Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: wq0gN/nrS9gl1Ut+n8X9XtLK71tMQxqQsYpM0WUu7aM=
Subject key identifier: AE:CD:DD:68:4A:21:DA:0E:F5:B2:90:10:37:FF:F1:D4:15:D5:06:EA
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0196767A4E14B5169DF136E241EE35D9B355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:00:48 +0000
Manifest this update: Sun 27 Apr 2025 09:00:48 +0000
Manifest next update: Mon 28 Apr 2025 09:00:48 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: gkUFJQsFxID0iD7VabcAIuah8m7TgtcdUZ7C1Ta4Rz0=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:4e:14:b5:16:9d:f1:36:e2:41:ee:35:d9:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Apr 27 09:00:48 2025 GMT
Not After : Apr 28 09:00:48 2025 GMT
Subject: CN=aecddd684a21da0ef5b2901037fff1d415d506ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:31:3f:92:12:4d:bb:22:e0:f1:f5:e0:6e:
8f:38:2d:92:be:cc:27:9c:31:4c:d0:b6:fe:3b:e6:
11:6a:7b:bd:a2:59:1e:79:50:49:96:b2:f4:34:62:
e5:a3:b8:8a:ac:c2:cb:89:f3:e9:ea:c7:c8:93:1f:
34:9c:40:c4:b3:f2:8d:24:0d:60:1e:13:bc:fc:79:
a4:59:28:ff:ac:a6:2f:63:28:05:3a:fe:cf:e3:34:
b1:79:0e:5c:8b:8b:20:0f:e1:0b:0e:47:d6:78:49:
ff:cd:1f:60:4b:25:14:1f:be:2a:07:6f:5d:f3:d5:
33:10:71:0c:93:eb:dc:fc:fa:18:c2:47:3d:61:fb:
7c:49:67:4c:73:5c:e6:7a:d5:f5:cb:fa:5b:b6:1d:
44:83:c4:c4:b7:64:d9:90:e0:f3:d8:48:ac:fa:80:
79:ee:60:ce:51:75:a8:27:95:83:5e:20:80:e5:ac:
78:0b:bd:cd:95:81:ba:5f:de:52:6a:fc:d6:19:3c:
5d:e2:af:9c:59:71:42:70:86:d1:22:4b:d1:3f:42:
e3:bb:1f:fc:e1:f1:49:09:85:ae:ad:ee:39:db:7d:
b2:ac:0e:60:5f:eb:96:c8:45:b0:52:0b:8a:db:1b:
66:2e:ac:ad:a7:fe:2c:d6:0f:be:b3:e1:e7:ac:ac:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:DD:68:4A:21:DA:0E:F5:B2:90:10:37:FF:F1:D4:15:D5:06:EA
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ff:7d:83:4b:b7:48:52:d0:61:e8:51:68:f5:88:7d:3a:f7:
d6:ca:86:aa:6e:31:64:b5:24:44:30:6f:88:fc:d5:5b:90:5c:
1e:ac:09:ba:82:16:46:25:cc:97:83:b8:c1:9c:8b:bd:20:11:
e4:ae:61:c1:98:cc:6f:52:57:ec:3c:3e:23:3e:ec:86:c2:29:
99:b2:69:ad:3e:79:9a:18:6b:75:56:60:1e:6a:17:d5:fe:48:
25:41:d5:99:b5:b4:a4:5f:b4:f7:87:33:04:b2:cb:59:79:8d:
68:10:da:07:f2:7e:08:ef:0d:fd:d3:c8:32:d2:08:3c:29:c2:
10:cd:62:5a:9f:5e:e4:e5:20:87:04:a9:8a:57:ae:b1:03:a5:
bb:bc:2b:bc:f6:eb:da:97:a0:6e:80:ce:38:0c:cc:23:b9:37:
5a:a3:7c:4e:5b:de:80:70:b1:f0:92:eb:32:a8:c9:a1:e8:0f:
4c:eb:94:68:0a:1c:5b:a8:8c:00:b5:e9:5d:0e:4b:44:e7:92:
ce:12:62:1c:94:33:fd:bc:c5:3a:a0:74:6a:70:40:dd:ae:67:
38:fc:4d:0f:98:92:01:a9:de:90:e6:be:8e:39:6b:87:26:6c:
4d:8c:14:57:24:6d:3d:37:a2:96:a7:b8:09:e5:0a:5c:c7:90:
dc:b7:ba:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ek4UtRad8TbiQe412bNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjUwNDI3MDkwMDQ4WhcNMjUwNDI4MDkwMDQ4WjAzMTEwLwYDVQQD
EyhhZWNkZGQ2ODRhMjFkYTBlZjViMjkwMTAzN2ZmZjFkNDE1ZDUwNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GAxP5ISTbsi4PH14G6POC2Svswn
nDFM0Lb+O+YRanu9olkeeVBJlrL0NGLlo7iKrMLLifPp6sfIkx80nEDEs/KNJA1g
HhO8/HmkWSj/rKYvYygFOv7P4zSxeQ5ci4sgD+ELDkfWeEn/zR9gSyUUH74qB29d
89UzEHEMk+vc/PoYwkc9Yft8SWdMc1zmetX1y/pbth1Eg8TEt2TZkODz2Eis+oB5
7mDOUXWoJ5WDXiCA5ax4C73NlYG6X95SavzWGTxd4q+cWXFCcIbRIkvRP0Ljux/8
4fFJCYWure45232yrA5gX+uWyEWwUguK2xtmLqytp/4s1g++s+HnrKyg1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7N3WhKIdoO9bKQEDf/8dQV1QbqMB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf99g0u3
SFLQYehRaPWIfTr31sqGqm4xZLUkRDBviPzVW5BcHqwJuoIWRiXMl4O4wZyLvSAR
5K5hwZjMb1JX7Dw+Iz7shsIpmbJprT55mhhrdVZgHmoX1f5IJUHVmbW0pF+094cz
BLLLWXmNaBDaB/J+CO8N/dPIMtIIPCnCEM1iWp9e5OUghwSpileusQOlu7wrvPbr
2pegboDOOAzMI7k3WqN8TlvegHCx8JLrMqjJoegPTOuUaAocW6iMALXpXQ5LROeS
zhJiHJQz/bzFOqB0anBA3a5nOPxND5iSAanekOa+jjlrhyZsTYwUVyRtPTeilqe4
CeUKXMeQ3Le6Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:56 2025 by rpki-client