Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: UoublgfNYBdrnn49q09zXxcAEnd9ZB/zJ3r8PTdKbKk=
Subject key identifier: 50:B5:0E:FC:9E:D8:39:CB:34:9E:9F:26:85:CC:7E:72:F3:14:37:7B
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 0197B70F24F945DCA4B40F58756E53C63F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1424
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: 5macthErQk0v/GnsNUrkvfOHcpFGgFuhz8NO2YGt9jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:f9:45:dc:a4:b4:0f:58:75:6e:53:c6:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=50b50efc9ed839cb349e9f2685cc7e72f314377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:fb:c6:83:1e:70:5d:ea:c2:bc:97:97:c3:
a6:b5:56:64:d1:3f:47:c7:3d:50:66:ff:6a:0a:bb:
91:4f:2f:ad:ba:82:6b:20:ac:01:f1:6c:15:f1:6c:
dc:16:05:b0:e3:82:2f:64:32:73:7a:f3:16:4d:4b:
65:d7:c0:c9:29:a1:6e:64:ed:fe:a7:07:85:b4:b3:
07:84:aa:85:95:2b:20:12:d0:95:e2:5a:74:30:2e:
6a:93:86:b2:4b:db:e3:72:30:30:e9:d3:9a:10:c1:
27:a0:2e:91:83:36:a6:4a:3b:46:7b:62:38:40:79:
bd:3c:6b:96:bf:a6:0c:49:c9:66:d8:f1:a8:9b:ce:
60:35:ad:48:16:cf:a9:ce:68:67:56:cc:11:7d:ce:
40:12:a0:ed:14:84:5d:70:a0:63:38:89:5b:29:9e:
1b:1b:47:bb:ad:da:09:a0:c6:e2:52:5a:4c:13:7d:
80:39:e8:a1:9b:c4:30:73:b1:e9:d1:43:cb:c3:96:
9d:fe:b6:91:ae:4a:4c:8d:c9:53:44:f4:e9:35:ed:
97:f5:f6:73:15:ab:14:71:52:c5:d5:8d:bd:5f:5e:
5e:f0:29:f0:3b:2d:4a:64:a1:2f:f7:c9:16:43:74:
08:63:cb:4b:d1:90:ca:e7:9f:50:16:63:ae:7a:b4:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:0E:FC:9E:D8:39:CB:34:9E:9F:26:85:CC:7E:72:F3:14:37:7B
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:77:5c:c8:6d:f5:41:ba:e2:07:fc:7d:e7:8f:67:b7:3b:
2d:78:a0:ae:5c:20:76:77:a9:5c:39:f7:dc:2d:52:ae:43:c7:
b7:74:6d:a3:a9:eb:5c:2a:a9:d7:c5:21:ea:cd:8b:4d:03:a5:
33:89:58:a8:dd:f2:35:bd:ef:67:1f:dc:c8:8b:96:61:bd:9c:
10:11:7b:c0:4f:ef:12:07:9b:20:d3:b3:1f:00:2a:83:65:5b:
f6:11:6e:94:d5:5d:87:38:81:2c:dd:5d:c1:1c:0d:39:59:9a:
f7:da:84:eb:dc:d1:fe:dc:b9:d8:65:2c:87:57:a2:88:cd:24:
c1:c4:bc:f1:7f:04:9a:ff:13:76:ff:37:01:0a:9c:34:a0:de:
a4:d9:14:65:c5:4d:bc:33:49:65:8d:12:b5:6a:8e:42:5e:27:
5a:3d:e8:2d:c0:54:c8:d9:22:b7:f1:a0:c2:12:ed:76:26:0a:
5a:bc:25:b5:4d:7d:9c:4a:18:75:df:1b:3e:3c:33:6b:7c:ff:
be:83:74:92:49:01:45:05:f6:b6:ba:8b:ce:db:47:39:10:03:
5d:1c:27:85:13:15:cf:9b:1c:72:7c:3d:d7:98:64:7a:8e:6d:
ed:7f:8b:f6:ba:2e:b7:2d:da:16:16:85:6b:65:a7:1c:81:82:
9d:15:f7:71
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3DyT5RdyktA9YdW5Txj8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRjYzIwYTcwZWY1YTAzMTQ2YTdkYzVhNzlkZGI1MDY1
YmVkZTgwHhcNMjUwNjI4MTUwMTUyWhcNMjUwNjI5MTUwMTUyWjAzMTEwLwYDVQQD
Eyg1MGI1MGVmYzllZDgzOWNiMzQ5ZTlmMjY4NWNjN2U3MmYzMTQzNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM37xoMecF3qwryXl8OmtVZk0T9H
xz1QZv9qCruRTy+tuoJrIKwB8WwV8WzcFgWw44IvZDJzevMWTUtl18DJKaFuZO3+
pweFtLMHhKqFlSsgEtCV4lp0MC5qk4ayS9vjcjAw6dOaEMEnoC6RgzamSjtGe2I4
QHm9PGuWv6YMSclm2PGom85gNa1IFs+pzmhnVswRfc5AEqDtFIRdcKBjOIlbKZ4b
G0e7rdoJoMbiUlpME32AOeihm8Qwc7Hp0UPLw5ad/raRrkpMjclTRPTpNe2X9fZz
FasUcVLF1Y29X15e8CnwOy1KZKEv98kWQ3QIY8tL0ZDK559QFmOuerRgHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFC1Dvye2DnLNJ6fJoXMfnLzFDd7MB8GA1UdIwQY
MBaAFPoUzCCnDvWgMUan3Fp53bUGW+3oMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oVE1JS2NPOWFBeFJxZmNXbm5kdFFaYjdlZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNTBiZmNlLTM4NWUtNDA2NC1iZGU3
LTU5ZmVjMmI5ZjkxNC8xLzEtaFRNSUtjTzlhQXhScWZjV25uZHRRWmI3ZWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzljLzUwYmZjZS0zODVlLTQwNjQtYmRlNy01OWZlYzJiOWY5
MTQvMS8xLWhUTUlLY085YUF4UnFmY1dubmR0UVpiN2VnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgh3
XMht9UG64gf8feePZ7c7LXigrlwgdnepXDn33C1SrkPHt3Rto6nrXCqp18Uh6s2L
TQOlM4lYqN3yNb3vZx/cyIuWYb2cEBF7wE/vEgebINOzHwAqg2Vb9hFulNVdhziB
LN1dwRwNOVma99qE69zR/ty52GUsh1eiiM0kwcS88X8Emv8Tdv83AQqcNKDepNkU
ZcVNvDNJZY0StWqOQl4nWj3oLcBUyNkit/GgwhLtdiYKWrwltU19nEoYdd8bPjwz
a3z/voN0kkkBRQX2trqLzttHORADXRwnhRMVz5sccnw915hkeo5t7X+L9routy3a
FhaFa2WnHIGCnRX3cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:23 2025 by rpki-client