Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: N0JSxKeN9mU/uHwR9FvutIGYh8Bf2SAIQBnNTXBh8NE=
Subject key identifier: A9:C2:59:0B:8B:F6:6A:BE:E0:49:83:1A:2F:D8:A2:BF:FE:F5:7A:5B
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 01976E878715A9D935156BFB5A1E33F45124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0E9D
Signing time: Sat 14 Jun 2025 13:01:04 +0000
Manifest this update: Sat 14 Jun 2025 13:01:04 +0000
Manifest next update: Sun 15 Jun 2025 13:01:04 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: Zt5MShGNx6n9+t0DwYdanpAbwftGEdFj9AkZrnT06zY=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:87:15:a9:d9:35:15:6b:fb:5a:1e:33:f4:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jun 14 13:01:04 2025 GMT
Not After : Jun 15 13:01:04 2025 GMT
Subject: CN=a9c2590b8bf66abee049831a2fd8a2bffef57a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:94:07:0d:cf:b9:25:89:e3:5e:d0:5e:52:
1c:5c:52:ee:3d:6f:44:dd:93:bf:4f:07:cb:12:7d:
3c:26:c7:8c:2e:ca:7d:88:ac:1b:a5:e4:a0:21:c1:
a1:9c:61:54:76:ac:03:1b:49:00:a1:a7:14:ab:40:
f2:33:76:de:a4:d8:39:42:0c:94:4e:35:7d:2c:1a:
05:46:b8:20:60:9e:63:d4:d1:a5:10:76:0a:d7:6a:
82:63:1d:94:d4:76:f7:23:0d:39:43:ec:66:a8:92:
d0:0b:3a:33:d7:05:46:25:82:77:30:78:38:1a:df:
01:ae:5c:ea:6c:c0:ff:69:f1:52:8d:b9:c4:8f:98:
ad:ba:9d:c7:37:5f:fe:fc:0b:b9:7f:6d:88:04:78:
98:31:88:e2:29:59:7d:c3:5f:1b:6d:ac:12:31:1c:
90:d2:08:cb:c2:95:c3:f7:b4:bd:da:12:9c:36:64:
f1:66:7a:de:75:b0:ac:09:f7:a9:f4:a3:69:ec:96:
9f:ae:71:d0:8b:8a:fc:74:20:b4:d1:5d:a9:c8:c3:
59:06:de:e2:ff:b1:ef:87:75:0e:2f:13:35:4a:d2:
b2:79:06:f5:c5:76:fc:13:ec:fc:5f:91:f9:d3:3f:
4c:60:83:f5:77:d7:c6:a3:52:55:a0:b4:6e:54:ca:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:59:0B:8B:F6:6A:BE:E0:49:83:1A:2F:D8:A2:BF:FE:F5:7A:5B
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6a:50:e0:13:e8:e9:eb:91:86:6d:d2:42:e0:78:37:25:b8:
46:4f:ab:c4:1a:9b:c2:cf:ee:f9:ff:33:27:57:25:1d:75:e0:
0a:0c:13:80:2c:86:dc:ef:bf:bf:01:3a:16:0a:68:c1:e2:6c:
85:aa:c0:39:a5:93:ca:ef:1f:ec:d7:08:75:f6:39:24:f6:80:
52:97:05:8a:20:c4:f5:64:8d:54:07:0a:e5:43:6c:f1:39:dd:
c9:09:8d:18:f2:27:1d:42:c1:07:80:1d:b7:cf:78:a7:8a:9d:
5e:1e:2f:e9:d0:73:d1:a5:3c:6c:6d:86:6b:c0:85:79:0a:84:
f3:99:78:ac:8e:98:c8:bc:e6:6f:87:1a:d0:7b:f4:c9:5b:5d:
2a:61:1f:a1:3f:94:2c:ff:a5:27:4c:58:52:c6:d3:aa:0b:31:
4c:f8:dc:29:7a:04:c4:6f:09:05:a2:2c:3a:a0:41:c5:43:5a:
cc:cb:b7:ec:68:88:70:b1:16:8f:dd:db:65:54:89:d0:17:d8:
07:d8:81:52:13:e3:a0:62:33:f3:c6:f0:e8:a6:94:90:2e:25:
f2:49:40:5f:06:84:15:a2:47:6a:ba:37:70:12:cf:a8:00:b5:
79:55:16:31:19:d0:43:60:88:07:81:2d:38:7f:37:7f:42:e5:
34:f8:78:02
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZduh4cVqdk1FWv7Wh4z9FEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjI5Nzc1MjgzNzMzYTQ1YzQ1NGI4ZDdiZTVhNjZkZjBk
YjFhMTcwHhcNMjUwNjE0MTMwMTA0WhcNMjUwNjE1MTMwMTA0WjAzMTEwLwYDVQQD
EyhhOWMyNTkwYjhiZjY2YWJlZTA0OTgzMWEyZmQ4YTJiZmZlZjU3YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DqUBw3PuSWJ417QXlIcXFLuPW9E
3ZO/TwfLEn08JseMLsp9iKwbpeSgIcGhnGFUdqwDG0kAoacUq0DyM3bepNg5QgyU
TjV9LBoFRrggYJ5j1NGlEHYK12qCYx2U1Hb3Iw05Q+xmqJLQCzoz1wVGJYJ3MHg4
Gt8BrlzqbMD/afFSjbnEj5itup3HN1/+/Au5f22IBHiYMYjiKVl9w18bbawSMRyQ
0gjLwpXD97S92hKcNmTxZnredbCsCfep9KNp7JafrnHQi4r8dCC00V2pyMNZBt7i
/7Hvh3UOLxM1StKyeQb1xXb8E+z8X5H50z9MYIP1d9fGo1JVoLRuVMp9cwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKnCWQuL9mq+4EmDGi/Yor/+9XpbMB8GA1UdIwQY
MBaAFPlil3UoNzOkXEVLjXvlpm3w2xoXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XS1hkU2czTTZSY1JVdU5lLVdtYmZEYkdoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0
LWIzMjRlMDI1YjkyOS8xLzEtV0tYZFNnM002UmNSVXVOZS1XbWJmRGJHaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdkL2ViZmNlNi0yODU3LTQwNGItOWI3NC1iMzI0ZTAyNWI5
MjkvMS8xLVdLWGRTZzNNNlJjUlV1TmUtV21iZkRiR2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWpQ
4BPo6euRhm3SQuB4NyW4Rk+rxBqbws/u+f8zJ1clHXXgCgwTgCyG3O+/vwE6Fgpo
weJsharAOaWTyu8f7NcIdfY5JPaAUpcFiiDE9WSNVAcK5UNs8TndyQmNGPInHULB
B4Adt894p4qdXh4v6dBz0aU8bG2Ga8CFeQqE85l4rI6YyLzmb4ca0Hv0yVtdKmEf
oT+ULP+lJ0xYUsbTqgsxTPjcKXoExG8JBaIsOqBBxUNazMu37GiIcLEWj93bZVSJ
0BfYB9iBUhPjoGIz88bw6KaUkC4l8klAXwaEFaJHaro3cBLPqAC1eVUWMRnQQ2CI
B4EtOH83f0LlNPh4Ag==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:41 2025 by rpki-client