Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: r4t2p16RQCTOfa6NUk2TmVQNxAU1mkjoUGswvD9TtQA=
Subject key identifier: D2:77:AC:17:05:1A:4C:DC:DF:51:A4:95:ED:4D:BD:B9:1C:F0:D7:61
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019747E7A658C215274BDCACC917EE5920EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0606
Signing time: Sat 07 Jun 2025 01:00:52 +0000
Manifest this update: Sat 07 Jun 2025 01:00:52 +0000
Manifest next update: Sun 08 Jun 2025 01:00:52 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 3d8lzMNIBU10X0u68jYLfNhQWwjGm5/uW/Wc7yNC7P8=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:a6:58:c2:15:27:4b:dc:ac:c9:17:ee:59:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jun 7 01:00:52 2025 GMT
Not After : Jun 8 01:00:52 2025 GMT
Subject: CN=d277ac17051a4cdcdf51a495ed4dbdb91cf0d761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:59:99:24:22:ff:95:df:a3:ca:76:19:68:
41:50:a9:5d:1c:57:55:93:4e:c3:e8:79:d1:3b:e9:
7e:ff:81:b2:6f:6f:4e:5a:d5:87:c9:01:7b:db:eb:
61:05:1e:b2:ad:2c:63:71:0f:32:dd:9f:fa:9e:53:
87:b5:d4:97:7b:0c:66:f9:4a:15:f4:88:c1:b5:95:
13:96:a9:d2:2e:81:38:0e:91:0c:1c:e6:9b:de:84:
48:3d:01:b0:84:76:2b:db:17:1c:e7:34:7b:f6:bb:
48:e5:62:b4:77:12:1b:73:39:23:b7:69:8a:9d:b8:
cd:6a:5b:90:ef:da:ad:32:17:6a:57:82:e7:b4:de:
f1:64:f7:a0:ac:22:4e:c4:c8:c1:f5:62:38:fc:6a:
44:34:2f:55:ac:c8:53:03:71:fc:8b:5e:89:b6:a0:
dc:83:6b:c3:f1:00:33:45:2f:c3:74:ed:e6:07:17:
98:4e:a7:cd:10:9a:9b:fb:e5:80:89:2f:cb:07:2d:
d4:a8:a8:42:c5:91:56:25:07:6a:9f:df:a6:fd:28:
4e:8b:c6:5a:10:65:62:ed:a5:42:9f:86:3f:24:62:
a9:8f:1d:15:b5:4a:4c:c3:19:55:30:c0:c4:03:fa:
48:04:72:1b:3c:1c:97:47:5f:c9:d5:1b:41:6b:71:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:AC:17:05:1A:4C:DC:DF:51:A4:95:ED:4D:BD:B9:1C:F0:D7:61
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:43:2a:60:f1:f4:92:a9:a9:50:bb:4f:52:94:57:f2:05:
87:4d:83:22:56:00:25:c2:e3:c4:ab:9a:24:64:39:7e:14:69:
b4:76:ce:16:51:f9:40:20:30:a3:9b:cb:3a:c9:e1:dc:fe:61:
19:aa:06:58:50:ac:e2:3a:7a:93:44:31:ad:3f:e5:c2:c5:87:
3a:54:7b:e0:e1:7d:3a:2a:06:8f:62:7f:74:c2:de:20:cb:0d:
0c:bb:4f:2b:49:3e:81:25:c1:83:a8:9b:21:24:9b:15:42:1b:
aa:54:98:b5:64:55:f4:7a:f9:e4:25:71:b5:81:b5:00:39:87:
6e:4d:2d:cf:18:82:c8:fa:1f:bb:f3:4e:6e:61:28:86:c3:53:
9d:c2:b9:11:c3:dc:8e:25:03:4e:ff:9a:98:07:bc:19:f5:9e:
92:b3:09:d0:d0:12:c2:75:48:11:ea:f1:25:4e:4d:d8:13:13:
c9:d4:8c:79:d4:de:d3:c6:0c:33:92:e5:fe:8b:34:f8:00:15:
0e:9d:65:93:96:c3:35:3c:33:fe:b2:0d:b0:12:4b:0a:ef:31:
c9:14:23:cd:66:62:3d:88:ba:5e:91:83:8f:df:9c:4f:17:2e:
7b:77:25:79:75:27:88:ae:db:9d:f6:22:50:7d:e9:4d:4e:d6:
4e:b7:a8:a6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdH56ZYwhUnS9ysyRfuWSDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDViNTczZmIwZDI2OTk5MmE3OWE5ZTZiNDVjZGQ2MjBk
ZWNjMTEwHhcNMjUwNjA3MDEwMDUyWhcNMjUwNjA4MDEwMDUyWjAzMTEwLwYDVQQD
EyhkMjc3YWMxNzA1MWE0Y2RjZGY1MWE0OTVlZDRkYmRiOTFjZjBkNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AJZmSQi/5Xfo8p2GWhBUKldHFdV
k07D6HnRO+l+/4Gyb29OWtWHyQF72+thBR6yrSxjcQ8y3Z/6nlOHtdSXewxm+UoV
9IjBtZUTlqnSLoE4DpEMHOab3oRIPQGwhHYr2xcc5zR79rtI5WK0dxIbczkjt2mK
nbjNaluQ79qtMhdqV4LntN7xZPegrCJOxMjB9WI4/GpENC9VrMhTA3H8i16JtqDc
g2vD8QAzRS/DdO3mBxeYTqfNEJqb++WAiS/LBy3UqKhCxZFWJQdqn9+m/ShOi8Za
EGVi7aVCn4Y/JGKpjx0VtUpMwxlVMMDEA/pIBHIbPByXR1/J1RtBa3HDBwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNJ3rBcFGkzc31Gkle1Nvbkc8NdhMB8GA1UdIwQY
MBaAFPvVtXP7DSaZkqeanmtFzdYg3swRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05VzFjX3NOSnBtU3A1cWVhMFhOMWlEZXpCRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQzOGMwLTU0ZTUtNGIzMy05NTAy
LTUwZjNkMWFlOTQ0Mi8xLzEtOVcxY19zTkpwbVNwNXFlYTBYTjFpRGV6QkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRiLzY0MzhjMC01NGU1LTRiMzMtOTUwMi01MGYzZDFhZTk0
NDIvMS8xLTlXMWNfc05KcG1TcDVxZWEwWE4xaURlekJFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOBD
KmDx9JKpqVC7T1KUV/IFh02DIlYAJcLjxKuaJGQ5fhRptHbOFlH5QCAwo5vLOsnh
3P5hGaoGWFCs4jp6k0QxrT/lwsWHOlR74OF9OioGj2J/dMLeIMsNDLtPK0k+gSXB
g6ibISSbFUIbqlSYtWRV9Hr55CVxtYG1ADmHbk0tzxiCyPofu/NObmEohsNTncK5
EcPcjiUDTv+amAe8GfWekrMJ0NASwnVIEerxJU5N2BMTydSMedTe08YMM5Ll/os0
+AAVDp1lk5bDNTwz/rINsBJLCu8xyRQjzWZiPYi6XpGDj9+cTxcue3cleXUniK7b
nfYiUH3pTU7WTreopg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:42 2025 by rpki-client