Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: Lr5o2v+fB3NvD2uFtEaOOq4sHZboEWGhwFtfTFE18M4=
Subject key identifier: DA:C6:D4:61:A2:C4:69:6D:6A:25:09:C4:11:7B:B8:53:F4:A0:C3:A3
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 0198560EDBA28D48A02CAC796075BFEBDAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 12:01:10 +0000
Manifest this update: Tue 29 Jul 2025 12:01:10 +0000
Manifest next update: Wed 30 Jul 2025 12:01:10 +0000
Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: grQTN8JXyVJV+5cePkYzVYMqyT4OlUGnHz97xDJgTMo=)
2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:db:a2:8d:48:a0:2c:ac:79:60:75:bf:eb:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Jul 29 12:01:10 2025 GMT
Not After : Jul 30 12:01:10 2025 GMT
Subject: CN=dac6d461a2c4696d6a2509c4117bb853f4a0c3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:04:f0:8a:77:3b:c2:7a:98:e5:30:7e:f5:
6b:3a:08:62:93:cb:a4:8e:dd:6d:c3:c6:54:20:98:
3c:83:49:55:d3:4f:41:6b:30:3b:a0:cb:49:aa:69:
50:65:fe:2d:0a:bb:3e:ab:56:be:24:88:dc:cb:b3:
fe:eb:54:fb:ef:dc:00:97:99:ee:3b:d6:42:a7:90:
d2:22:04:8f:0e:e5:10:91:50:6d:ca:b5:1f:7f:77:
3a:60:7a:e5:ef:9f:00:60:ee:a7:45:12:f6:d9:b5:
8d:7f:db:45:d4:06:1d:cd:20:60:f2:ba:09:d2:56:
af:5c:73:68:70:20:25:08:95:61:64:21:49:2f:17:
1d:b5:b8:e4:ec:1e:c5:04:69:db:fe:b8:a0:3f:10:
95:e8:f6:15:80:f1:37:23:1f:57:52:e1:7c:20:46:
48:43:36:59:b1:dd:4f:97:40:4b:1b:40:3c:73:fa:
ce:02:4a:56:34:0b:74:19:7d:cb:de:dc:1d:25:31:
47:c4:e2:9b:9d:a8:02:38:de:e0:63:82:3d:7c:72:
b7:7a:4a:bb:3e:6f:6c:08:ec:0a:b7:31:1c:aa:a1:
9f:d2:36:d9:f6:51:cc:c2:da:6e:0c:5b:50:21:4c:
f4:d3:f0:2c:d6:b3:3c:39:ca:01:37:ea:92:e2:64:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:D4:61:A2:C4:69:6D:6A:25:09:C4:11:7B:B8:53:F4:A0:C3:A3
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:65:1d:d0:ff:89:aa:f1:7e:7a:9b:c3:8b:7c:71:39:8e:7f:
ca:51:35:55:7e:96:ff:5b:a6:2f:11:3c:c4:dd:7c:79:7a:54:
cd:59:07:58:a0:88:4f:1a:ca:b3:f1:65:29:46:7d:82:8c:23:
3a:2c:18:ae:3e:c0:1f:4f:77:c5:92:84:f9:c1:02:46:ae:00:
75:44:4a:18:7c:2a:59:9f:69:f3:56:35:0e:9d:b3:4b:7e:55:
42:f6:f4:d9:77:d0:a6:3e:b8:8f:e2:73:46:6f:56:45:2f:96:
01:39:b1:16:9a:20:a2:d4:f5:12:2c:81:43:3a:83:9e:71:47:
18:32:b6:38:1e:6c:57:35:d4:93:e8:a5:22:5d:4a:49:0a:7b:
30:ac:0b:53:f6:35:83:b6:97:11:f6:ea:a0:41:66:c7:2d:6a:
be:78:2f:d1:db:a2:80:6d:0a:53:f9:6b:0f:85:3e:36:84:0d:
73:81:86:c8:7e:aa:d8:d2:be:42:f7:18:0b:69:ed:f3:61:1f:
f2:89:6f:af:bd:02:26:ae:44:78:ab:57:7d:a4:71:f5:21:44:
55:de:fa:87:24:95:03:af:a8:ae:31:9e:50:15:ea:8b:bd:92:
0e:4f:99:cf:f6:74:8f:1e:7b:49:92:7f:ec:19:8c:1f:ea:da:
87:5d:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:39 2025 by rpki-client