Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: pIBL3IdpqSfChnREpjpAnCFPzY8WJH3TuOwDdt8XVew=
Subject key identifier: 3E:4B:1B:AE:F5:A4:55:0B:70:AA:A5:66:0D:0D:AA:7B:37:46:4D:BA
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01984966AA39A81BA696FF5C3F6619F81EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 0F2E
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: 7bHz6dj5McWiPRu6gvYuQ35rULOTtmbgUg7anj4VQqI=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:aa:39:a8:1b:a6:96:ff:5c:3f:66:19:f8:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=3e4b1baef5a4550b70aaa5660d0daa7b37464dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:01:f7:9c:7b:89:cb:b7:2a:8f:d6:81:07:
61:c0:07:ad:cc:71:47:73:5b:2e:3d:fb:a8:9c:7f:
70:81:c6:7e:a8:35:b8:90:56:85:51:c4:bc:6e:d1:
f5:5f:69:30:20:78:fc:87:4d:79:b9:91:c9:50:ab:
d0:98:58:bc:b6:11:e5:d5:09:f3:06:50:4a:f6:df:
b3:b3:34:41:63:83:5e:8b:b0:67:49:ca:02:c3:92:
ac:e7:82:ea:2c:55:2b:46:98:4d:4a:6a:54:ce:10:
3c:a4:79:57:5a:9e:32:04:08:fb:67:dd:37:ad:ab:
d7:b9:dd:92:1b:96:cb:08:97:17:87:4e:f1:c8:ee:
c2:32:1d:06:27:82:7f:b4:43:a8:13:73:3a:5d:d9:
6e:c1:38:b6:e2:04:92:04:7a:da:f7:76:d9:51:a3:
10:04:e0:c8:6e:1f:7c:7c:ab:f3:42:66:20:af:95:
53:31:b2:d2:8d:c4:10:2f:1a:26:1f:9f:09:1c:2b:
c8:29:e8:eb:03:73:32:01:44:95:48:3b:b5:51:36:
03:37:e2:0a:a8:06:86:f0:f8:16:31:bb:76:70:64:
86:dc:ce:3d:8c:5a:bf:01:a3:8b:56:fd:32:4c:b9:
dd:a1:42:d8:5e:f5:5c:ff:95:b1:b2:0e:76:24:e3:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:1B:AE:F5:A4:55:0B:70:AA:A5:66:0D:0D:AA:7B:37:46:4D:BA
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4b:c5:7b:41:8a:30:ae:0b:8d:3e:ad:51:7b:b7:81:0d:ef:
97:cb:e9:a1:5d:99:4f:fb:43:73:a3:58:56:e3:ac:35:25:94:
d6:d1:b5:8f:91:6d:05:72:0e:15:ff:10:08:06:94:56:10:a0:
c1:60:00:05:72:1a:88:c3:40:77:c6:b3:de:51:bc:13:0b:88:
41:8e:8c:fe:48:9e:ba:4c:4b:3a:7f:7f:c0:ad:32:a3:31:07:
88:2d:f5:fa:83:53:81:d6:c3:c6:a4:03:69:42:d5:82:23:04:
c3:7f:3b:48:91:26:a0:41:d8:5e:b7:02:04:8a:41:cd:bb:99:
8d:cc:a1:ed:6b:0a:5e:5b:26:17:d4:a8:7d:86:f1:f4:3a:da:
23:7b:5b:be:3f:ea:6c:92:3a:88:76:62:ca:5b:70:61:6f:cc:
2f:36:29:2b:8a:0e:c0:01:ef:d9:a4:fd:e9:4d:a1:85:78:65:
e2:db:48:5d:22:86:3c:fa:11:82:93:8b:a6:43:43:9e:42:6d:
0c:12:8d:fb:61:a3:66:1e:c4:84:1c:db:61:5a:0a:a1:c2:d0:
a2:f0:14:7f:2d:a8:3c:10:5a:7d:2b:96:8b:4e:1e:1d:37:0d:
1d:3e:16:a1:8c:9c:c7:e2:d5:43:5d:9f:23:6e:81:3e:b7:57:
e0:dc:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:43 2025 by rpki-client