Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: zXIuT+ruJJypTq1DT0U0b54HmM+UCZf3mTPpLi6ijSw=
Subject key identifier: 63:04:B6:66:BA:AC:CA:27:15:DE:0B:36:48:9F:B4:9E:44:4A:30:93
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01974E57F056F5FBCD2E1E01B2D81E9B7E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:01:15 +0000
Manifest this update: Sun 08 Jun 2025 07:01:15 +0000
Manifest next update: Mon 09 Jun 2025 07:01:15 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: 0E65FQfJ5x6M6fXpgLCTneXXVdXevicl+S1YRRxJD84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f0:56:f5:fb:cd:2e:1e:01:b2:d8:1e:9b:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Jun 8 07:01:15 2025 GMT
Not After : Jun 9 07:01:15 2025 GMT
Subject: CN=6304b666baacca2715de0b36489fb49e444a3093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:71:52:35:f8:74:76:c8:f9:c3:ad:b9:b9:
65:d9:80:97:e5:d0:7b:60:7e:93:40:b5:04:c3:77:
a3:82:4b:4b:92:eb:9f:58:7e:fe:ce:c1:1d:36:ac:
4c:eb:5a:f7:6a:86:3f:2d:23:95:f1:c2:6d:e6:9a:
7d:45:09:89:e4:57:78:c8:43:3a:65:2a:e3:9d:bc:
c5:b2:c7:e1:f1:4b:b8:0a:f7:66:8c:78:0b:4e:86:
61:cd:d7:c0:b9:46:b1:11:54:a9:96:72:ce:a0:d1:
82:ed:0c:f3:be:29:2d:c4:09:9b:11:02:cf:8c:5e:
f0:d0:e5:f1:a0:ea:69:44:09:e9:49:6b:e0:5c:0b:
ca:cb:9b:d5:a8:a9:1c:7a:78:2d:82:07:e8:63:40:
f2:e9:6e:2a:1d:b3:60:22:f2:6d:96:b3:45:d2:fa:
74:41:fb:9c:10:ad:5c:fc:88:67:3d:3f:2a:1c:0c:
a0:84:3b:1f:3b:9f:26:6b:d7:03:a1:d3:a6:43:b9:
d8:6f:2c:bd:99:cf:f5:c5:d8:48:6c:4a:63:0f:9e:
1f:8b:71:e9:6d:d4:de:6d:95:bc:b9:c0:a4:38:3c:
7d:a6:e7:9d:3e:e4:d3:f4:28:36:42:a8:18:cc:35:
39:39:2f:30:5b:06:2b:a5:2e:60:da:62:f1:71:df:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:B6:66:BA:AC:CA:27:15:DE:0B:36:48:9F:B4:9E:44:4A:30:93
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:d9:d9:3e:4f:79:32:b1:ad:22:80:0d:74:a1:b6:dd:b7:
c8:21:e7:bf:36:d3:ce:58:ff:fd:0f:1d:f2:17:aa:16:92:23:
fd:1d:87:e3:f4:a1:e1:57:f5:95:b4:cd:a8:e2:0a:09:c8:06:
98:ff:80:4a:c5:c1:76:b1:0e:f6:9d:93:9c:35:f3:71:f5:7d:
45:63:cc:fb:29:b7:b8:70:15:65:00:0b:ab:ff:99:27:e1:76:
c8:df:14:81:95:16:44:61:2d:f6:95:5a:d0:69:09:c4:65:0a:
61:7b:1c:32:42:b5:00:19:c6:71:98:f2:e6:6e:92:63:5c:f8:
8a:00:40:12:de:f9:27:4d:13:5b:db:2a:79:a9:ea:f7:b2:31:
1a:18:af:df:1e:8a:81:f5:a9:23:4f:9b:c6:b5:10:f6:05:c2:
c0:55:b9:58:5e:2a:2b:51:a8:4f:f9:de:5e:8b:ee:fd:53:d5:
76:31:bf:51:20:02:0b:fd:b1:92:ab:21:5e:30:0f:98:82:b7:
f2:6d:39:b6:e2:8b:e0:33:74:eb:ff:79:91:e9:94:0a:0d:08:
d3:43:d6:d8:77:3c:b4:d7:0d:83:b4:13:77:eb:bf:10:29:b6:
57:ed:19:0e:0d:ea:71:6d:7f:47:54:e3:bc:a0:fa:61:98:be:
17:86:f5:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdOV/BW9fvNLh4Bstgem36FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm
ZTY0MTIwHhcNMjUwNjA4MDcwMTE1WhcNMjUwNjA5MDcwMTE1WjAzMTEwLwYDVQQD
Eyg2MzA0YjY2NmJhYWNjYTI3MTVkZTBiMzY0ODlmYjQ5ZTQ0NGEzMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JtxUjX4dHbI+cOtubll2YCX5dB7
YH6TQLUEw3ejgktLkuufWH7+zsEdNqxM61r3aoY/LSOV8cJt5pp9RQmJ5Fd4yEM6
ZSrjnbzFssfh8Uu4CvdmjHgLToZhzdfAuUaxEVSplnLOoNGC7QzzviktxAmbEQLP
jF7w0OXxoOppRAnpSWvgXAvKy5vVqKkcengtggfoY0Dy6W4qHbNgIvJtlrNF0vp0
QfucEK1c/IhnPT8qHAyghDsfO58ma9cDodOmQ7nYbyy9mc/1xdhIbEpjD54fi3Hp
bdTebZW8ucCkODx9puedPuTT9Cg2QqgYzDU5OS8wWwYrpS5g2mLxcd8VNwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGMEtma6rMonFd4LNkiftJ5ESjCTMB8GA1UdIwQY
MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm
LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi
M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgLZ
2T5PeTKxrSKADXShtt23yCHnvzbTzlj//Q8d8heqFpIj/R2H4/Sh4Vf1lbTNqOIK
CcgGmP+ASsXBdrEO9p2TnDXzcfV9RWPM+ym3uHAVZQALq/+ZJ+F2yN8UgZUWRGEt
9pVa0GkJxGUKYXscMkK1ABnGcZjy5m6SY1z4igBAEt75J00TW9sqeanq97IxGhiv
3x6KgfWpI0+bxrUQ9gXCwFW5WF4qK1GoT/neXovu/VPVdjG/USACC/2xkqshXjAP
mIK38m05tuKL4DN06/95kemUCg0I00PW2Hc8tNcNg7QTd+u/ECm2V+0ZDg3qcW1/
R1TjvKD6YZi+F4b1kA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:35:53 2025 by rpki-client