Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: pJuIz/lpUGdIeCznn4n6TGjS1uHtknyHGfhXOBRHWaM=
Subject key identifier: 38:53:52:28:E8:C4:5E:0B:2D:4A:68:A5:FF:53:8C:C2:6F:37:07:EC
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 01974A7AA2AF0390D2360C4ABF198F74F75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0ED6
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: SBD33h18iQGMBiS14W4+LOeMCdJWw3JRX0nVQGxnII4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a2:af:03:90:d2:36:0c:4a:bf:19:8f:74:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=38535228e8c45e0b2d4a68a5ff538cc26f3707ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:bd:e6:62:73:3b:57:56:c6:50:55:fa:47:
a7:7d:e8:22:05:13:9d:5a:38:77:74:00:e8:63:86:
fd:e0:09:fa:3b:52:4f:a5:1e:ae:14:d1:14:2f:a4:
7a:7a:8a:29:ec:ce:34:5f:dd:c3:2b:70:72:f7:3d:
ae:68:ad:34:f3:1d:49:9d:79:73:31:e8:16:ff:19:
17:3b:ca:88:90:18:d6:a2:b4:43:f9:4a:5b:dd:cf:
6b:40:72:a5:df:a8:01:be:51:fd:f4:fc:30:78:3b:
93:39:03:40:df:ae:ba:0f:1e:1a:a3:56:0b:d2:18:
27:16:1d:59:d6:dc:1a:ce:45:72:d3:e3:0c:98:bc:
31:53:74:d2:69:bc:cc:4e:78:75:9a:93:1b:5c:85:
ed:84:4d:59:3f:9b:a4:4d:cf:28:21:5e:0a:e6:a0:
51:b4:3d:08:85:7a:9e:b2:d4:fb:08:fd:7a:47:6f:
ca:11:a2:da:43:00:0f:f0:a2:29:ac:67:4b:eb:9b:
f8:8d:b9:c8:07:34:c5:44:b7:7c:2b:6b:98:a6:10:
05:b2:24:7b:3e:6a:14:aa:32:25:de:61:0b:6f:4f:
59:b0:19:0f:d6:55:9c:76:27:56:a0:10:a5:8c:f8:
59:d5:8c:2d:7b:1b:d6:14:f9:12:f7:c4:21:c8:50:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:52:28:E8:C4:5E:0B:2D:4A:68:A5:FF:53:8C:C2:6F:37:07:EC
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:b5:dc:c5:e5:54:b5:f5:84:ec:96:68:8c:66:f1:27:f6:
d6:f5:bc:12:a6:3c:97:13:31:8b:a7:f9:02:fd:31:50:57:44:
df:ef:0e:ba:d6:f1:2d:d2:fe:40:0c:f3:5b:76:00:fe:f2:d2:
89:9d:bf:a9:04:6b:f9:dd:03:92:40:fa:7e:f2:23:5e:c8:a5:
c8:ae:34:4a:d9:cb:98:87:7e:f3:69:06:ae:a7:a0:44:0e:8b:
cb:d4:e2:17:00:ee:d4:79:1e:4a:77:7d:e0:59:ca:c2:60:f0:
91:b5:42:db:fc:74:7f:b7:07:87:31:c3:14:7b:98:cc:da:26:
c4:0e:53:4e:f8:25:99:66:1b:d2:b4:42:a0:f5:3a:3e:81:bd:
93:35:7b:a5:91:2d:d4:1d:35:2c:67:8f:78:40:bd:18:48:da:
12:62:ac:0a:ef:4c:0f:60:b7:54:2c:e4:07:05:a1:c6:77:3b:
95:c0:b2:12:0a:b0:e1:3f:2f:c1:29:1c:f5:14:8e:3a:1c:9b:
4e:c6:9d:00:64:1e:4e:98:04:ff:9f:1d:e9:2a:c8:69:e6:f3:
e3:82:65:e8:62:0c:1b:7c:28:89:99:29:c7:93:d0:e2:3c:06:
69:06:ca:06:12:59:af:4b:0a:c7:9c:b6:70:40:d8:24:c6:e5:
db:b1:75:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdKeqKvA5DSNgxKvxmPdPdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjUwNjA3MTMwMDQwWhcNMjUwNjA4MTMwMDQwWjAzMTEwLwYDVQQD
EygzODUzNTIyOGU4YzQ1ZTBiMmQ0YTY4YTVmZjUzOGNjMjZmMzcwN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JC95mJzO1dWxlBV+kenfegiBROd
Wjh3dADoY4b94An6O1JPpR6uFNEUL6R6eoop7M40X93DK3By9z2uaK008x1JnXlz
MegW/xkXO8qIkBjWorRD+Upb3c9rQHKl36gBvlH99PwweDuTOQNA3666Dx4ao1YL
0hgnFh1Z1twazkVy0+MMmLwxU3TSabzMTnh1mpMbXIXthE1ZP5ukTc8oIV4K5qBR
tD0IhXqestT7CP16R2/KEaLaQwAP8KIprGdL65v4jbnIBzTFRLd8K2uYphAFsiR7
PmoUqjIl3mELb09ZsBkP1lWcdidWoBCljPhZ1YwtexvWFPkS98QhyFBNTwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDhTUijoxF4LLUpopf9TjMJvNwfsMB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC61
3MXlVLX1hOyWaIxm8Sf21vW8EqY8lxMxi6f5Av0xUFdE3+8OutbxLdL+QAzzW3YA
/vLSiZ2/qQRr+d0DkkD6fvIjXsilyK40StnLmId+82kGrqegRA6Ly9TiFwDu1Hke
Snd94FnKwmDwkbVC2/x0f7cHhzHDFHuYzNomxA5TTvglmWYb0rRCoPU6PoG9kzV7
pZEt1B01LGePeEC9GEjaEmKsCu9MD2C3VCzkBwWhxnc7lcCyEgqw4T8vwSkc9RSO
OhybTsadAGQeTpgE/58d6SrIaebz44Jl6GIMG3woiZkpx5PQ4jwGaQbKBhJZr0sK
x5y2cEDYJMbl27F19A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:01 2025 by rpki-client