Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: vpm6KqWTTS44d/JpRvtswOl5Gf2QOm+EAXz+jU5so7Y=
Subject key identifier: F2:F8:BE:06:92:FF:6F:74:6D:47:67:D0:8A:D5:19:25:14:B6:B1:31
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0197B77C99B67F37B2B7A2E8A8166447B565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 17:01:25 +0000
Manifest this update: Sat 28 Jun 2025 17:01:25 +0000
Manifest next update: Sun 29 Jun 2025 17:01:25 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: Ja63JUUao8pPXn3H88CJMb0mKCfaAxyUSyhaB5nEPCs=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:99:b6:7f:37:b2:b7:a2:e8:a8:16:64:47:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jun 28 17:01:25 2025 GMT
Not After : Jun 29 17:01:25 2025 GMT
Subject: CN=f2f8be0692ff6f746d4767d08ad5192514b6b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:21:73:23:da:0c:07:35:71:f5:96:c7:c5:
5d:55:b6:a5:87:fb:08:f1:ae:48:b3:ff:bc:6f:50:
99:02:fc:e2:c6:ef:ac:52:e0:ac:fe:ed:23:cb:64:
43:82:0a:88:8c:e3:df:72:e2:4e:f6:bc:4c:21:aa:
79:25:29:50:27:87:47:49:76:e1:69:7d:5a:7d:2b:
4c:46:58:86:a6:52:86:dd:bf:f8:a9:0f:ab:31:99:
39:02:0d:10:11:7e:bd:61:cf:7e:4f:61:74:d8:0a:
da:82:0e:db:0f:65:a5:0a:12:07:7c:f8:a2:5f:eb:
53:da:f4:eb:f0:3b:80:07:04:f9:89:96:d3:f8:c1:
10:47:05:a9:ad:e6:0d:43:01:d9:13:49:12:40:26:
66:45:89:e2:cf:93:95:23:60:57:ed:e4:67:e4:b0:
b2:9c:4e:5b:c3:da:53:ef:ed:32:13:71:8d:ff:be:
08:18:85:6c:f8:2d:82:bc:9c:3f:3a:14:7b:92:c9:
e8:d4:41:3f:f8:bb:cc:d8:a4:40:47:0a:22:e7:76:
05:13:5e:f4:e2:5d:7a:4a:ce:45:2d:32:f0:f2:47:
59:c2:84:f3:ea:21:b7:bd:ba:90:36:8c:d7:53:e3:
7f:a7:e8:62:26:0f:3d:bb:51:e2:04:ec:1e:4e:45:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:BE:06:92:FF:6F:74:6D:47:67:D0:8A:D5:19:25:14:B6:B1:31
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:14:ae:e9:fa:4b:8f:d3:f5:d8:51:08:59:9e:f4:b6:c0:
cc:31:c6:69:81:89:54:f1:a2:38:ed:0c:d0:03:fe:bf:35:e8:
84:2f:8f:08:73:eb:6e:52:af:9f:f0:1f:58:7d:0e:28:af:1a:
30:1a:15:63:47:95:7f:2a:4b:1f:3e:b7:e7:d0:20:b6:17:78:
f9:f1:d6:1f:9c:14:07:42:69:7e:f5:4d:d1:6a:a8:ea:59:b2:
5c:f3:b4:af:c4:92:60:cd:30:57:ab:57:51:2d:fc:81:c8:6d:
73:f1:15:02:dc:05:0a:e3:62:15:36:61:5a:23:fd:05:99:55:
38:78:83:2f:41:b9:47:2e:16:4e:99:a4:30:7e:4b:65:47:6e:
72:09:8e:e4:47:ed:5a:52:49:2e:74:f7:3c:63:3e:30:a7:4e:
f1:5c:c4:5c:7f:7e:88:0d:5b:ad:a0:79:4a:f5:20:f2:7f:dd:
e3:34:1b:5b:7f:47:08:62:b5:86:32:9e:88:90:54:69:64:a8:
27:ac:6c:c5:91:a4:40:6f:5b:c9:49:c3:19:ba:40:64:f7:72:
4e:85:41:23:9d:58:42:08:f2:17:22:b5:7d:0c:80:8b:b9:e3:
7b:21:a7:ae:d1:35:10:20:cd:87:4d:5c:2b:1c:69:58:a4:ae:
dd:56:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:34 2025 by rpki-client