Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: qFIjafC1OuFNLsn4HfNUbnGbFgZ+QL/aN0nu3Eu1Lu8=
Subject key identifier: 8C:5C:7C:74:50:84:0E:EC:D3:5D:D3:EF:FD:88:F4:6C:4E:02:87:D0
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019785B413ECF0D9907444A8BBDC81CF9746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0F17
Signing time: Thu 19 Jun 2025 01:01:00 +0000
Manifest this update: Thu 19 Jun 2025 01:01:00 +0000
Manifest next update: Fri 20 Jun 2025 01:01:00 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: EP7ilY4LzzD65TjQ//7JJdZNTQV3jgyvmwTHbhoLgzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b4:13:ec:f0:d9:90:74:44:a8:bb:dc:81:cf:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Jun 19 01:01:00 2025 GMT
Not After : Jun 20 01:01:00 2025 GMT
Subject: CN=8c5c7c7450840eecd35dd3effd88f46c4e0287d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:1e:4e:9e:85:d6:3b:cf:95:53:28:ce:f3:
4f:26:b9:2a:e3:73:1a:a2:dd:68:87:9f:7b:83:54:
fb:68:6a:5b:d1:15:a3:80:fb:d9:ee:ca:a7:e1:be:
e2:ae:99:f9:72:68:fa:e9:09:2f:d4:35:f9:ad:28:
dc:b1:5d:f2:a0:13:3d:47:8a:e2:61:f4:40:f6:37:
11:a7:69:9c:0d:1e:6b:69:3f:21:a1:5b:72:de:a4:
06:47:0a:fd:60:b2:35:c8:ca:a2:76:af:1a:24:b7:
6d:1f:67:cf:ec:2d:c0:b6:55:03:7f:ba:5d:4b:46:
b2:40:31:47:92:f2:a1:c4:41:c0:7e:f8:c2:b7:e8:
fd:9d:77:e5:72:dd:aa:4e:b6:7d:2c:5e:bc:3e:18:
42:66:f2:91:c4:ad:e8:0a:d3:c1:f7:29:6b:5e:73:
08:2a:8e:18:43:ee:8e:fd:c7:9b:ea:e3:f6:74:17:
b8:af:ea:45:98:6e:e0:23:2a:2b:17:2d:25:3b:52:
b3:5c:e0:01:a8:4d:8b:0a:c8:e8:99:fc:5e:2d:e5:
d5:b6:9c:3a:09:af:84:d2:e5:72:30:0b:1b:3e:e9:
3c:dd:d2:9d:09:51:d2:14:4e:43:0c:db:ce:be:56:
fe:5c:ab:04:86:81:49:67:b9:04:00:e4:7a:12:b4:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:7C:74:50:84:0E:EC:D3:5D:D3:EF:FD:88:F4:6C:4E:02:87:D0
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4f:90:cc:ea:ff:32:62:19:f3:f3:5f:49:52:ea:06:25:dd:
2b:47:72:56:8e:20:08:10:98:80:73:e6:bb:4f:a8:76:08:55:
52:f6:cb:71:74:de:81:c4:d9:d1:7d:1e:1d:56:a7:9f:1d:94:
88:ac:ba:34:93:c4:3a:a0:29:c3:b4:d0:4c:14:5b:db:55:8d:
bf:13:e6:34:13:b9:e6:27:0c:1a:eb:71:48:cd:56:ca:81:0c:
63:22:52:c8:b8:5d:50:60:72:ce:d9:17:53:63:e6:48:16:d7:
ca:b5:fd:99:dd:f1:08:83:dc:33:6a:b1:75:17:ed:03:ef:32:
ed:a7:36:8c:cd:2d:f8:db:7a:53:20:d9:06:98:de:4d:d5:25:
8e:ab:84:e8:05:f1:9a:b8:19:33:11:2a:73:61:06:c9:ed:65:
9f:c5:aa:8c:9c:79:3e:b3:42:24:b8:0c:f0:d9:be:78:8c:bb:
0e:19:36:d8:97:85:61:e7:6b:35:b7:ea:92:9d:9b:33:2f:9b:
99:a4:ae:db:3b:b5:86:b4:85:a9:8e:ad:01:ab:c5:5d:2c:1b:
f9:b2:5c:24:15:21:c2:27:ad:9d:62:c7:99:4c:fc:f9:48:9e:
37:f9:81:f9:39:6c:1c:f6:1a:1c:fb:75:fc:cd:51:87:4b:59:
b6:ce:a8:2f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZeFtBPs8NmQdESou9yBz5dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Yjc3MDE2MDU1Mzc2MGMzNTY3ZGY1MWE4NDdlZDZjNTI5
YzA3ODkwHhcNMjUwNjE5MDEwMTAwWhcNMjUwNjIwMDEwMTAwWjAzMTEwLwYDVQQD
Eyg4YzVjN2M3NDUwODQwZWVjZDM1ZGQzZWZmZDg4ZjQ2YzRlMDI4N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8eTp6F1jvPlVMozvNPJrkq43Ma
ot1oh597g1T7aGpb0RWjgPvZ7sqn4b7irpn5cmj66Qkv1DX5rSjcsV3yoBM9R4ri
YfRA9jcRp2mcDR5raT8hoVty3qQGRwr9YLI1yMqidq8aJLdtH2fP7C3AtlUDf7pd
S0ayQDFHkvKhxEHAfvjCt+j9nXflct2qTrZ9LF68PhhCZvKRxK3oCtPB9ylrXnMI
Ko4YQ+6O/ceb6uP2dBe4r+pFmG7gIyorFy0lO1KzXOABqE2LCsjomfxeLeXVtpw6
Ca+E0uVyMAsbPuk83dKdCVHSFE5DDNvOvlb+XKsEhoFJZ7kEAOR6ErRDlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIxcfHRQhA7s013T7/2I9GxOAofQMB8GA1UdIwQY
MBaAFPi3cBYFU3YMNWffUahH7WxSnAeJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MZHdGZ1ZUZGd3MVo5OVJxRWZ0YkZLY0I0ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMzI1M2FjLThmYTctNDI1Yi04YTkw
LTliOWI0MDE0NTllNi8xLzEtTGR3RmdWVGRndzFaOTlScUVmdGJGS2NCNGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVlLzMyNTNhYy04ZmE3LTQyNWItOGE5MC05YjliNDAxNDU5
ZTYvMS8xLUxkd0ZnVlRkZ3cxWjk5UnFFZnRiRktjQjRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxU+Q
zOr/MmIZ8/NfSVLqBiXdK0dyVo4gCBCYgHPmu0+odghVUvbLcXTegcTZ0X0eHVan
nx2UiKy6NJPEOqApw7TQTBRb21WNvxPmNBO55icMGutxSM1WyoEMYyJSyLhdUGBy
ztkXU2PmSBbXyrX9md3xCIPcM2qxdRftA+8y7ac2jM0t+Nt6UyDZBpjeTdUljquE
6AXxmrgZMxEqc2EGye1ln8WqjJx5PrNCJLgM8Nm+eIy7Dhk22JeFYedrNbfqkp2b
My+bmaSu2zu1hrSFqY6tAavFXSwb+bJcJBUhwietnWLHmUz8+UieN/mB+TlsHPYa
HPt1/M1Rh0tZts6oLw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:35:46 2025 by rpki-client