:8e:96:02:c3:36:be:a1:ac:03:25:ba:1d:77:a6:42:61:ae:
af:3e:83:50:6c:5c:cf:21:1f:c0:46:e2:18:28:86:16:12:aa:
12:f7:ff:c2:58:42:8b:d8:35:ba:4c:25:a3:4a:e4:53:e8:f1:
ab:0f:36:e7:57:4f:d2:c0:81:e6:fa:5d:8c:c8:b0:9b:1f:9b:
e9:5b:f8:9e:b4:61:42:1e:16:3f:0b:44:04:85:e9:e0:b1:5c:
97:eb:a1:0a:0a:4e:e8:c4:37:9e:ea:5f:e9:e5:ab:64:fd:80:
55:1c:e7:81:ba:91:3f:60:13:ee:46:6e:e5:47:db:f1:2a:e5:
92:4d:ff:f3:fb:a2:1e:f5:5a:c6:3e:27:98:ae:76:1b:48:42:
b1:ac:9a:fb:48:61:e7:cd:07:bb:e5:96:66:f6:1c:78:9c:85:
1f:87:3d:4a:a7:1c:68:b4:43:8b:28:0a:46:ea:5c:bd:b3:c5:
9b:c7:e8:ca:4a:1f:99:cd:13:d3:5a:04:63:5e:16:f4:cb:fd:
6b:6e:0b:f6:a3:aa:e5:0a:ce:e5:94:84:97:e2:a8:0e:d3:13:
f0:76:ef:1f:3b:2c:2b:b5:c6:1e:a1:44:a7:df:bd:1a:34:d5:
c6:d7:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:23:40 2025 by rpki-client