Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: jiVEdJfiONnLvMeEpNL5JkQT87uA2Zs6ptVK72AXMso=
Subject key identifier: 2D:3F:9C:74:8A:D6:2B:45:7A:D8:74:33:9B:4B:1E:C9:2C:0B:F8:90
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01976A3CD80F49A2BDB6D50D4238D668D336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1520
Signing time: Fri 13 Jun 2025 17:01:01 +0000
Manifest this update: Fri 13 Jun 2025 17:01:01 +0000
Manifest next update: Sat 14 Jun 2025 17:01:01 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: qPZ9ybHYsxG7hRtGOv3FnwT2nDo1uKV5mvYaMK3OAu0=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:d8:0f:49:a2:bd:b6:d5:0d:42:38:d6:68:d3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jun 13 17:01:01 2025 GMT
Not After : Jun 14 17:01:01 2025 GMT
Subject: CN=2d3f9c748ad62b457ad874339b4b1ec92c0bf890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:40:66:06:0f:e9:97:28:4e:7a:37:fc:86:
6e:2a:b3:1b:3f:fe:2e:ab:bb:d5:81:44:56:b0:03:
5d:4b:93:ac:bc:ef:6d:e5:9f:7e:3b:29:5e:25:a5:
44:23:b2:ac:2b:2c:5d:13:7a:54:4a:d3:60:09:4b:
05:86:38:90:58:2d:b5:38:b6:94:fc:bd:dc:f7:a7:
4f:cc:a0:e2:c8:0f:29:bd:d2:ed:64:65:27:d0:a9:
c2:58:db:88:6d:d2:6d:70:81:54:70:da:fc:31:b1:
a7:22:17:c6:fb:6f:55:0d:40:66:b0:92:8c:ff:75:
31:9f:a1:b3:a4:6e:26:d4:57:1a:02:ab:93:cf:c0:
25:89:7b:42:c1:d9:13:e2:ad:76:db:ce:68:c0:b2:
c9:54:40:04:40:ee:40:ae:0a:2e:00:e3:8f:75:aa:
7d:db:90:af:a7:66:8e:eb:85:64:3a:51:34:3f:e6:
45:96:2b:2d:de:ac:eb:61:38:b2:08:d6:79:0b:27:
ec:d4:1d:b7:f5:08:d3:ff:3e:20:36:b4:48:64:4b:
a1:62:ab:fc:b5:b9:66:2d:ba:99:c2:e6:1c:58:d6:
d3:54:eb:45:d6:d6:57:66:88:67:6e:46:81:89:a7:
48:fe:f7:46:8c:bb:5a:01:db:9a:70:bb:55:89:52:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:9C:74:8A:D6:2B:45:7A:D8:74:33:9B:4B:1E:C9:2C:0B:F8:90
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7e:5b:ae:3e:95:ad:6f:53:51:49:38:e6:39:9c:45:d2:8f:
0d:e8:cd:85:de:bc:f2:8d:1f:44:9e:8a:da:20:f8:36:f4:0e:
ca:ea:42:2c:cd:26:a4:6b:54:86:3a:cf:2f:f3:99:83:1c:5c:
ab:a3:80:de:0a:ac:4f:6d:33:ae:3f:d0:24:88:2a:ef:44:16:
09:56:88:d2:8d:7f:2b:a4:5a:af:80:e7:f8:f3:5a:36:c3:26:
08:5c:22:f4:7a:5f:37:b8:ae:43:bb:50:47:a9:1e:09:82:ca:
d2:ac:63:8e:ce:e5:75:ac:ce:4f:e8:91:e7:1d:5b:61:e1:17:
b2:44:a1:b0:64:b4:03:55:2f:a7:65:49:f9:09:38:ab:6d:e3:
cc:65:61:8b:8c:9e:34:a0:bf:f4:aa:a6:f2:3d:34:5e:07:be:
d5:57:73:bc:0f:8a:2e:d4:64:14:a5:2a:48:e5:16:53:7d:c3:
ec:be:f0:f9:ab:4f:e9:e1:b4:52:f5:ae:2c:18:11:06:93:db:
49:f8:1b:70:31:27:b9:f6:96:c5:73:b2:f7:ca:30:ab:e4:f7:
2f:aa:3e:db:73:72:f5:d4:ae:80:bd:a8:d7:59:71:d6:55:4b:
06:d0:cd:46:4e:7e:ec:bb:4f:42:e8:bc:82:8f:1f:66:06:98:
2e:4b:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:54 2025 by rpki-client