Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: +ZygLTMh7oYSQ4Qcr746fBCknS/7qRsRMj4a8dAEv3M=
Subject key identifier: D9:3B:07:3C:32:51:FA:3B:F7:41:AD:D3:F8:77:AC:B4:26:CB:11:E8
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 01984889A34F9185A75E5ED96EC929AEEBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 08FA
Signing time: Sat 26 Jul 2025 21:00:36 +0000
Manifest this update: Sat 26 Jul 2025 21:00:36 +0000
Manifest next update: Sun 27 Jul 2025 21:00:36 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: Uw1uoN0KBFDGA5Tt5K2mB9PjZs4bLyhLFehBJPfYh7Y=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:a3:4f:91:85:a7:5e:5e:d9:6e:c9:29:ae:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jul 26 21:00:36 2025 GMT
Not After : Jul 27 21:00:36 2025 GMT
Subject: CN=d93b073c3251fa3bf741add3f877acb426cb11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c0:97:cf:c7:ec:46:f5:db:0b:e7:e7:37:6e:
cd:d9:65:b9:4e:0e:6a:02:54:17:f4:08:d7:ca:11:
8d:1b:63:f5:e8:40:b1:7c:06:04:89:b4:fa:4d:2f:
d7:4b:2a:7f:e6:06:15:c4:86:56:eb:fc:60:07:0f:
a6:57:1e:84:ee:06:05:62:5a:0c:34:76:78:c0:e5:
9c:04:1d:25:66:dc:fb:db:2d:2d:89:cc:43:b7:1b:
42:6e:b1:d6:3c:45:a1:6c:ab:ee:fb:06:60:67:9e:
83:84:39:51:a7:0c:df:ee:64:e2:6a:8d:16:af:0d:
79:f6:7e:77:37:20:f3:de:86:48:c3:b2:57:81:91:
2d:36:f1:7c:0d:34:cf:60:25:de:75:4d:1b:52:c8:
00:6b:d3:95:ef:10:71:62:85:c2:15:40:88:3e:a0:
ba:da:c7:8b:d3:b7:28:7d:00:af:63:66:69:73:52:
e0:06:0e:06:88:a0:73:fe:51:03:81:ab:58:fe:56:
3a:d8:d8:f2:34:75:67:1a:cc:ce:84:d4:a6:f7:f0:
db:3b:f9:94:fc:3f:56:8a:d8:ac:d3:83:0f:98:fb:
5f:a0:b8:28:51:08:07:2d:46:f3:d4:dc:87:1e:44:
0e:81:7b:22:81:68:5c:c5:a1:f9:a9:db:f3:f5:d7:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:07:3C:32:51:FA:3B:F7:41:AD:D3:F8:77:AC:B4:26:CB:11:E8
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:5a:fa:7b:65:fa:78:e5:28:cf:01:f4:c7:b5:b1:f7:0d:
32:aa:56:3c:e1:25:28:20:e8:fb:4d:3c:60:06:64:0f:b7:4f:
d4:23:87:f2:d1:8d:98:c1:bf:5b:a2:cc:f7:e6:f2:db:1e:43:
db:4c:cd:05:59:0a:50:d2:ea:00:6a:d8:75:de:d4:b8:e1:1a:
45:29:85:ff:23:cf:c4:e9:1a:dd:78:dc:7d:13:c2:f0:40:dc:
fe:92:7c:83:57:9b:91:1e:6b:e8:78:73:ea:e5:a8:5b:4e:fc:
d4:b3:86:0a:1a:e2:52:5d:f9:84:a4:fa:64:85:37:44:3f:57:
da:68:51:60:6f:1b:75:7f:ad:06:9d:a6:af:83:24:b5:a0:e8:
24:b6:f8:fb:3b:22:a7:59:f4:b4:d9:ce:f1:57:7d:78:d4:40:
db:a2:37:d9:c0:e7:c4:16:83:6f:cb:1f:d8:f6:b4:9d:14:f3:
ab:ab:a7:7c:bd:2b:a5:60:9e:ab:fc:f7:a6:62:1c:15:0d:55:
a8:ce:2d:4f:d3:f5:99:f5:b3:11:ff:22:52:aa:59:83:65:d5:
3c:58:52:bd:2c:d0:d5:d7:b9:b3:2b:27:c1:96:21:46:53:90:
39:07:31:18:33:5b:45:28:ce:5f:5f:f6:87:01:13:4b:a7:68:
b2:d7:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:01:17 2025 by rpki-client