Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: aYyXXKUU/ppSy+Ub1KAinawntI6KrQlMWQVvKLtpEr8=
Subject key identifier: D1:49:E2:A4:EA:8F:55:48:A2:72:79:C4:35:4D:E1:ED:03:98:10:01
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01974968269DB44618DB6706286C330A5ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: Rk+CVNg+VMMaNGD49C77jOiQbmsLrlc5Ntg4kbFKHp0=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:26:9d:b4:46:18:db:67:06:28:6c:33:0a:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=d149e2a4ea8f5548a27279c4354de1ed03981001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:bd:b8:46:05:80:71:74:8e:0e:1f:94:50:
7d:62:f0:13:da:67:fb:4f:4d:6d:83:9d:e1:e8:57:
4e:92:f8:a4:90:24:09:23:18:03:a9:d3:e8:54:38:
92:ba:9d:02:22:9b:1f:82:fd:b3:df:ee:22:44:25:
7f:0c:04:a2:2e:91:db:cc:3b:76:48:83:44:f5:fb:
14:8b:fa:ad:35:d3:26:61:8b:bf:95:84:98:2f:92:
d9:44:eb:9f:d8:35:11:f9:44:a7:c6:5e:af:c1:d0:
fe:7b:13:a0:1d:69:a2:09:2b:c6:9b:57:fc:94:fc:
f9:95:3c:07:a6:33:7d:05:d4:27:89:59:e6:26:af:
f8:18:ec:7d:85:67:12:85:41:9e:ec:84:83:48:ae:
f0:67:a0:8b:e7:94:e0:a5:f2:44:2d:2a:71:b0:d0:
7d:7e:a6:3f:3a:c0:57:96:ba:46:2f:16:18:ed:34:
f1:cb:51:c5:5b:bb:4a:e5:dd:cd:97:4b:4a:c6:c0:
9d:8d:f7:33:1b:48:0e:c9:31:b4:1e:4e:26:e9:b3:
de:9e:f5:f0:9c:14:93:6c:66:03:d1:d6:f9:e7:db:
8b:63:bf:9f:92:e0:00:44:81:70:6d:b8:88:c4:9f:
12:92:35:f0:fd:80:dc:72:b3:a7:4b:39:5d:a7:a8:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:E2:A4:EA:8F:55:48:A2:72:79:C4:35:4D:E1:ED:03:98:10:01
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:49:68:44:5d:f4:f5:4f:24:e2:20:e4:79:f0:f0:73:37:d2:
46:87:fb:cc:9d:b2:53:56:e9:d2:8c:8f:31:86:30:fe:bb:f7:
a8:1e:96:62:64:51:af:4a:2b:97:b3:46:85:bf:50:0d:74:e7:
7a:e0:b3:ad:38:dd:fe:36:00:17:e4:cf:41:18:84:f7:75:fa:
2f:22:95:4a:db:89:bb:46:4f:7c:88:8d:31:c9:b7:a9:70:4f:
c5:28:0f:2c:ef:77:f0:3f:cf:ae:67:7c:bf:82:d7:e7:7c:03:
80:40:0c:87:9f:dc:a4:af:eb:51:41:72:ed:42:e3:3d:7f:d0:
ac:35:b8:01:07:15:c9:02:ff:6b:00:04:1c:73:05:b6:97:ab:
c3:25:a7:7e:fd:5a:06:cb:b4:80:13:5d:94:e7:60:5f:29:5d:
4c:8c:8d:08:34:7e:d7:39:ed:c0:bb:7f:ec:96:2e:3e:95:c2:
e2:e5:e4:1d:3f:c9:31:2d:fb:17:be:c9:6a:c4:a4:bb:ca:00:
79:93:0b:5e:5f:a8:93:fd:c2:f8:e5:9b:a5:8e:a6:15:94:28:
42:62:e1:b6:26:03:b7:06:7e:a2:f0:b9:32:cb:56:1d:c6:35:
6b:4f:66:ef:25:c8:2d:ed:67:4a:02:d9:3f:cb:ff:0d:37:9d:
21:1c:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:27 2025 by rpki-client