Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File: H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier: 28FKHxWxXO2QA1pa+gNNWn2PfZivL+fhozpJ95LCurs=
Subject key identifier: 46:DA:71:86:AA:05:3D:75:70:1E:DD:05:50:C6:43:11:BD:4D:B0:6C
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer: /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial: 01984965F92A58CD9B96C88044206490FE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number: 09EF
Signing time: Sun 27 Jul 2025 01:01:16 +0000
Manifest this update: Sun 27 Jul 2025 01:01:16 +0000
Manifest next update: Mon 28 Jul 2025 01:01:16 +0000
Files and hashes: 1: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (hash: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=)
2: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: +Hmny29gIdE0Uy3KmFna8K5l6/o65/dqNQD51M3bRD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f9:2a:58:cd:9b:96:c8:80:44:20:64:90:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Validity
Not Before: Jul 27 01:01:16 2025 GMT
Not After : Jul 28 01:01:16 2025 GMT
Subject: CN=46da7186aa053d75701edd0550c64311bd4db06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:5c:e6:0a:68:39:2a:89:6a:dc:54:f5:79:
1f:a0:71:d8:66:c1:f5:88:34:ce:95:77:ae:77:81:
4e:c5:b1:00:d8:85:c1:5f:e4:65:4b:e8:92:a9:b0:
1d:c0:98:5c:10:b2:f0:d2:0d:7b:e8:e0:64:8b:99:
88:e9:f8:bc:3d:01:90:a4:ca:ca:61:80:7a:79:61:
fd:f0:1a:58:cf:da:17:32:b4:0c:74:dc:07:3e:a6:
76:f6:9f:19:ec:b3:ba:5d:66:c4:a5:43:ea:97:ba:
86:41:cc:7e:1d:73:29:2c:f0:b1:1c:c6:f3:86:67:
ee:74:b5:6a:a6:aa:49:af:cc:1b:6c:fc:d9:84:ec:
56:eb:91:e1:80:2f:64:e1:b1:fe:66:b7:7e:b1:5b:
8f:63:f3:30:fa:11:d0:ca:44:69:d6:3a:27:bf:fb:
9b:b1:be:95:23:f3:62:ac:70:c2:12:2f:87:c2:1e:
5d:97:80:3a:e4:84:9f:eb:a0:69:be:48:af:65:31:
d9:07:e0:e8:b2:6c:fe:5c:04:2b:bf:0f:4c:f4:8f:
d2:fa:59:23:4d:8f:e1:5d:b9:19:47:69:d3:19:a1:
49:db:90:5a:37:f1:5b:2f:69:c1:b2:9f:cd:68:cd:
c0:07:db:3b:46:fc:21:43:64:17:9c:4e:bd:ea:c8:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:71:86:AA:05:3D:75:70:1E:DD:05:50:C6:43:11:BD:4D:B0:6C
X509v3 Authority Key Identifier:
keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9d:2e:2a:5f:0f:74:57:bc:1e:0f:70:be:63:83:ad:9b:dc:
3c:30:51:48:5a:63:06:a2:d0:c6:a8:ef:f7:24:ae:62:1a:42:
1b:4d:00:88:1e:ed:7a:32:b0:57:cd:f4:e5:fd:26:f4:ef:02:
fd:4a:41:d5:3d:8d:d8:07:8c:f8:2a:60:c2:15:cf:ac:50:a0:
3a:6c:df:da:33:40:23:c6:b0:7a:e7:c7:47:fb:60:f7:d4:91:
34:f3:f5:dd:9b:63:70:29:3c:93:50:21:4f:03:03:c4:08:75:
d2:03:a7:b5:b4:15:a9:0a:81:28:c1:43:b3:98:cc:8b:9f:b3:
69:cf:bf:7b:e1:54:05:9a:f4:75:c6:1c:8a:aa:cb:f0:6d:1d:
44:97:44:f4:f9:4c:ac:0d:94:8c:db:56:52:1f:c0:48:5e:ea:
1d:a8:46:f9:c6:3a:7d:d5:62:a4:0e:fc:9f:38:1c:32:a4:42:
c8:e9:54:06:c9:b5:1d:da:41:73:57:fa:7d:ee:2c:28:59:bb:
77:9e:c6:3f:d5:bc:eb:e6:9f:43:cc:11:84:17:e1:47:4a:e6:
29:fd:f1:2f:a7:c8:57:52:a4:6a:58:10:fa:24:93:c1:0f:37:
43:43:2a:49:51:e5:1f:a3:53:99:ce:08:53:39:6e:54:da:17:
fe:f1:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:22 2025 by rpki-client