
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: vE+/vvqsP9VQ3AxmLKqqW2nHX5NYobeC2tpzDCmxUKQ=
Subject key identifier: 1C:A2:5A:43:5B:9B:21:27:FC:11:99:C4:42:AD:58:D0:27:4C:F9:B5
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 01974E5869245615347DF23A7EB02031181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 05F5
Signing time: Sun 08 Jun 2025 07:01:46 +0000
Manifest this update: Sun 08 Jun 2025 07:01:46 +0000
Manifest next update: Mon 09 Jun 2025 07:01:46 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: YgtqSBDD/LirQPmo4mxQdbdSYWCuVRcGe3b5DSX6ed0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:69:24:56:15:34:7d:f2:3a:7e:b0:20:31:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Jun 8 07:01:46 2025 GMT
Not After : Jun 9 07:01:46 2025 GMT
Subject: CN=1ca25a435b9b2127fc1199c442ad58d0274cf9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:71:31:60:e5:51:62:e4:e6:8b:a8:f6:97:
bb:59:db:91:5e:84:1e:27:86:6b:54:c8:c4:70:11:
cc:9b:0b:74:1d:c5:fe:50:dd:d8:26:e7:7e:f7:eb:
4f:f5:03:89:f1:ad:43:9a:aa:e5:b0:29:a1:a3:e4:
e6:3b:55:e5:ce:9a:96:b3:c9:1a:87:99:f1:06:85:
b6:1b:f0:be:3b:1b:cc:82:1d:c8:16:98:47:35:ff:
06:6a:da:fe:62:51:76:2f:23:bf:1e:1a:33:80:f5:
bc:1f:21:9c:6a:cd:e1:96:15:53:7a:1b:42:c3:29:
f6:61:89:fe:23:dd:dc:71:93:4b:1c:8d:98:84:6c:
d8:ac:b3:31:96:2c:f7:5d:34:da:e3:1e:01:01:38:
e0:5f:85:ad:ca:3c:e5:32:c4:6a:b5:18:13:51:a5:
da:1c:a8:60:eb:a9:f9:c7:2b:dc:1f:cd:bf:f1:c4:
3d:09:fc:55:cc:d2:bb:f9:8a:2a:25:29:d5:ab:7a:
8f:a7:2b:48:de:4c:c2:81:c3:74:e8:6a:91:b6:c6:
02:38:2b:64:63:9f:cf:2c:84:8b:0c:86:d9:c4:06:
13:f2:61:61:f7:bd:5e:e7:f4:10:b5:37:e7:96:0f:
3a:09:02:28:dc:05:ec:c0:61:94:e2:a3:b5:d8:f3:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:5A:43:5B:9B:21:27:FC:11:99:C4:42:AD:58:D0:27:4C:F9:B5
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:07:eb:8d:71:73:88:d9:4d:e0:4c:bd:bf:6e:93:ab:45:
14:41:58:53:d6:3d:63:ef:8b:29:3f:cb:fb:db:79:8d:ae:70:
a9:4e:3e:76:f9:ec:b3:16:f9:69:d9:d5:f0:7c:a4:a2:f0:fd:
da:43:67:b7:f8:fe:04:0d:ba:86:51:69:a2:ee:a0:af:f7:68:
8e:2f:58:ad:78:f8:53:62:1e:d8:b5:8e:61:5a:20:82:56:58:
30:b8:c5:54:9f:72:32:02:a1:71:93:e1:cd:ec:08:b3:4e:47:
aa:18:0d:87:fd:6d:bd:84:ab:94:7c:70:14:dd:83:a7:47:12:
cf:b1:29:2b:f6:d6:3c:2a:d3:76:47:f0:1d:fd:ba:7d:0b:8b:
c8:37:0f:22:21:71:06:0b:01:f9:11:75:d9:87:b2:24:a9:f8:
df:5b:41:69:28:34:84:c1:0d:7d:f6:c0:9d:06:3b:00:95:a9:
58:17:be:fa:e3:72:0e:2c:75:71:98:0e:e8:19:1a:1c:01:28:
a9:5c:a3:ca:e1:93:30:10:4f:81:72:95:2d:54:4f:53:0b:2e:
13:27:c7:d9:63:17:17:95:b1:6a:96:34:2c:2a:ff:e0:e7:54:
c5:92:b4:c0:ca:76:1f:4e:e4:a4:ff:c2:ba:cf:bc:f5:02:20:
8e:b7:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:15 2025 by rpki-client