
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: vqD4PNUyyhGyhV/tUv2xnLKM71KAc5sGUvNM9sSl7DY=
Subject key identifier: 6E:BE:B0:9A:15:49:AC:EC:30:66:A6:0E:7A:BB:E4:DC:84:28:F0:A3
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 0196BB5B365688C36CDF37663781DCB8C572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 01F3
Signing time: Sat 10 May 2025 18:00:39 +0000
Manifest this update: Sat 10 May 2025 18:00:39 +0000
Manifest next update: Sun 11 May 2025 18:00:39 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: qBSNLvIG+VBH9skOopAjSk8GtvvOX53YoE8oOqwKlgs=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:36:56:88:c3:6c:df:37:66:37:81:dc:b8:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: May 10 18:00:39 2025 GMT
Not After : May 11 18:00:39 2025 GMT
Subject: CN=6ebeb09a1549acec3066a60e7abbe4dc8428f0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:a7:3a:67:0e:e9:bb:7f:b4:57:2e:7a:d2:
31:b1:01:8d:87:11:ba:a0:d3:1a:66:71:09:65:d1:
44:f9:ec:bb:18:e8:de:02:dc:c9:9d:e1:0f:92:e6:
f5:bf:ab:8c:bc:92:6b:5e:85:dc:0e:fd:1b:f7:c0:
73:f9:ef:4d:c8:1d:26:fe:60:b4:12:05:87:5c:de:
c1:a3:45:1a:36:d8:c9:38:ea:6b:a6:cf:a3:e3:33:
16:56:d0:2b:f9:85:dc:12:a6:cd:c4:02:4e:4d:9d:
21:dd:81:b9:0b:b3:29:a4:94:90:d9:a7:3d:bb:60:
cf:21:99:41:54:cb:f3:b4:f6:df:8a:40:49:c4:c9:
65:fc:26:bd:1b:12:e0:40:0d:5c:72:c4:f2:05:cd:
cf:0f:13:b6:5a:8e:73:e3:c2:3a:f8:31:19:2d:00:
8f:eb:23:4b:b6:53:f2:65:0d:33:8e:5e:8b:9b:95:
34:cb:2a:5d:91:89:83:82:cd:4b:38:d9:98:b7:a3:
21:c3:89:85:d3:e0:28:72:8a:8b:b4:60:68:5c:56:
dd:60:e1:e3:f5:d6:44:35:a1:b2:5d:73:0e:02:9a:
93:d4:17:fe:e2:9c:64:50:f4:a7:76:d3:54:fc:28:
22:dc:30:a3:4f:fd:bc:bd:b6:d2:f7:3e:9e:d9:34:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:B0:9A:15:49:AC:EC:30:66:A6:0E:7A:BB:E4:DC:84:28:F0:A3
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:54:b8:ab:b2:97:5d:01:7b:b3:9e:a6:76:15:d5:ec:fe:06:
6f:15:6e:04:bf:b7:6c:0d:9b:15:87:30:77:ba:1b:fc:d1:c0:
fb:08:49:eb:45:ba:c4:5d:49:a2:00:62:4e:90:05:49:44:2c:
d0:27:96:e1:ff:14:88:09:3e:8c:16:04:bf:10:f5:2a:bb:4e:
be:13:3c:cc:18:e1:bd:59:75:ff:49:4a:75:b1:f4:77:49:f1:
d7:9f:0e:70:a2:7d:1b:5f:47:3d:35:6a:f6:46:11:26:50:e9:
b7:bf:2c:ad:7f:bc:48:28:dc:a3:a2:6d:dc:e9:9a:19:d3:99:
c0:70:9d:e7:e2:34:67:c9:04:de:2d:b5:0e:af:a2:4b:75:ff:
a8:92:07:8a:e9:cb:72:1b:8d:f6:a5:50:65:34:14:bd:07:05:
eb:2c:63:e3:1f:75:9a:fd:f3:0c:8e:30:95:54:74:9f:db:eb:
6f:6f:25:4c:8c:d2:95:c4:7b:76:84:7a:43:f6:e9:99:a5:bc:
58:a5:c3:c8:ef:9e:41:bf:2b:20:7b:e2:05:fa:7a:35:c5:09:
dd:c6:98:26:6c:93:11:de:fb:51:35:7f:14:5f:7c:6d:e7:dd:
4f:a0:3d:cd:0a:aa:64:01:1a:65:5e:60:71:21:e4:35:02:b9:
18:6d:27:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WzZWiMNs3zdmN4HcuMVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjUwNTEwMTgwMDM5WhcNMjUwNTExMTgwMDM5WjAzMTEwLwYDVQQD
Eyg2ZWJlYjA5YTE1NDlhY2VjMzA2NmE2MGU3YWJiZTRkYzg0MjhmMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlWnOmcO6bt/tFcuetIxsQGNhxG6
oNMaZnEJZdFE+ey7GOjeAtzJneEPkub1v6uMvJJrXoXcDv0b98Bz+e9NyB0m/mC0
EgWHXN7Bo0UaNtjJOOprps+j4zMWVtAr+YXcEqbNxAJOTZ0h3YG5C7MppJSQ2ac9
u2DPIZlBVMvztPbfikBJxMll/Ca9GxLgQA1ccsTyBc3PDxO2Wo5z48I6+DEZLQCP
6yNLtlPyZQ0zjl6Lm5U0yypdkYmDgs1LONmYt6Mhw4mF0+AocoqLtGBoXFbdYOHj
9dZENaGyXXMOApqT1Bf+4pxkUPSndtNU/Cgi3DCjT/28vbbS9z6e2TT2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6+sJoVSazsMGamDnq75NyEKPCjMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFS4q7KX
XQF7s56mdhXV7P4GbxVuBL+3bA2bFYcwd7ob/NHA+whJ60W6xF1JogBiTpAFSUQs
0CeW4f8UiAk+jBYEvxD1KrtOvhM8zBjhvVl1/0lKdbH0d0nx158OcKJ9G19HPTVq
9kYRJlDpt78srX+8SCjco6Jt3OmaGdOZwHCd5+I0Z8kE3i21Dq+iS3X/qJIHiunL
chuN9qVQZTQUvQcF6yxj4x91mv3zDI4wlVR0n9vrb28lTIzSlcR7doR6Q/bpmaW8
WKXDyO+eQb8rIHviBfp6NcUJ3caYJmyTEd77UTV/FF98befdT6A9zQqqZAEaZV5g
cSHkNQK5GG0nfA==
-----END CERTIFICATE-----
Generated at Sun May 11 02:19:16 2025 by rpki-client