Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: w4GGUg2U2ujC4UXCs+5LhUwFHohiZZhfG2T4TRQFsEU=
Subject key identifier: 07:63:55:53:07:9A:42:12:26:3C:2D:8D:A3:E7:7D:3A:4B:11:A1:38
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019768F2E221CDC8181C0483526A143AE9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0CB5
Signing time: Fri 13 Jun 2025 11:00:37 +0000
Manifest this update: Fri 13 Jun 2025 11:00:37 +0000
Manifest next update: Sat 14 Jun 2025 11:00:37 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: Poi2J8VSdvpE+qniFUv685Z0WWDz9aVSU9SjeQuITeM=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:e2:21:cd:c8:18:1c:04:83:52:6a:14:3a:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Jun 13 11:00:37 2025 GMT
Not After : Jun 14 11:00:37 2025 GMT
Subject: CN=07635553079a4212263c2d8da3e77d3a4b11a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:83:53:61:0d:ea:fe:a2:73:8b:b8:17:13:
cd:a1:a1:33:0e:8b:b9:e8:7a:e7:fc:7e:76:b7:ae:
a2:13:84:44:24:03:f0:ad:18:20:6e:43:13:54:dc:
5e:45:fd:81:1a:81:17:09:1c:49:ad:19:03:8e:9a:
de:6b:e6:8d:d1:3e:03:ca:d3:d9:21:f4:bf:e1:c4:
f0:c9:e4:0f:ff:3e:29:5b:06:c9:3d:44:19:41:c4:
58:08:c9:68:23:aa:cd:d1:c0:58:c7:91:16:24:15:
2b:f6:76:d5:74:13:2f:35:58:9f:35:ab:5d:6a:fd:
67:a1:c5:d7:81:23:77:8f:a1:a0:bc:a7:41:25:32:
22:c8:5e:61:15:d5:ef:7f:4d:50:36:8b:00:ab:a7:
97:e3:ad:c4:e7:e4:91:d3:8f:8d:04:05:6e:9d:a8:
59:63:69:5d:84:2b:36:24:32:bc:77:f2:5d:70:63:
24:31:81:a2:87:89:a8:15:7d:67:41:ca:f4:07:48:
e9:78:37:a1:48:a3:ee:4a:bc:6e:78:f2:90:93:9f:
e0:f1:d1:7c:40:2d:20:35:c1:80:00:9e:5c:b2:13:
8f:64:e3:11:a9:89:46:19:ff:81:fa:d5:2c:e1:b5:
c2:0d:49:9d:03:d2:da:68:44:36:32:f4:f0:8c:a1:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:55:53:07:9A:42:12:26:3C:2D:8D:A3:E7:7D:3A:4B:11:A1:38
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:41:4b:f3:a1:19:a7:34:5d:e8:16:70:45:5f:d0:c1:9d:01:
ce:69:7f:77:f4:a4:c7:48:cd:54:a8:4c:b9:15:67:6d:42:df:
5e:b5:b8:d6:c5:f8:4e:ed:69:d3:7c:41:50:d8:13:f1:a8:9c:
c6:b2:56:18:34:9c:f5:9d:2e:28:fb:6c:82:f8:bf:f7:28:ea:
a0:5d:b5:7d:7f:70:bd:3c:11:7c:67:56:0a:16:4b:3f:2e:c2:
31:5f:a6:62:0c:49:fc:53:fe:d4:96:40:04:e7:8d:36:bd:28:
79:f5:a3:30:c9:14:7b:e9:6f:82:8d:07:26:47:2d:24:97:3d:
ab:f1:84:e7:6b:bf:1c:f1:d6:86:00:a3:ad:7a:13:c9:5e:c4:
db:45:0f:02:fa:e5:98:03:6d:f1:c9:92:b3:b4:dd:d4:af:fb:
91:20:51:71:56:c7:e7:2a:b0:17:65:cd:17:af:26:fe:35:7f:
44:6d:c3:a4:bb:b0:d8:e1:00:80:1b:79:40:e9:3d:30:dc:84:
70:d5:83:e9:c0:41:ef:e2:e7:5d:eb:4f:b0:d7:a1:9e:f7:5d:
b2:1c:e2:3f:b8:71:49:77:57:81:0e:0e:2c:ae:cb:58:67:6b:
cc:cf:5a:53:57:fb:4a:2a:df:e8:60:c5:c4:f0:2f:85:e3:a3:
59:37:5c:9c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdo8uIhzcgYHASDUmoUOunaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjUwNjEzMTEwMDM3WhcNMjUwNjE0MTEwMDM3WjAzMTEwLwYDVQQD
EygwNzYzNTU1MzA3OWE0MjEyMjYzYzJkOGRhM2U3N2QzYTRiMTFhMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+DU2EN6v6ic4u4FxPNoaEzDou5
6Hrn/H52t66iE4REJAPwrRggbkMTVNxeRf2BGoEXCRxJrRkDjprea+aN0T4DytPZ
IfS/4cTwyeQP/z4pWwbJPUQZQcRYCMloI6rN0cBYx5EWJBUr9nbVdBMvNVifNatd
av1nocXXgSN3j6GgvKdBJTIiyF5hFdXvf01QNosAq6eX463E5+SR04+NBAVunahZ
Y2ldhCs2JDK8d/JdcGMkMYGih4moFX1nQcr0B0jpeDehSKPuSrxuePKQk5/g8dF8
QC0gNcGAAJ5cshOPZOMRqYlGGf+B+tUs4bXCDUmdA9LaaEQ2MvTwjKEjKQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAdjVVMHmkISJjwtjaPnfTpLEaE4MB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0
MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkFL
86EZpzRd6BZwRV/QwZ0Bzml/d/Skx0jNVKhMuRVnbULfXrW41sX4Tu1p03xBUNgT
8aicxrJWGDSc9Z0uKPtsgvi/9yjqoF21fX9wvTwRfGdWChZLPy7CMV+mYgxJ/FP+
1JZABOeNNr0oefWjMMkUe+lvgo0HJkctJJc9q/GE52u/HPHWhgCjrXoTyV7E20UP
AvrlmANt8cmSs7Td1K/7kSBRcVbH5yqwF2XNF68m/jV/RG3DpLuw2OEAgBt5QOk9
MNyEcNWD6cBB7+LnXetPsNehnvddshziP7hxSXdXgQ4OLK7LWGdrzM9aU1f7Sirf
6GDFxPAvheOjWTdcnA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:27 2025 by rpki-client