Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
File: Hd51apttFAAMPhUNW31glbdhP-Q.mft (raw, json)
Hash identifier: cbWTYPekUkJSflz8LE/nNhFz6T67BMt1YoNXxZVWhKM=
Subject key identifier: E2:53:68:31:99:C5:83:98:FF:6B:DD:1A:A6:E7:C8:81:11:2F:0E:BD
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Certificate issuer: /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial: 019849D3664A85B67AD6F226C9A674B48938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: Hd51apttFAAMPhUNW31glbdhP-Q.crl (hash: CPXVBtcUB+j2JZI/HxPTg8uxypy07/ycwTIzlX3f1Xw=)
2: dcbMwMMoAbrSDYORYR-a2Au1hPA.roa (hash: GaJP4UO0sS8NGTP1pZn3Q8XkpBsgZUPrCjP5yXsfKKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:66:4a:85:b6:7a:d6:f2:26:c9:a6:74:b4:89:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=e253683199c58398ff6bdd1aa6e7c881112f0ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:6e:a7:a0:81:71:d4:80:a9:b8:2c:66:53:
06:98:58:71:e6:c2:46:4b:58:c3:cc:a9:2f:2f:59:
c9:f4:1d:d8:6c:ea:6a:70:e5:76:66:89:f7:14:cc:
f2:24:41:0d:2d:06:91:7a:39:2d:63:97:3d:7b:c5:
81:16:19:24:d2:51:9f:75:c5:68:32:bb:b3:e4:f1:
84:57:29:02:b5:b0:99:ed:49:66:6a:41:4b:f9:d1:
ab:91:21:fa:7f:a7:66:62:5d:2b:53:9c:51:d1:d9:
3b:ee:9b:89:ff:79:5d:d3:8b:c5:5c:6b:08:d8:bc:
41:92:f8:5a:94:6b:26:da:c9:46:57:a8:be:0f:0a:
86:a5:63:41:f0:65:36:b8:f2:bb:84:e4:fb:37:ca:
7c:af:fe:73:e6:f7:de:58:70:6d:50:a5:94:4e:a7:
50:f0:f6:3f:b0:1a:00:b3:9b:74:16:42:ea:b5:06:
8e:97:cc:01:24:14:51:06:87:f9:0b:64:f3:31:21:
fb:f6:3e:42:a2:97:94:e7:2d:5f:3b:11:d9:92:8b:
f6:eb:5f:01:e5:5f:32:cd:12:88:6c:30:f6:5f:a6:
92:76:58:68:cf:9e:a8:c2:03:79:1f:15:7f:77:2f:
71:35:cf:af:c4:a6:0e:c2:6b:d5:76:8b:ef:2c:87:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:68:31:99:C5:83:98:FF:6B:DD:1A:A6:E7:C8:81:11:2F:0E:BD
X509v3 Authority Key Identifier:
keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:30:ff:2c:c0:12:54:12:ca:d2:be:46:95:7c:ad:87:e8:9d:
01:b9:d2:2b:8a:e8:df:f9:4d:2a:db:74:39:6b:4c:94:ca:a1:
ce:ba:63:88:06:32:48:e4:3c:40:f3:bb:8c:1e:7b:3a:13:eb:
19:1b:19:a4:52:9f:36:4a:aa:7f:23:56:0a:c7:54:9d:7a:b5:
7a:12:54:4e:99:ac:0f:6a:82:02:37:59:48:d0:e8:9d:0d:c3:
b0:a1:47:2c:50:85:99:80:1a:fc:63:18:d9:2e:e2:8c:20:6b:
21:72:bf:57:52:cb:70:f0:9d:1e:c8:1c:d7:27:d4:54:b6:96:
62:96:0f:56:86:04:b1:0f:d1:6e:3a:79:c3:e1:aa:20:1e:50:
7f:c0:9b:4e:6c:a4:de:bf:7d:6c:c2:93:00:8a:68:27:99:71:
97:f3:28:df:f4:a0:70:47:1e:55:88:d9:09:9c:22:d9:84:7a:
1f:92:fa:1f:de:f6:b4:9d:9c:b6:b7:9a:9c:56:85:15:dc:12:
26:24:05:e3:b6:be:b4:89:1f:9f:b5:33:01:30:0d:ee:14:97:
34:ab:a1:ed:d6:6a:c0:d6:7e:ef:03:2a:f9:7b:e8:82:be:16:
6c:af:cc:d3:79:1b:b4:37:b5:36:4f:39:d0:e9:85:9e:24:e8:
9b:94:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:12 2025 by rpki-client