Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: fSEvR2F+TOA5OTqVh/tfN1SfFzlW3Equ7CIX4EowzMU=
Subject key identifier: 4B:45:5E:07:A0:DB:A6:3E:8E:6F:BE:65:CA:00:C5:9F:E6:10:DD:51
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 01984475AC015A9F04BC9C9EC6A6832DD518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 04E6
Signing time: Sat 26 Jul 2025 02:00:18 +0000
Manifest this update: Sat 26 Jul 2025 02:00:18 +0000
Manifest next update: Sun 27 Jul 2025 02:00:18 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: AL3mInoL3wK9fLjl+NLSx+061c36BGoYUFJ2PkBC0hM=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:ac:01:5a:9f:04:bc:9c:9e:c6:a6:83:2d:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Jul 26 02:00:18 2025 GMT
Not After : Jul 27 02:00:18 2025 GMT
Subject: CN=4b455e07a0dba63e8e6fbe65ca00c59fe610dd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:01:00:27:19:dc:9a:3c:73:b0:4f:59:5d:
e2:43:2d:b3:23:2e:62:2b:e6:33:9b:51:35:0c:ec:
2a:b6:01:e9:f6:d1:69:b5:d1:e3:68:84:b4:36:e1:
c7:1b:83:10:fc:a1:f3:25:0f:fd:d9:cb:23:17:6c:
44:3d:e9:e1:d1:ca:cc:b0:ad:35:af:11:cb:c9:4c:
9e:d6:ca:5c:01:76:de:b7:d2:e0:37:a3:a9:d3:60:
4d:3a:54:e1:b5:58:5c:d7:9d:15:4f:50:d6:5a:af:
ff:a0:e7:46:70:17:62:48:2e:17:c4:1b:d3:67:38:
b0:d7:b5:1d:c5:51:4f:c0:12:75:f3:4d:15:8f:d6:
8d:4b:bb:b1:54:39:51:11:10:bf:d9:48:15:40:20:
fe:19:b0:87:71:37:67:4a:c9:21:88:06:ae:f9:83:
e4:2f:86:0a:be:86:c3:73:55:bc:3d:84:5b:da:08:
bb:92:70:d4:f8:d8:2c:35:ba:c7:1d:aa:42:78:10:
22:21:8d:93:46:41:d5:20:88:cc:18:ab:22:1d:ad:
ae:cd:a5:95:36:16:1a:14:0b:e7:43:e5:ff:d9:c6:
cb:6c:29:45:e5:77:d8:47:84:a3:03:99:25:1d:e1:
6c:52:65:e6:f0:3d:5c:8c:61:e0:89:4d:86:65:21:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:5E:07:A0:DB:A6:3E:8E:6F:BE:65:CA:00:C5:9F:E6:10:DD:51
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ba:a0:c6:fb:a1:e6:91:33:de:21:9e:47:9f:a8:45:41:c6:
5f:b1:62:8b:11:f8:50:92:14:74:95:96:20:29:94:a9:f4:60:
36:db:26:77:81:95:8a:65:34:e8:07:58:0e:1a:de:1c:8c:6d:
b0:74:fe:39:d3:b7:4a:74:5e:98:cb:1f:0a:de:72:9c:c8:91:
69:da:39:70:2c:54:e7:82:02:0a:66:1a:cf:16:43:41:ce:69:
5b:49:ff:5c:75:1d:10:c5:b7:40:ea:d0:b1:98:44:28:3c:28:
ea:86:08:e3:17:4a:6b:99:d8:d9:8a:b9:e0:ce:03:6e:0b:72:
95:2f:4e:d3:3d:9f:fc:44:00:01:dd:27:db:a2:1b:4a:e2:fb:
90:88:05:06:e6:7d:5c:3a:bc:64:3b:37:1b:94:87:64:cf:ee:
d2:33:73:b0:6d:ca:33:6d:4e:d3:35:98:df:cc:d5:a6:ec:ce:
3f:b9:3b:30:1f:68:7f:a3:90:c6:5a:5d:cb:1a:69:07:89:7e:
8f:be:7a:70:3c:5e:b4:1b:3e:51:53:14:fd:3a:dc:4e:6c:e4:
d6:d6:b4:60:56:80:0d:79:bc:93:7e:43:a6:06:b0:b0:54:14:
24:74:45:31:ba:ff:d8:7e:e6:35:ad:14:55:41:74:04:23:8d:
75:38:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:21:08 2025 by rpki-client