Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: wBEuEptXXnieJRrbXz+DPUvFeY0MJZyB8XoqkdbqAeI=
Subject key identifier: B3:E7:29:38:63:EF:D0:63:FF:FC:B9:A4:29:10:60:AA:7D:54:4B:72
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 019771BF7DF463C83D2E48638D16FFC35732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0F8B
Signing time: Sun 15 Jun 2025 04:01:04 +0000
Manifest this update: Sun 15 Jun 2025 04:01:04 +0000
Manifest next update: Mon 16 Jun 2025 04:01:04 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: BiyLzBxCaYHF9aB9ruXLlhdcSsYovrKPlMOkyjjfwzM=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:7d:f4:63:c8:3d:2e:48:63:8d:16:ff:c3:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Jun 15 04:01:04 2025 GMT
Not After : Jun 16 04:01:04 2025 GMT
Subject: CN=b3e7293863efd063fffcb9a4291060aa7d544b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:26:3e:d3:ac:0b:da:e3:75:66:16:2a:1a:
43:89:83:f6:d1:28:d8:ed:71:84:0a:de:0e:00:05:
0d:e4:98:37:34:a9:14:db:cb:32:b4:90:1f:5b:26:
e5:0a:ff:d3:ca:a6:9f:bb:17:18:b0:92:e1:78:11:
ac:d2:bf:8e:b9:2d:e4:65:58:35:38:d3:35:9c:cd:
6b:49:1f:91:1a:66:68:41:2f:da:98:5c:c3:1f:85:
c7:dc:ee:f3:57:25:9a:ef:54:a8:ab:52:e1:a4:bf:
ef:01:64:25:b7:c2:22:5e:2f:b2:ce:75:26:ff:ff:
43:a0:8b:18:11:b9:27:6d:4e:15:8a:42:31:d2:6b:
0f:cb:a7:05:05:a3:94:cc:87:90:b4:6a:24:8f:77:
d3:6a:b7:7e:6e:4d:b0:fd:09:9a:86:91:2e:b5:95:
dd:a5:1e:f2:31:9f:31:22:81:53:d2:04:bd:07:f6:
73:74:38:c6:d9:71:23:e7:52:1c:aa:45:50:0b:52:
dc:aa:01:a1:e4:29:ee:b3:e1:47:a7:29:57:a5:29:
e1:51:dd:56:23:af:2b:0d:09:bf:df:79:86:32:45:
da:9e:8e:b5:ed:2e:5d:43:ee:3f:62:92:42:22:2f:
e0:d6:0e:e1:3c:9a:59:98:57:c2:4e:bb:b0:65:3b:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:29:38:63:EF:D0:63:FF:FC:B9:A4:29:10:60:AA:7D:54:4B:72
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:c2:89:f0:8a:a6:1a:4c:a8:df:60:7d:18:1b:91:5e:ab:
4b:63:c0:20:49:b6:df:aa:0a:30:96:79:35:7d:37:30:50:67:
78:f9:d9:a7:d8:0d:c2:9e:53:75:75:0e:7a:4e:48:d5:86:b1:
6c:f5:09:0f:9c:74:20:6c:9c:3a:3c:5f:d7:70:9b:f0:2c:52:
c6:2d:f5:33:7d:09:c4:4c:26:22:64:7c:13:6e:3a:2d:ea:83:
66:c1:87:3d:50:f7:7e:9c:55:00:4f:b5:d6:c2:1b:a0:ec:c2:
95:18:6f:66:d3:d1:1b:19:bc:d8:61:99:9b:5a:65:1d:ec:a0:
7e:e3:e1:c0:e4:5f:44:51:db:61:1c:40:14:05:27:94:d5:13:
90:4f:da:5d:3e:27:b4:0c:94:23:ab:60:5d:7b:f1:89:10:f6:
da:bb:ca:d4:7c:50:c5:87:4e:90:3e:89:71:e5:6c:39:4b:d7:
10:93:06:eb:a5:b3:b8:c9:c8:6c:cd:82:74:96:23:7f:c9:19:
56:67:98:09:11:13:05:4e:3d:34:77:e1:3a:11:a0:4c:2e:ab:
c2:88:9b:67:34:a8:bc:8b:ea:f8:5d:8a:60:94:63:26:fa:d4:
1e:f1:d1:ad:67:cb:2d:7b:77:e6:bc:82:1d:ae:43:f6:5b:a0:
5e:e5:be:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv330Y8g9LkhjjRb/w1cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh
NmNhMjgwHhcNMjUwNjE1MDQwMTA0WhcNMjUwNjE2MDQwMTA0WjAzMTEwLwYDVQQD
EyhiM2U3MjkzODYzZWZkMDYzZmZmY2I5YTQyOTEwNjBhYTdkNTQ0YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzkmPtOsC9rjdWYWKhpDiYP20SjY
7XGECt4OAAUN5Jg3NKkU28sytJAfWyblCv/TyqafuxcYsJLheBGs0r+OuS3kZVg1
ONM1nM1rSR+RGmZoQS/amFzDH4XH3O7zVyWa71Soq1LhpL/vAWQlt8IiXi+yznUm
//9DoIsYEbknbU4VikIx0msPy6cFBaOUzIeQtGokj3fTard+bk2w/QmahpEutZXd
pR7yMZ8xIoFT0gS9B/ZzdDjG2XEj51IcqkVQC1LcqgGh5Cnus+FHpylXpSnhUd1W
I68rDQm/33mGMkXano617S5dQ+4/YpJCIi/g1g7hPJpZmFfCTruwZTvnSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPnKThj79Bj//y5pCkQYKp9VEtyMB8GA1UdIwQY
MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt
YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh
LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2/CifCK
phpMqN9gfRgbkV6rS2PAIEm236oKMJZ5NX03MFBnePnZp9gNwp5TdXUOek5I1Yax
bPUJD5x0IGycOjxf13Cb8CxSxi31M30JxEwmImR8E246LeqDZsGHPVD3fpxVAE+1
1sIboOzClRhvZtPRGxm82GGZm1plHeygfuPhwORfRFHbYRxAFAUnlNUTkE/aXT4n
tAyUI6tgXXvxiRD22rvK1HxQxYdOkD6JceVsOUvXEJMG66WzuMnIbM2CdJYjf8kZ
VmeYCRETBU49NHfhOhGgTC6rwoibZzSovIvq+F2KYJRjJvrUHvHRrWfLLXt35ryC
Ha5D9lugXuW+vQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:47 2025 by rpki-client