Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: GhSsC1jcNKGjCF7RZfQP+9LtEugqJyquaiISJ2zj7Wo=
Subject key identifier: 20:DF:36:E5:43:63:91:B4:99:CE:92:4A:DD:E9:92:C7:CC:24:A8:4E
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0197BA0F43078FE46C7F85CBD9B80F7CC627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0DBB
Signing time: Sun 29 Jun 2025 05:00:51 +0000
Manifest this update: Sun 29 Jun 2025 05:00:51 +0000
Manifest next update: Mon 30 Jun 2025 05:00:51 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: Tvn14kQwwGHmXPAtDJ+MjCrCipEWo1zPig3FbIAsMwk=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:43:07:8f:e4:6c:7f:85:cb:d9:b8:0f:7c:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jun 29 05:00:51 2025 GMT
Not After : Jun 30 05:00:51 2025 GMT
Subject: CN=20df36e5436391b499ce924adde992c7cc24a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:1b:6b:01:04:85:ac:bd:3f:35:3d:8b:6e:
f6:b5:88:f1:5f:77:6c:c1:d0:41:b7:38:69:f0:50:
38:a9:14:07:6a:e3:14:8a:cb:84:72:4b:55:96:29:
1f:a4:6a:e5:8e:ac:96:c7:96:2c:f9:7c:60:2a:5a:
96:8d:38:9a:a2:2b:47:d1:7a:a5:29:91:3b:b1:63:
8a:b5:b8:ba:45:73:1e:58:92:29:63:e6:53:24:65:
18:ae:fe:a2:f2:d8:21:f8:6e:f8:51:bb:23:d8:92:
48:d7:e9:50:ff:b0:40:b0:a7:91:9d:13:fe:c6:54:
7f:b0:4f:3f:e1:96:07:bd:13:a2:a7:5b:1f:cc:9f:
62:99:53:63:60:bf:6e:9e:95:64:2b:35:58:46:50:
62:29:bc:18:d5:d3:8a:14:2b:45:be:55:38:39:89:
f1:71:4a:e4:c9:c2:5a:6e:73:6d:20:f3:4f:09:76:
b4:1c:22:fe:49:81:ec:81:a1:42:60:88:47:7f:ba:
e6:76:d3:9b:d7:4b:01:c0:ca:b8:69:ed:69:9b:3d:
27:b7:e7:85:9a:c5:f8:04:75:a9:1e:ec:8a:1d:27:
b7:a0:6a:87:cb:fb:93:cd:bd:08:ac:ab:9f:01:57:
86:99:1a:2d:25:46:2f:74:ec:f9:0b:95:0d:0e:49:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:36:E5:43:63:91:B4:99:CE:92:4A:DD:E9:92:C7:CC:24:A8:4E
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:74:8c:8c:65:81:cf:f3:68:83:a6:6b:bf:ca:78:f3:a4:47:
f9:15:f9:49:68:ed:09:f9:d5:8d:f4:2f:c3:84:0f:24:ab:2a:
5f:a5:39:a3:47:a9:2c:8a:47:59:5d:d5:25:55:30:1f:cb:8a:
85:ef:b7:64:be:35:da:43:e4:7e:f0:2f:a7:a9:40:bc:65:b4:
82:0b:0d:96:68:3d:cb:f5:41:1f:ae:6b:37:d5:29:b7:c7:18:
1e:f2:7c:9d:35:50:fa:3d:f6:00:ce:9a:78:23:0f:cf:74:fe:
21:51:13:3c:90:04:ad:1b:5a:57:86:77:06:32:95:86:d0:68:
10:ff:02:03:de:7c:57:a4:2b:99:a7:72:ad:5c:89:0f:78:1e:
e3:48:e0:b1:48:df:86:04:2e:bd:18:c6:fe:21:35:ad:7e:38:
4e:e5:56:eb:3d:10:38:21:79:b8:72:bf:e5:67:1b:51:63:9a:
24:7e:5b:2a:ff:cb:68:06:b0:67:28:a1:a0:c1:92:16:c8:a0:
de:94:70:8b:51:5e:28:86:73:94:14:b0:4c:de:80:4c:07:f0:
6b:a8:a2:ff:bf:fd:98:06:a9:6d:6f:a4:f5:f7:f6:d9:56:85:
af:1a:c9:3c:9d:27:f1:a7:4b:b6:52:fd:ae:56:b8:f5:3b:c0:
de:de:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:47:04 2025 by rpki-client