Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: 7yf7PwXTzZSrHoIo8QUPq8RK23IfV73gjFp/MLeZgT4=
Subject key identifier: 4D:62:89:B2:E6:1F:81:46:D9:2C:EB:D8:31:06:3F:94:F1:8E:BF:B3
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 01982A113D60E93A7C7A3F0B6838500A9068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 128F
Signing time: Sun 20 Jul 2025 23:00:29 +0000
Manifest this update: Sun 20 Jul 2025 23:00:29 +0000
Manifest next update: Mon 21 Jul 2025 23:00:29 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: a76tR/ZTCDQi8JTXxDlB8OPbICjHTjsWCf/H4jArILU=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:11:3d:60:e9:3a:7c:7a:3f:0b:68:38:50:0a:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Jul 20 23:00:29 2025 GMT
Not After : Jul 21 23:00:29 2025 GMT
Subject: CN=4d6289b2e61f8146d92cebd831063f94f18ebfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:cb:99:80:31:98:5f:c4:a8:35:6d:d8:28:
82:ff:16:6f:e9:6d:92:1c:57:d9:2c:05:db:38:3f:
bc:73:b9:82:de:19:0d:00:dd:6e:25:bd:30:2d:08:
5e:51:ac:20:91:69:9c:e8:83:93:78:14:6f:25:ca:
ff:ce:b5:34:ba:f0:3f:d3:de:cb:4a:35:df:ef:71:
b7:bf:fe:6e:93:cf:25:2a:2e:82:25:ce:c8:62:65:
b9:de:30:36:c6:6c:a7:87:bd:45:b7:ff:aa:64:12:
04:81:20:a1:45:95:0b:8a:0a:70:59:e1:02:c8:a3:
32:1e:0a:ba:64:18:33:8e:2a:fd:ee:e9:a4:63:10:
1a:96:a2:04:86:4f:e8:7c:d2:ea:ef:07:cf:88:f0:
2d:9b:77:26:ac:c2:51:e2:90:88:dc:b5:9a:39:ad:
a6:8a:a4:ce:63:f2:81:f0:22:cd:c2:6c:ad:0a:95:
ca:60:c0:89:d7:14:78:f0:95:d4:42:3b:f6:3f:73:
f0:d6:e5:1a:6c:96:02:6d:58:e5:f7:42:9e:5e:ae:
92:84:f6:f5:5a:a2:ed:3f:b9:ba:ae:b7:3c:21:7b:
8c:99:50:83:70:7d:28:fd:95:95:e8:48:54:2b:e8:
57:9a:a3:4a:37:2f:d6:dd:65:1c:23:9b:48:65:f9:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:89:B2:E6:1F:81:46:D9:2C:EB:D8:31:06:3F:94:F1:8E:BF:B3
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:a7:35:0b:b8:1a:89:ed:a6:21:20:09:8a:b5:c4:c2:67:
0a:60:1d:20:f1:c8:3e:37:d3:de:db:09:f8:17:cc:7a:b0:60:
a1:38:b2:ce:10:25:3f:8d:e7:29:f7:5b:ff:58:00:7b:e7:75:
ea:16:fd:f3:d8:54:3f:a1:9e:d6:cd:7b:a3:e3:10:13:08:dc:
9d:5d:c5:90:85:d2:b7:e8:ec:4e:ee:68:2c:9b:fc:d0:4a:9e:
1c:1a:dc:2e:fd:7a:f8:b9:da:b9:30:58:c4:88:7c:3a:0f:9a:
4e:c2:6b:2d:4e:09:ad:88:bf:69:3c:72:80:92:f3:24:0d:74:
9d:aa:18:a7:1a:2d:d6:22:c5:6d:15:2e:f0:e4:7f:a3:30:bd:
f0:f8:e1:67:d7:06:cb:38:a5:ec:6b:31:1b:00:a5:ac:e5:63:
81:68:1a:c3:96:a0:79:f7:db:52:2b:ce:98:2b:7b:32:76:dd:
1e:2a:10:4e:65:f1:98:7a:f9:43:a6:a9:a5:41:e2:6f:9a:ae:
17:f2:65:5d:ed:9c:a5:cd:e1:27:a4:48:33:09:96:15:26:1b:
9d:b0:38:ab:7f:7c:88:f8:fd:03:ea:eb:6c:ac:3e:68:93:05:
a7:a7:61:35:22:d6:fe:6d:55:b5:76:56:6d:ad:9e:3e:bb:7f:
e7:7e:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:34:08 2025 by rpki-client