Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: cxfas8tfQUCD71kENLZvhQBfmZsFUuF6V5vAYGEIGPs=
Subject key identifier: 36:FB:25:14:30:D6:85:1F:39:28:2E:96:00:06:7C:93:84:EA:44:25
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 01974B567E5765DE70E50C279A1BA5F8748E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:00:49 +0000
Manifest this update: Sat 07 Jun 2025 17:00:49 +0000
Manifest next update: Sun 08 Jun 2025 17:00:49 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: 1uQOireRqRTpGxfJ8KTY8QrGMr/K1UteRyrgQ6Xreus=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:7e:57:65:de:70:e5:0c:27:9a:1b:a5:f8:74:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Jun 7 17:00:49 2025 GMT
Not After : Jun 8 17:00:49 2025 GMT
Subject: CN=36fb251430d6851f39282e9600067c9384ea4425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:e3:f5:60:27:05:a6:bc:c0:25:b0:da:46:
67:d6:05:9d:72:5a:bc:17:46:cb:e1:54:b0:40:84:
d9:f1:61:7c:9f:8e:95:f7:35:79:69:5d:8e:ca:9b:
78:74:b0:93:fc:c4:9b:b2:9a:56:00:12:2b:ed:b8:
11:f9:a6:87:7f:5c:fb:86:50:37:c7:fc:aa:44:37:
30:34:d0:1b:af:6e:3a:f5:08:68:70:01:d7:44:46:
03:31:a7:5f:ce:e3:3b:56:ea:df:9b:ce:b8:37:02:
b6:c3:48:77:b7:55:a0:97:55:0c:1f:e4:cd:4f:f5:
0e:bb:9e:d1:b5:96:ee:78:99:c6:21:a9:dd:9e:d9:
45:94:56:98:51:7b:c0:a2:fc:ff:7d:4e:c3:dc:09:
fb:e0:80:cb:e5:ae:d7:fd:db:62:3d:84:ce:da:19:
25:20:39:f2:78:79:09:8e:ce:ee:fc:04:ec:1b:fd:
15:91:64:3b:c1:7b:76:15:61:22:cd:b4:d5:f9:04:
7c:a4:c3:5f:71:74:6c:3d:af:c7:b2:15:d4:63:60:
3c:f5:fc:96:31:fe:f3:a6:77:37:cb:43:a8:6a:d4:
fd:75:e0:64:aa:91:8f:8d:19:11:38:5d:5f:e3:7b:
d0:0f:1d:d6:91:dc:6d:e7:f1:76:31:68:a0:a3:46:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:25:14:30:D6:85:1F:39:28:2E:96:00:06:7C:93:84:EA:44:25
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:c4:aa:33:b8:22:6e:1e:97:aa:62:7b:e3:fa:02:6f:0f:
72:44:c6:58:28:d7:ab:94:3b:bc:22:30:9d:51:ee:aa:d0:de:
66:ee:a2:6b:e3:41:ef:77:7a:0d:1c:8f:9b:18:e6:ee:2a:6e:
24:fd:8f:60:d4:92:e9:8e:4c:3d:11:8b:c0:b7:c6:1e:50:d1:
ca:d4:a7:5e:ad:de:e8:ad:59:99:26:bc:36:d8:07:a1:04:f6:
1d:21:5d:65:d0:29:1b:ea:41:41:a3:f7:37:ed:32:23:2d:e4:
08:e6:e0:5c:69:94:fd:00:e3:49:0b:26:e4:33:5a:92:93:b2:
a7:48:67:2f:3f:a6:2c:07:8b:2e:8f:54:8a:0f:6e:df:2b:85:
a0:28:43:0d:86:d3:df:d2:31:73:f0:92:29:e8:88:a7:18:21:
f0:96:59:54:74:f4:f3:55:1e:ba:05:65:3e:3e:a4:05:54:57:
c3:21:fe:2b:50:f6:d7:f5:0e:e1:07:a9:73:b8:89:68:b8:0f:
cb:0d:e4:7e:52:7d:77:ae:c4:f2:d3:31:14:8c:7d:71:45:29:
3f:47:f2:44:db:5d:8d:7b:06:6e:b5:54:b7:2b:c7:5e:00:f5:
98:e9:ac:20:d5:24:0d:92:0a:e6:6a:44:94:4a:0b:1a:cc:d4:
ed:27:a5:74
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdLVn5XZd5w5Qwnmhul+HSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYzBmMGRhMzlhMjJhNzlmODBjMWYzNzliNjY4YjkwZjZk
NzQ3MDgwHhcNMjUwNjA3MTcwMDQ5WhcNMjUwNjA4MTcwMDQ5WjAzMTEwLwYDVQQD
EygzNmZiMjUxNDMwZDY4NTFmMzkyODJlOTYwMDA2N2M5Mzg0ZWE0NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKzj9WAnBaa8wCWw2kZn1gWdclq8
F0bL4VSwQITZ8WF8n46V9zV5aV2Oypt4dLCT/MSbsppWABIr7bgR+aaHf1z7hlA3
x/yqRDcwNNAbr2469QhocAHXREYDMadfzuM7Vurfm864NwK2w0h3t1Wgl1UMH+TN
T/UOu57RtZbueJnGIandntlFlFaYUXvAovz/fU7D3An74IDL5a7X/dtiPYTO2hkl
IDnyeHkJjs7u/ATsG/0VkWQ7wXt2FWEizbTV+QR8pMNfcXRsPa/HshXUY2A89fyW
Mf7zpnc3y0OoatT9deBkqpGPjRkROF1f43vQDx3Wkdxt5/F2MWigo0ZYgwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDb7JRQw1oUfOSgulgAGfJOE6kQlMB8GA1UdIwQY
MBaAFPrA8No5oip5+AwfN5tmi5D210cIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zRHcyam1pS25uNERCODNtMmFMa1BiWFJ3Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODZlZDViLWJjYzEtNGQwMy05NWRh
LWI5OWQ0ZDAwZjgzMS8xLzEtc0R3MmptaUtubjREQjgzbTJhTGtQYlhSd2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg4Lzg2ZWQ1Yi1iY2MxLTRkMDMtOTVkYS1iOTlkNGQwMGY4
MzEvMS8xLXNEdzJqbWlLbm40REI4M20yYUxrUGJYUndnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXjE
qjO4Im4el6pie+P6Am8PckTGWCjXq5Q7vCIwnVHuqtDeZu6ia+NB73d6DRyPmxjm
7ipuJP2PYNSS6Y5MPRGLwLfGHlDRytSnXq3e6K1ZmSa8NtgHoQT2HSFdZdApG+pB
QaP3N+0yIy3kCObgXGmU/QDjSQsm5DNakpOyp0hnLz+mLAeLLo9Uig9u3yuFoChD
DYbT39Ixc/CSKeiIpxgh8JZZVHT081UeugVlPj6kBVRXwyH+K1D21/UO4Qepc7iJ
aLgPyw3kflJ9d67E8tMxFIx9cUUpP0fyRNtdjXsGbrVUtyvHXgD1mOmsINUkDZIK
5mpElEoLGszU7SeldA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:43 2025 by rpki-client