
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: DVrpOBW21sVdgrVFdu+dVjrPWaXtIX+EopVl98ApfEk=
Subject key identifier: BA:23:EC:FC:F5:3D:0C:E0:3F:32:DA:50:E8:9C:99:32:6F:62:75:C4
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 0197B6A06D293AA76898271C1327DE55175D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 01B5
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: Gpqw8uyFSprJXhFZbS6Eqn/SLFr70kqVCrWG5k4a4EA=)
2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
3: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6d:29:3a:a7:68:98:27:1c:13:27:de:55:17:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=ba23ecfcf53d0ce03f32da50e89c99326f6275c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:cb:40:63:43:2b:7d:46:f3:08:ad:af:de:
5a:d8:f0:04:f4:32:01:28:0b:02:32:6a:4d:cc:9b:
4b:0e:18:7f:43:d8:a8:6e:c6:ef:97:18:5b:f2:14:
5f:c6:61:13:66:ac:c4:1a:de:ab:d9:54:ff:78:32:
7f:e9:ae:1c:40:1e:f9:31:b3:d0:f1:1b:0c:de:8f:
4a:54:fd:cb:bd:c6:73:7f:9b:b0:37:91:6c:12:b8:
3d:a4:bf:86:c1:02:b1:e5:0b:6c:07:51:35:58:36:
9e:57:65:7c:39:d0:04:a0:88:ad:9e:88:bd:0e:4c:
84:60:a0:71:18:0e:e5:fe:f5:91:26:93:cf:31:f7:
c2:30:01:15:d5:51:ac:ad:b0:f4:07:d2:75:bb:66:
f9:95:fb:16:9d:2c:5a:93:85:cf:62:a0:7c:d4:91:
50:5e:ab:8e:22:75:2d:0c:27:78:78:c0:34:65:91:
cd:41:28:29:45:ad:5b:7b:b5:9d:fc:b2:67:d7:ad:
41:ed:19:b1:dc:a5:e3:8f:83:69:50:ab:f1:82:d4:
20:1a:11:52:c5:54:8f:26:cb:12:a0:85:96:1d:b5:
43:69:ef:30:ac:c5:d7:4e:7f:28:f3:01:e7:f5:80:
ca:01:1e:bc:8b:11:e2:4f:3b:d2:0e:84:fc:b4:d8:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:EC:FC:F5:3D:0C:E0:3F:32:DA:50:E8:9C:99:32:6F:62:75:C4
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:a7:c2:bb:10:e9:e3:96:bd:60:26:e4:61:e7:6e:37:0e:
50:17:e4:cf:35:27:c4:6a:9b:7c:5d:e6:e5:9f:48:85:f9:9a:
d8:52:d2:b7:fe:0b:c4:c3:29:f3:95:17:ce:28:fe:64:42:fa:
c4:8d:4e:93:ed:09:74:bf:6d:59:26:08:7c:02:54:6b:1a:57:
86:c0:2d:44:94:e9:f3:9a:50:d9:78:37:f4:3d:72:7f:a9:31:
e5:d3:4d:34:06:2e:ce:5d:65:33:f0:2f:c6:73:2c:61:9f:10:
0a:36:1b:11:38:cc:f0:0a:0b:71:7c:2e:df:6c:10:3a:d5:50:
53:78:f1:ec:8b:e3:20:fa:60:d6:cf:d7:2e:8b:3f:c3:33:9d:
76:b8:04:e9:aa:b7:a7:4f:ab:13:c7:f6:65:67:17:59:88:23:
67:34:23:d4:a0:f7:a6:6c:4a:a0:df:bf:a2:81:f6:cd:b4:f1:
94:f1:70:2e:41:40:77:39:66:12:cc:0e:69:54:99:c1:ee:5b:
89:d8:06:f3:54:07:28:89:8d:94:67:94:7a:5e:b3:65:a7:7a:
c6:bb:21:ef:81:cd:2d:37:b8:fd:d2:16:84:2c:d8:1b:4b:57:
46:ac:9d:fd:8b:f1:d6:c3:10:e6:5c:9c:3e:25:b1:b7:68:2a:
b4:64:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:34 2025 by rpki-client