Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: DZjjzAaI/vZU5Y7j+C2al96bx9RJ/mISF4HH7SSgHB8=
Subject key identifier: 30:65:41:1E:4C:E2:B6:09:06:45:B3:00:9F:B2:12:D5:97:DE:41:E5
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 01974DE98AC648D189872D21802555D19917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0B8F
Signing time: Sun 08 Jun 2025 05:00:40 +0000
Manifest this update: Sun 08 Jun 2025 05:00:40 +0000
Manifest next update: Mon 09 Jun 2025 05:00:40 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: +E51kbYVwl1P3vphk1Z60X5D9YguFt9I5Tu6Qx8n4qY=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:8a:c6:48:d1:89:87:2d:21:80:25:55:d1:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jun 8 05:00:40 2025 GMT
Not After : Jun 9 05:00:40 2025 GMT
Subject: CN=3065411e4ce2b6090645b3009fb212d597de41e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:07:f5:75:89:9e:ef:c8:16:ef:a9:bc:cb:e2:
65:0a:5a:6d:78:00:ea:82:8f:89:aa:e5:2f:64:34:
c6:4f:3a:33:30:d1:1c:5d:dc:37:80:cb:5a:86:f1:
79:18:f8:d0:87:b4:c0:8c:32:8e:ba:91:de:b3:f4:
03:ec:ee:8a:f5:ea:c2:87:a6:b9:e1:9a:bc:6c:f7:
38:b3:dc:7c:6f:20:a1:a2:68:ba:17:95:48:cb:c9:
33:d6:17:8f:01:8f:62:3d:7f:44:b5:78:74:1f:48:
53:b3:5d:87:76:21:d4:b9:f1:02:57:66:60:98:2b:
1a:a6:99:f5:ec:33:73:b3:c1:1b:0d:14:34:be:2c:
31:16:55:5a:36:cd:20:11:ce:91:3e:f1:82:9d:a3:
0c:1c:d0:91:75:85:13:a3:47:2e:13:84:26:17:a5:
09:e5:7e:1f:ad:02:5c:32:c7:63:10:43:c0:43:36:
eb:46:98:44:9c:b1:f0:64:d9:3c:57:8d:07:8a:b7:
e9:ae:2b:ce:ad:20:f4:93:9b:d1:bd:46:2b:c0:a2:
1c:94:1d:af:d0:a5:d8:7a:fb:87:c3:b2:53:5b:31:
68:2f:a9:c3:ce:c6:b2:80:73:cf:29:92:9f:66:9c:
cf:44:ab:9c:22:3c:0b:e6:63:2e:d2:a3:23:b7:4f:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:41:1E:4C:E2:B6:09:06:45:B3:00:9F:B2:12:D5:97:DE:41:E5
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:c5:9b:42:be:e9:4e:0c:1e:ae:1a:cb:6d:0d:a7:a7:9f:
3f:b2:ef:37:a5:ad:90:27:16:6f:0e:cf:98:e5:6c:99:3e:00:
a0:34:c9:6e:45:8e:19:00:a2:f5:58:6f:cc:95:86:09:1b:46:
c2:78:14:bf:37:f7:7a:3a:e5:37:b7:66:e8:5e:a0:4a:af:3c:
3a:e5:cd:e1:79:fc:6f:d2:b0:3a:04:5c:15:49:42:e2:c1:d7:
5b:f5:a3:7d:43:c0:c8:0d:17:30:9d:75:7c:cb:91:24:31:ff:
c5:70:b3:41:e2:83:53:c6:59:34:3f:96:ae:2a:a4:0b:e9:7e:
74:2f:af:59:3b:a0:01:bc:7c:c4:4d:c4:e3:b9:6a:96:45:12:
09:4f:e0:c8:d9:04:bc:c9:28:43:58:7c:10:21:06:60:47:a8:
f1:a0:33:9a:39:80:61:55:e3:f9:a4:fa:1a:ab:68:f8:f2:45:
e4:ae:90:16:dd:17:d6:5e:19:85:62:b1:7b:59:4b:99:0a:77:
8f:aa:a9:ff:a9:9f:a8:e7:bf:6d:41:0a:2c:f9:3e:75:f1:9a:
86:72:28:31:e5:d9:54:ed:c6:bb:b1:21:26:1b:6f:1d:1e:2f:
3d:19:02:d3:91:f8:de:1e:7e:ce:02:e7:00:37:f2:8d:44:bf:
13:20:2d:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6YrGSNGJhy0hgCVV0ZkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGUwYzRiNDc1MDEwYTViNDJhZGVmMzMzYzM5YmRjMWFk
Yjk2MTEwHhcNMjUwNjA4MDUwMDQwWhcNMjUwNjA5MDUwMDQwWjAzMTEwLwYDVQQD
EygzMDY1NDExZTRjZTJiNjA5MDY0NWIzMDA5ZmIyMTJkNTk3ZGU0MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wf1dYme78gW76m8y+JlClpteADq
go+JquUvZDTGTzozMNEcXdw3gMtahvF5GPjQh7TAjDKOupHes/QD7O6K9erCh6a5
4Zq8bPc4s9x8byChomi6F5VIy8kz1hePAY9iPX9EtXh0H0hTs12HdiHUufECV2Zg
mCsappn17DNzs8EbDRQ0viwxFlVaNs0gEc6RPvGCnaMMHNCRdYUTo0cuE4QmF6UJ
5X4frQJcMsdjEEPAQzbrRphEnLHwZNk8V40HirfprivOrSD0k5vRvUYrwKIclB2v
0KXYevuHw7JTWzFoL6nDzsaygHPPKZKfZpzPRKucIjwL5mMu0qMjt09D+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBlQR5M4rYJBkWzAJ+yEtWX3kHlMB8GA1UdIwQY
MBaAFNcODEtHUBCltCre8zPDm9wa25YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEt
Yzk3MzhjZTViYWVmLzEvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEtYzk3MzhjZTViYWVm
LzEvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7rFm0K+
6U4MHq4ay20Np6efP7LvN6WtkCcWbw7PmOVsmT4AoDTJbkWOGQCi9VhvzJWGCRtG
wngUvzf3ejrlN7dm6F6gSq88OuXN4Xn8b9KwOgRcFUlC4sHXW/WjfUPAyA0XMJ11
fMuRJDH/xXCzQeKDU8ZZND+WriqkC+l+dC+vWTugAbx8xE3E47lqlkUSCU/gyNkE
vMkoQ1h8ECEGYEeo8aAzmjmAYVXj+aT6Gqto+PJF5K6QFt0X1l4ZhWKxe1lLmQp3
j6qp/6mfqOe/bUEKLPk+dfGahnIoMeXZVO3Gu7EhJhtvHR4vPRkC05H43h5+zgLn
ADfyjUS/EyAt9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:07:26 2025 by rpki-client