Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: ADSdxVk7HmyBsr2XmnTBUloMFkfwLPup2OBg8uiuPtY=
Subject key identifier: 7C:C3:A1:CF:DD:9E:F5:80:CE:29:CF:9C:D8:2B:65:4D:F4:F5:44:63
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 01984BC1E6707211F32CA5F81C975015740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 14D1
Signing time: Sun 27 Jul 2025 12:00:55 +0000
Manifest this update: Sun 27 Jul 2025 12:00:55 +0000
Manifest next update: Mon 28 Jul 2025 12:00:55 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: RLKyg6YllyFyeUyj0jjccBibTN3+kzYZ3RusuyrUm1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:e6:70:72:11:f3:2c:a5:f8:1c:97:50:15:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Jul 27 12:00:55 2025 GMT
Not After : Jul 28 12:00:55 2025 GMT
Subject: CN=7cc3a1cfdd9ef580ce29cf9cd82b654df4f54463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:51:22:d2:fd:ed:cc:88:57:d1:04:db:7b:f2:
d2:11:98:41:79:45:e1:b9:c0:38:ac:d3:2b:4a:96:
c7:d0:f4:be:52:db:56:75:49:0d:d5:fc:53:9e:1a:
66:21:6b:72:3c:e1:74:e5:44:40:bf:51:a7:c2:f5:
57:6c:12:af:a2:db:d7:e3:42:61:57:be:d1:69:bd:
68:3c:c0:44:0c:83:4a:8f:ea:d9:3b:c8:01:6f:30:
c7:97:17:63:19:07:57:d5:66:92:5e:8e:bf:af:08:
f0:6e:e5:7a:57:11:db:54:0a:77:75:a0:71:9f:0b:
ae:74:e5:f5:99:75:59:5a:a3:d4:1b:69:72:23:b1:
d6:f7:58:a4:f2:38:87:5d:62:8b:06:c9:04:aa:f0:
1f:88:33:e6:1b:6e:24:f9:11:1a:20:d1:bd:62:fc:
b1:9d:a0:c8:ec:75:91:94:47:ea:ca:58:5e:48:89:
d8:27:d5:cb:56:f8:68:18:bf:e8:75:17:80:b6:9e:
a8:f2:ee:98:52:0f:c6:8e:f2:e5:c6:70:e7:54:05:
9d:9d:20:60:f7:4c:e9:d1:58:be:03:ce:27:16:80:
29:95:45:21:3b:a6:69:38:40:2f:7b:00:74:66:5c:
ed:46:49:ee:33:f9:f7:3b:1b:0c:11:55:61:7b:7f:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:A1:CF:DD:9E:F5:80:CE:29:CF:9C:D8:2B:65:4D:F4:F5:44:63
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0c:3f:5c:d2:42:a7:8d:50:ef:02:e1:1a:fd:3f:f3:fa:f3:
49:c3:35:67:b6:48:32:d1:c8:f5:1f:00:ce:01:bd:9b:83:43:
e6:db:4c:aa:72:9b:77:ba:c7:a1:a2:71:b9:5b:c1:ed:88:d5:
bb:4d:50:1b:14:36:80:16:eb:84:1d:a9:de:5c:d5:34:3b:8b:
e9:5f:26:df:d7:ea:a4:94:0f:08:18:29:c9:c7:14:1c:a0:60:
72:1a:31:ba:0d:af:aa:c9:35:ab:26:f4:ca:d9:e5:60:5d:d7:
0e:1f:7c:81:05:40:7a:9b:30:70:a6:c4:92:ac:cb:60:6b:1a:
75:8a:27:21:a8:a4:31:15:d3:b8:d5:39:66:e7:72:6c:bf:d4:
07:16:c7:74:8d:35:f7:61:4d:b9:0f:cc:ba:ca:3a:5f:c0:26:
9c:da:4a:3f:b7:0d:bd:b0:ba:4c:b0:b4:99:ae:42:b8:6d:55:
8c:ed:b8:47:f5:11:0c:5c:ed:4a:6e:5a:fc:d1:ca:5e:28:d3:
8a:59:31:4a:1d:4b:ac:82:bf:49:b3:6c:1b:ce:bb:7c:da:18:
e4:2b:f7:be:de:c6:e6:44:39:bb:8f:14:88:e0:e6:7b:c7:83:
b2:f6:a1:f1:19:20:05:85:69:e9:c6:c5:2a:70:62:b2:18:65:
b2:85:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:13:11 2025 by rpki-client