Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: 0BGjcjtFV/rAChX9swFF/E5Bp6B4RRCFtzf+rWH0Uh4=
Subject key identifier: E5:7F:1F:D7:35:F6:4F:DE:5A:D1:FA:74:09:96:7B:5C:F2:2E:58:D6
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 01968D39999FCD0FE2BF5059DF1B9F5B3742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 09FF
Signing time: Thu 01 May 2025 19:01:24 +0000
Manifest this update: Thu 01 May 2025 19:01:24 +0000
Manifest next update: Fri 02 May 2025 19:01:24 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: hymwW5iuzCnFE954kJi8sizUNuwMuFGS4LDHs7nf1RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:99:9f:cd:0f:e2:bf:50:59:df:1b:9f:5b:37:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: May 1 19:01:24 2025 GMT
Not After : May 2 19:01:24 2025 GMT
Subject: CN=e57f1fd735f64fde5ad1fa7409967b5cf22e58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:4d:80:3c:56:94:d8:38:67:dc:5c:0c:a9:
37:b2:31:f7:dd:44:64:aa:29:42:13:ee:87:e4:26:
6b:99:17:02:c5:3c:fa:7b:a4:12:cf:ce:de:77:d8:
64:4c:9b:d3:3c:a6:18:c5:21:96:04:a1:cc:26:8f:
95:08:ad:c1:57:61:ba:be:8f:ef:94:e3:32:8d:95:
40:83:28:22:b7:cc:ba:b3:7f:46:92:7d:da:cf:a3:
8c:7b:af:46:64:a6:b8:53:e4:2a:aa:17:ba:32:cf:
c9:99:14:73:31:46:da:b5:96:62:96:10:ca:d9:d3:
d1:7e:b3:a4:d1:9b:31:a2:2b:67:df:6e:a5:0e:16:
ab:f1:b0:76:8f:43:2d:3a:d3:cf:cb:73:cb:45:a4:
cc:e1:c0:c4:c5:f0:83:8e:4c:69:3f:1d:bd:c3:2b:
f3:a8:ad:9b:e8:2b:7f:3e:bc:b4:7c:4a:d2:62:be:
a9:b3:b1:7c:21:9d:27:26:b1:1e:e4:0d:84:91:8b:
73:88:7c:3e:bf:bb:63:66:c9:cf:d1:0c:8b:4e:be:
41:75:63:9e:3d:2e:6a:1c:f9:a9:2f:2d:49:1a:fe:
29:03:21:ff:9d:f3:81:10:a6:ec:a0:7f:e7:a2:21:
6a:6b:df:49:6f:bd:df:c8:6f:6c:04:2d:f7:42:b0:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7F:1F:D7:35:F6:4F:DE:5A:D1:FA:74:09:96:7B:5C:F2:2E:58:D6
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:85:07:72:f0:1e:1c:94:f9:2c:20:95:97:b3:c4:e3:4a:
b3:43:c4:99:85:72:63:ab:bb:32:92:0f:5a:32:5f:82:1c:54:
1c:46:e3:c5:e6:22:cb:ba:aa:ad:43:89:a0:56:63:0a:82:e7:
a9:0b:09:c3:6c:11:be:0a:d6:79:5b:00:c2:4e:c4:a5:cb:f0:
ef:b5:95:49:c0:3f:10:30:79:b0:7a:ec:b2:43:11:f4:f6:21:
58:56:f6:c7:94:d8:99:70:da:e5:ed:32:11:6a:5a:47:26:11:
dd:5b:9d:80:63:86:b1:0b:fc:cf:68:eb:03:9c:e4:13:79:dc:
32:fa:3c:2c:42:6b:eb:27:74:3a:00:5b:08:68:b2:10:f3:7a:
35:c8:bc:d0:4a:dd:2d:f4:b1:c0:c5:dd:95:c3:bc:b9:9a:9e:
c6:46:c2:82:0b:81:58:f4:78:b0:79:3f:2f:02:c1:2d:43:bc:
eb:a0:27:ae:e4:42:60:a4:0a:c5:55:61:88:d1:62:a8:ba:4a:
66:43:22:7e:9c:c8:73:80:0a:6d:88:e8:a0:b0:98:da:91:cc:
91:ec:3b:da:3f:47:b1:88:2c:0d:d6:d7:f7:70:6e:e4:67:b1:
95:8c:d2:d4:76:6f:fe:dd:c4:4a:0e:1e:cd:53:56:20:78:4c:
5a:e4:41:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNOZmfzQ/iv1BZ3xufWzdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3
MmY0MTcwHhcNMjUwNTAxMTkwMTI0WhcNMjUwNTAyMTkwMTI0WjAzMTEwLwYDVQQD
EyhlNTdmMWZkNzM1ZjY0ZmRlNWFkMWZhNzQwOTk2N2I1Y2YyMmU1OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW1NgDxWlNg4Z9xcDKk3sjH33URk
qilCE+6H5CZrmRcCxTz6e6QSz87ed9hkTJvTPKYYxSGWBKHMJo+VCK3BV2G6vo/v
lOMyjZVAgygit8y6s39Gkn3az6OMe69GZKa4U+Qqqhe6Ms/JmRRzMUbatZZilhDK
2dPRfrOk0Zsxoitn326lDhar8bB2j0MtOtPPy3PLRaTM4cDExfCDjkxpPx29wyvz
qK2b6Ct/Pry0fErSYr6ps7F8IZ0nJrEe5A2EkYtziHw+v7tjZsnP0QyLTr5BdWOe
PS5qHPmpLy1JGv4pAyH/nfOBEKbsoH/noiFqa99Jb73fyG9sBC33QrAqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV/H9c19k/eWtH6dAmWe1zyLljWMB8GA1UdIwQY
MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt
OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw
LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCqFB3Lw
HhyU+SwglZezxONKs0PEmYVyY6u7MpIPWjJfghxUHEbjxeYiy7qqrUOJoFZjCoLn
qQsJw2wRvgrWeVsAwk7Epcvw77WVScA/EDB5sHrsskMR9PYhWFb2x5TYmXDa5e0y
EWpaRyYR3VudgGOGsQv8z2jrA5zkE3ncMvo8LEJr6yd0OgBbCGiyEPN6Nci80Erd
LfSxwMXdlcO8uZqexkbCgguBWPR4sHk/LwLBLUO866AnruRCYKQKxVVhiNFiqLpK
ZkMifpzIc4AKbYjooLCY2pHMkew72j9HsYgsDdbX93Bu5GexlYzS1HZv/t3ESg4e
zVNWIHhMWuRBtQ==
-----END CERTIFICATE-----
Generated at Fri May 2 00:34:33 2025 by rpki-client