Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: uiUTSl0KtnA54b6D/GF35DEtbSsNmckAb/81baUl0iM=
Subject key identifier: B4:C6:67:E9:C0:E1:46:04:26:0D:D8:AB:D7:26:9C:71:5F:A9:25:CB
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019895FFE6636BD268CA8E1B930B01B21263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 1C
Signing time: Sun 10 Aug 2025 22:00:32 +0000
Manifest this update: Sun 10 Aug 2025 22:00:32 +0000
Manifest next update: Mon 11 Aug 2025 22:00:32 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: GQfHTJIpYG9HBs2Va48njMH1Z88emi69Tcae8ibt9RM=)
2: 1j10fGgoumz7WTH368PI_luQFZo.roa (hash: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=)
3: warGeR8KF_Qduq42XjiOHRQiVOo.roa (hash: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:e6:63:6b:d2:68:ca:8e:1b:93:0b:01:b2:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Aug 10 22:00:32 2025 GMT
Not After : Aug 11 22:00:32 2025 GMT
Subject: CN=b4c667e9c0e14604260dd8abd7269c715fa925cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:79:9d:a8:fc:73:d7:79:a6:ed:da:36:99:
d8:9f:e7:7b:98:8c:84:b3:e3:38:72:30:83:60:5f:
41:5c:03:00:51:75:38:23:a2:05:0a:6e:db:47:a2:
51:df:b7:c5:e3:fa:18:b4:7b:84:bb:b5:b4:97:13:
1a:ba:bf:5f:de:08:32:46:87:d3:3e:61:8b:47:f1:
b5:6c:14:14:a9:b9:9e:6b:83:f0:0d:b3:f1:a8:12:
d7:d6:f3:3e:8e:00:91:31:15:41:06:8f:ad:ce:72:
01:c5:2f:41:f1:71:7e:01:1c:3a:f2:8a:86:80:35:
eb:e6:8e:00:dd:5b:55:a6:c6:db:f7:ab:01:8e:88:
83:2d:8b:90:3c:88:6b:0d:d8:1e:e8:45:2b:fb:32:
56:a9:eb:2f:73:84:d7:8c:78:56:ef:d2:ca:a3:89:
29:ce:31:41:0a:ab:d9:93:e5:83:b8:fe:4f:89:b9:
5d:17:95:59:66:69:be:a4:4a:f4:92:03:6f:bb:26:
62:9b:cc:43:4e:0c:f7:42:34:85:28:b4:64:01:68:
45:80:03:4d:b3:a9:6e:c7:c1:69:6c:e6:a3:3c:fd:
d5:e3:76:29:de:7b:e6:d5:5c:67:79:f7:2b:4b:81:
b8:0b:86:ae:b4:79:3e:1d:cb:33:aa:b1:6e:fe:e0:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:67:E9:C0:E1:46:04:26:0D:D8:AB:D7:26:9C:71:5F:A9:25:CB
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:31:85:d6:10:73:ad:cc:43:32:8c:aa:b2:e6:a6:b3:9f:28:
ba:5f:bb:3b:ae:5a:26:98:95:93:76:21:71:88:4e:fd:41:29:
e7:d8:6f:f8:64:16:9c:5e:7a:25:09:45:60:65:d6:ae:13:f8:
af:4a:d9:b3:0e:19:52:0f:a3:93:b3:48:9a:5d:6d:b8:34:7f:
73:f4:aa:d8:26:6e:d7:0b:8f:a5:ee:70:11:83:49:4f:a7:f7:
7a:5c:d5:a2:25:a3:a6:d1:7d:5e:f1:e8:24:22:22:e9:de:ad:
05:80:3f:40:eb:da:45:57:a2:a5:6d:d5:39:0d:b5:a2:9e:98:
fe:2e:37:91:30:f0:e3:f1:d6:eb:7a:7f:7e:05:1f:e8:bc:f3:
82:16:e3:97:f1:d7:d5:02:b3:29:88:c2:b4:0b:9f:7e:aa:f1:
35:ba:f1:4a:fb:5c:c5:17:4c:6d:f1:59:83:a2:4c:d0:58:e6:
b8:87:1c:8a:65:55:13:09:26:d3:79:30:57:0c:91:17:04:7e:
01:aa:71:09:fa:55:d3:f6:09:84:d5:7b:50:8e:a0:30:f4:59:
75:68:58:1d:0c:4b:33:1a:d7:39:3e:99:eb:fd:bc:dc:da:23:
76:7d:6d:b4:17:ad:76:9d:23:88:d8:03:be:fc:21:81:b0:45:
69:5e:97:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiV/+Zja9Joyo4bkwsBshJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj
NzJiM2EwHhcNMjUwODEwMjIwMDMyWhcNMjUwODExMjIwMDMyWjAzMTEwLwYDVQQD
EyhiNGM2NjdlOWMwZTE0NjA0MjYwZGQ4YWJkNzI2OWM3MTVmYTkyNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hJ5naj8c9d5pu3aNpnYn+d7mIyE
s+M4cjCDYF9BXAMAUXU4I6IFCm7bR6JR37fF4/oYtHuEu7W0lxMaur9f3ggyRofT
PmGLR/G1bBQUqbmea4PwDbPxqBLX1vM+jgCRMRVBBo+tznIBxS9B8XF+ARw68oqG
gDXr5o4A3VtVpsbb96sBjoiDLYuQPIhrDdge6EUr+zJWqesvc4TXjHhW79LKo4kp
zjFBCqvZk+WDuP5PibldF5VZZmm+pEr0kgNvuyZim8xDTgz3QjSFKLRkAWhFgANN
s6lux8FpbOajPP3V43Yp3nvm1VxnefcrS4G4C4autHk+HcszqrFu/uDXdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLTGZ+nA4UYEJg3Yq9cmnHFfqSXLMB8GA1UdIwQY
MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh
LWU1YWZlMjYzZjBhMi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzEyL2IzZmVjZS05MDVmLTRjYjMtOWE5YS1lNWFmZTI2M2Yw
YTIvMS8xLUxkZ0RuZ2Zrd1c0aktTVEduMndDZmpIS3pvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzGF
1hBzrcxDMoyqsuams58oul+7O65aJpiVk3YhcYhO/UEp59hv+GQWnF56JQlFYGXW
rhP4r0rZsw4ZUg+jk7NIml1tuDR/c/Sq2CZu1wuPpe5wEYNJT6f3elzVoiWjptF9
XvHoJCIi6d6tBYA/QOvaRVeipW3VOQ21op6Y/i43kTDw4/HW63p/fgUf6Lzzghbj
l/HX1QKzKYjCtAuffqrxNbrxSvtcxRdMbfFZg6JM0FjmuIccimVVEwkm03kwVwyR
FwR+AapxCfpV0/YJhNV7UI6gMPRZdWhYHQxLMxrXOT6Z6/283Nojdn1ttBetdp0j
iNgDvvwhgbBFaV6Xlg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:33 2025 by rpki-client