Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: xEOhDSkMjcnMS+R1kY45hcy98H+eVUCkCwzziGAtwKM=
Subject key identifier: 1D:D9:07:32:30:C7:2B:A3:C6:5A:73:05:79:C5:50:26:11:50:2D:C9
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0197462FCE7EF266B9C61822A0731E2A4C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0D7F
Signing time: Fri 06 Jun 2025 17:00:27 +0000
Manifest this update: Fri 06 Jun 2025 17:00:27 +0000
Manifest next update: Sat 07 Jun 2025 17:00:27 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: 9ngBlkTz1jy3KlcCsZuNHafxhabiJH47RBzB9cQHVNE=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ce:7e:f2:66:b9:c6:18:22:a0:73:1e:2a:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jun 6 17:00:27 2025 GMT
Not After : Jun 7 17:00:27 2025 GMT
Subject: CN=1dd9073230c72ba3c65a730579c5502611502dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:66:88:b6:a9:c8:09:66:43:d1:c1:4f:64:
cb:97:08:37:24:70:db:d7:63:c2:bc:e6:7a:50:6b:
40:21:f9:6f:7b:f9:12:68:71:27:04:88:d2:7e:32:
bc:76:46:3e:29:fe:a9:1e:e8:0c:a8:54:b3:f7:84:
74:1a:f4:7a:f5:fb:69:50:9f:56:6e:38:69:4b:4f:
5f:76:20:02:90:e8:ac:27:99:6e:c9:64:be:9f:1c:
37:93:86:d9:2c:ac:de:c9:eb:92:52:a3:13:3c:3b:
7d:e2:24:12:54:79:e5:0a:7d:b5:af:89:36:84:99:
d3:54:06:85:55:15:82:a5:98:f0:6d:04:a4:d0:1d:
2b:04:e4:e5:0a:55:90:ac:8c:38:61:a3:2f:ea:b1:
d6:36:0c:19:3d:3f:c3:ef:98:ee:5f:b5:4c:0e:8a:
20:49:5f:24:38:79:26:ed:0d:5b:8b:28:03:7f:ae:
0f:6b:1c:f4:9d:1b:84:e5:04:21:56:e9:a4:26:45:
76:40:7d:bf:54:87:3d:0c:28:ae:a2:70:c2:3f:a8:
37:9d:98:ff:a4:42:73:34:14:9b:47:dc:b3:c6:b1:
0f:92:5b:29:ae:57:81:71:83:e3:08:ba:59:2d:17:
6e:b6:aa:97:52:ab:da:7e:7c:b8:40:bf:f8:65:cf:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:07:32:30:C7:2B:A3:C6:5A:73:05:79:C5:50:26:11:50:2D:C9
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:3f:5d:13:15:6c:f2:ea:8f:bd:20:de:82:00:46:cc:df:
ad:0a:28:95:83:6b:8d:9e:b4:7e:ac:ea:ee:8f:d2:52:47:09:
2e:4d:3a:f4:bf:a4:28:7a:8f:ee:04:00:45:da:d2:67:04:b7:
0c:7d:99:da:d5:27:24:7f:ab:67:46:7f:d5:95:34:cd:3d:59:
14:e6:c2:d9:52:13:f7:d7:e6:74:08:45:6c:a3:61:17:38:70:
df:fb:69:0d:c4:5c:6a:d4:98:50:f3:8b:b7:ff:a9:47:c4:f8:
ff:f2:f2:47:72:93:d5:4a:4b:76:37:1e:f7:d9:ce:82:21:84:
7c:81:5b:ae:3c:c6:b2:60:fa:f7:45:73:66:b6:fb:c6:d3:82:
87:83:36:a9:7a:56:c7:58:05:38:9d:4c:c2:53:17:34:49:c7:
3f:a0:4b:30:3f:ba:0b:e2:9f:a1:53:10:6f:31:58:14:59:ce:
3d:7d:a5:20:ad:87:a6:f1:57:49:60:db:64:a6:5c:62:f9:d1:
ec:c6:33:72:1b:9e:7d:e4:0f:79:df:48:d1:a4:01:cc:22:98:
7d:5a:75:7b:75:21:7d:83:80:7f:de:b0:45:19:34:b1:cb:4c:
36:31:fa:03:dc:87:31:34:83:89:a3:b3:e2:3c:a9:81:22:42:
a4:fd:5f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL85+8ma5xhgioHMeKkw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh
NWFhYTMwHhcNMjUwNjA2MTcwMDI3WhcNMjUwNjA3MTcwMDI3WjAzMTEwLwYDVQQD
EygxZGQ5MDczMjMwYzcyYmEzYzY1YTczMDU3OWM1NTAyNjExNTAyZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mdmiLapyAlmQ9HBT2TLlwg3JHDb
12PCvOZ6UGtAIflve/kSaHEnBIjSfjK8dkY+Kf6pHugMqFSz94R0GvR69ftpUJ9W
bjhpS09fdiACkOisJ5luyWS+nxw3k4bZLKzeyeuSUqMTPDt94iQSVHnlCn21r4k2
hJnTVAaFVRWCpZjwbQSk0B0rBOTlClWQrIw4YaMv6rHWNgwZPT/D75juX7VMDoog
SV8kOHkm7Q1biygDf64Paxz0nRuE5QQhVumkJkV2QH2/VIc9DCiuonDCP6g3nZj/
pEJzNBSbR9yzxrEPklsprleBcYPjCLpZLRdutqqXUqvafny4QL/4Zc+HsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3ZBzIwxyujxlpzBXnFUCYRUC3JMB8GA1UdIwQY
MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt
OWFkYTIzNzhhOWEwLzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw
LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ8/XRMV
bPLqj70g3oIARszfrQoolYNrjZ60fqzq7o/SUkcJLk069L+kKHqP7gQARdrSZwS3
DH2Z2tUnJH+rZ0Z/1ZU0zT1ZFObC2VIT99fmdAhFbKNhFzhw3/tpDcRcatSYUPOL
t/+pR8T4//LyR3KT1UpLdjce99nOgiGEfIFbrjzGsmD690VzZrb7xtOCh4M2qXpW
x1gFOJ1MwlMXNEnHP6BLMD+6C+KfoVMQbzFYFFnOPX2lIK2HpvFXSWDbZKZcYvnR
7MYzchuefeQPed9I0aQBzCKYfVp1e3UhfYOAf96wRRk0sctMNjH6A9yHMTSDiaOz
4jypgSJCpP1fhA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:53 2025 by rpki-client