Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: f/pJHxQvOWmyVz3tEpsaAUkWJ5cDwm8iksAVRQrd8CM=
Subject key identifier: FB:6B:6C:D1:97:B3:08:9B:DC:71:D3:39:29:AA:96:C3:08:73:97:C5
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019771886C510CE1DBA27C533E12963EE1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 03:00:55 +0000
Manifest this update: Sun 15 Jun 2025 03:00:55 +0000
Manifest next update: Mon 16 Jun 2025 03:00:55 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: +px6bhCkLsNNZm2+tzlMKO8CfRZhNbE3tKqYsezkYxM=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:6c:51:0c:e1:db:a2:7c:53:3e:12:96:3e:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jun 15 03:00:55 2025 GMT
Not After : Jun 16 03:00:55 2025 GMT
Subject: CN=fb6b6cd197b3089bdc71d33929aa96c3087397c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:42:cb:20:60:32:03:6f:cb:13:95:5e:c2:
d5:13:1a:ff:b0:ad:76:90:d2:f3:5d:fe:c6:a7:a2:
e8:70:05:d6:60:50:63:e1:73:5c:b5:cf:9f:85:0a:
a0:fe:25:90:40:01:7a:80:e7:3e:08:ca:c5:74:c6:
5b:e4:de:06:34:81:43:b3:9a:41:59:c3:07:3f:2a:
7e:de:2a:8c:09:13:fe:b3:bd:d8:c1:c4:a1:11:35:
65:22:d0:a0:5f:5d:74:b4:fb:17:24:65:cc:29:e6:
df:b2:3c:95:d9:0c:0f:74:0e:ef:af:7e:40:9c:67:
a6:14:12:70:e7:fd:7f:a2:7c:31:6f:ea:61:62:32:
99:0b:90:60:c4:f8:5b:20:3b:16:81:76:dc:ac:dc:
e9:bb:b9:a6:da:09:dc:07:f3:f9:a7:43:f8:ef:87:
e3:9f:31:4e:8e:2a:38:e6:b8:08:8d:9f:cc:fa:f2:
82:16:e4:68:34:7b:d7:a3:7a:fc:d1:27:75:e4:e2:
ac:8f:b3:87:1d:33:73:5e:de:62:e5:5f:31:1b:d5:
70:a6:5f:99:0a:e0:05:39:3d:be:34:98:fa:f1:bd:
8b:df:13:9d:b4:4c:48:4a:59:06:d2:e7:89:b8:c9:
32:e0:fe:5e:01:41:ac:df:87:5b:21:7e:84:35:c9:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:6C:D1:97:B3:08:9B:DC:71:D3:39:29:AA:96:C3:08:73:97:C5
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:1c:52:35:10:39:0e:c7:1d:7a:b4:4c:5f:4a:60:c6:f1:
6a:e0:37:00:8a:49:88:81:f4:58:54:32:84:a3:95:70:89:bd:
bc:3f:3e:52:7a:77:d7:5b:d5:cc:ff:4d:75:d1:fa:93:a1:d8:
05:33:7b:18:af:d7:77:28:ab:8c:f7:d8:7b:ee:8f:c3:e1:cc:
ac:76:2a:7d:87:3d:94:be:6d:ba:22:6d:89:27:ee:53:2f:e7:
32:c7:db:48:ec:8c:30:cc:f9:29:10:9c:8f:34:0b:14:68:2b:
7b:3b:e7:53:63:74:47:2f:a7:81:73:86:2d:c7:9c:00:b2:26:
8a:e8:8a:25:38:d7:d7:d0:93:42:1d:32:9b:7f:e1:bf:49:8a:
09:04:cc:f9:21:c2:b8:d7:83:0a:13:f9:25:41:28:a0:e0:32:
16:95:50:36:8c:1d:25:5a:06:dc:7e:4a:7e:89:0c:b5:e7:36:
2f:9e:73:cf:3f:9e:b1:6a:b9:10:b5:a9:da:29:4b:38:54:30:
41:43:21:0d:30:d3:bf:3a:fa:1f:48:49:5d:a9:8a:37:9e:4d:
13:35:41:6d:96:ef:c9:60:ef:c1:51:96:60:ef:cc:00:ff:7b:
60:60:a2:b3:ce:ac:f3:ae:e5:b7:aa:99:ac:b9:b1:e1:e8:cf:
65:d3:96:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiGxRDOHbonxTPhKWPuHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjUwNjE1MDMwMDU1WhcNMjUwNjE2MDMwMDU1WjAzMTEwLwYDVQQD
EyhmYjZiNmNkMTk3YjMwODliZGM3MWQzMzkyOWFhOTZjMzA4NzM5N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxVCyyBgMgNvyxOVXsLVExr/sK12
kNLzXf7Gp6LocAXWYFBj4XNctc+fhQqg/iWQQAF6gOc+CMrFdMZb5N4GNIFDs5pB
WcMHPyp+3iqMCRP+s73YwcShETVlItCgX110tPsXJGXMKebfsjyV2QwPdA7vr35A
nGemFBJw5/1/onwxb+phYjKZC5BgxPhbIDsWgXbcrNzpu7mm2gncB/P5p0P474fj
nzFOjio45rgIjZ/M+vKCFuRoNHvXo3r80Sd15OKsj7OHHTNzXt5i5V8xG9Vwpl+Z
CuAFOT2+NJj68b2L3xOdtExISlkG0ueJuMky4P5eAUGs34dbIX6ENcmZQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtrbNGXswib3HHTOSmqlsMIc5fFMB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE8cUjUQ
OQ7HHXq0TF9KYMbxauA3AIpJiIH0WFQyhKOVcIm9vD8+Unp311vVzP9NddH6k6HY
BTN7GK/XdyirjPfYe+6Pw+HMrHYqfYc9lL5tuiJtiSfuUy/nMsfbSOyMMMz5KRCc
jzQLFGgrezvnU2N0Ry+ngXOGLcecALImiuiKJTjX19CTQh0ym3/hv0mKCQTM+SHC
uNeDChP5JUEooOAyFpVQNowdJVoG3H5KfokMtec2L55zzz+esWq5ELWp2ilLOFQw
QUMhDTDTvzr6H0hJXamKN55NEzVBbZbvyWDvwVGWYO/MAP97YGCis86s867lt6qZ
rLmx4ejPZdOW/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:59 2025 by rpki-client