Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: tlEY0f+MsjbdxnloOgLuzda/zTAX8kyXVVpBYMiOR7M=
Subject key identifier: 03:49:9F:1C:3B:0E:62:3D:F7:AE:76:81:69:D9:51:E9:6B:E9:26:41
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 0197B6A0C7296449EE1DA5C4088615E3F837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0275
Signing time: Sat 28 Jun 2025 13:01:19 +0000
Manifest this update: Sat 28 Jun 2025 13:01:19 +0000
Manifest next update: Sun 29 Jun 2025 13:01:19 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: Qdieg+yGIFLU3+4PcMxF5G8g7BYqYHFGmjbj/ejvqTc=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c7:29:64:49:ee:1d:a5:c4:08:86:15:e3:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Jun 28 13:01:19 2025 GMT
Not After : Jun 29 13:01:19 2025 GMT
Subject: CN=03499f1c3b0e623df7ae768169d951e96be92641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:00:9b:af:2b:9f:ba:d7:11:dc:c8:41:0a:
bc:ce:74:e6:85:28:3b:6e:14:88:13:d7:07:a1:9c:
0c:ed:63:da:fe:0b:5b:7a:d4:f1:53:01:55:df:fa:
25:95:da:a9:d2:e8:4d:ba:f7:67:16:bf:ac:68:4b:
b9:24:44:01:68:07:f3:69:ee:61:49:5f:2b:8d:1f:
2a:cf:c6:9e:5d:11:2c:fa:45:ce:3f:3c:a8:55:40:
65:f2:e1:b8:16:eb:08:9f:3b:b3:bf:50:4d:32:c0:
62:dd:bc:73:99:ca:cb:2e:8c:75:b9:c7:ae:eb:eb:
fb:fd:60:99:50:5c:ec:e4:7f:c9:0d:58:f7:93:b5:
65:b8:79:0f:7b:67:ee:87:09:69:6b:30:f6:74:4b:
e6:e9:4b:2f:6a:16:32:d8:43:06:a7:f6:9a:e6:eb:
70:b9:2f:ce:e5:8d:1b:98:47:7c:39:52:1a:51:0a:
3c:0d:ba:24:82:b8:48:bd:1d:43:c8:1e:62:f1:1e:
c4:cf:b4:11:00:76:49:62:48:13:84:8d:96:98:e0:
3f:a8:9d:6e:e4:83:e1:34:c6:77:1f:d8:bf:56:0a:
88:59:4a:9d:d8:41:84:27:ee:2e:07:61:14:53:b3:
d2:2b:72:2f:8c:48:f3:c2:cb:2c:25:43:5f:43:22:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:9F:1C:3B:0E:62:3D:F7:AE:76:81:69:D9:51:E9:6B:E9:26:41
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:75:44:25:5b:08:23:33:21:59:36:b2:eb:bc:9b:49:f0:ba:
1c:48:71:64:8c:4b:77:70:8e:87:c4:13:38:29:88:98:38:68:
29:7e:7c:a8:d7:56:a5:04:14:0e:11:2e:1a:40:9c:a6:4e:e0:
71:fc:a6:f7:e8:40:93:00:86:06:eb:24:70:df:ae:79:d2:ef:
ce:98:0a:12:c9:b4:cc:40:24:ca:b7:a2:80:9b:93:06:83:dc:
69:a3:b8:53:26:6d:3a:91:00:28:27:a6:12:8b:4e:b4:8d:c8:
ce:88:1e:5b:bc:36:42:ee:15:a4:56:54:fa:c3:de:be:a1:6c:
d9:e8:0b:7b:d0:d7:d5:c6:5d:7b:95:f7:61:74:33:f0:54:b6:
db:ce:f9:ac:8e:9f:e2:9b:f2:ef:97:c4:d8:4a:be:7c:dc:f8:
2f:db:92:b3:a6:5f:35:db:8d:87:81:8e:2d:b0:bc:65:6a:41:
2e:a9:98:2c:a6:7a:f6:ec:a9:f0:15:45:52:0e:85:22:13:b1:
20:cd:98:a1:64:7a:b9:3d:55:49:24:23:3d:10:c7:61:9b:c7:
a5:84:b6:16:42:f8:a2:ef:03:c9:c4:07:8a:f9:1c:72:c2:99:
cd:b2:b0:94:c4:42:72:a6:5c:ec:99:e8:d5:1c:e9:94:bd:da:
1e:6f:54:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMcpZEnuHaXECIYV4/g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjUwNjI4MTMwMTE5WhcNMjUwNjI5MTMwMTE5WjAzMTEwLwYDVQQD
EygwMzQ5OWYxYzNiMGU2MjNkZjdhZTc2ODE2OWQ5NTFlOTZiZTkyNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EEAm68rn7rXEdzIQQq8znTmhSg7
bhSIE9cHoZwM7WPa/gtbetTxUwFV3/olldqp0uhNuvdnFr+saEu5JEQBaAfzae5h
SV8rjR8qz8aeXREs+kXOPzyoVUBl8uG4FusInzuzv1BNMsBi3bxzmcrLLox1uceu
6+v7/WCZUFzs5H/JDVj3k7VluHkPe2fuhwlpazD2dEvm6UsvahYy2EMGp/aa5utw
uS/O5Y0bmEd8OVIaUQo8DbokgrhIvR1DyB5i8R7Ez7QRAHZJYkgThI2WmOA/qJ1u
5IPhNMZ3H9i/VgqIWUqd2EGEJ+4uB2EUU7PSK3IvjEjzwsssJUNfQyKyvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANJnxw7DmI99652gWnZUelr6SZBMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3VEJVsI
IzMhWTay67ybSfC6HEhxZIxLd3COh8QTOCmImDhoKX58qNdWpQQUDhEuGkCcpk7g
cfym9+hAkwCGBuskcN+uedLvzpgKEsm0zEAkyreigJuTBoPcaaO4UyZtOpEAKCem
EotOtI3IzogeW7w2Qu4VpFZU+sPevqFs2egLe9DX1cZde5X3YXQz8FS22875rI6f
4pvy75fE2Eq+fNz4L9uSs6ZfNduNh4GOLbC8ZWpBLqmYLKZ69uyp8BVFUg6FIhOx
IM2YoWR6uT1VSSQjPRDHYZvHpYS2FkL4ou8DycQHivkccsKZzbKwlMRCcqZc7Jno
1RzplL3aHm9UQg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:08 2025 by rpki-client