Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: T4TKSCr7IaE7dKYi2syz9R42ZWfWJQQ1ev/JsHxSzX8=
Subject key identifier: 6B:D0:F8:C0:AB:A9:9C:7F:B9:A4:70:5D:28:51:F1:3F:8F:0F:5F:81
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019849D3588E878E94B09E03C2D9FBE20FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 1312
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: Vgfgg7lwyd15m7w34AIB33tTNAwAs1J4hnYxMtVgk+8=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:58:8e:87:8e:94:b0:9e:03:c2:d9:fb:e2:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=6bd0f8c0aba99c7fb9a4705d2851f13f8f0f5f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:c1:cc:da:70:7d:a0:2d:d0:81:70:be:96:
e3:a1:9c:cb:76:94:54:ac:b9:9a:4e:aa:92:75:0a:
cf:1c:bd:7a:19:6a:4f:71:20:51:58:e4:58:f3:fc:
e6:e0:a6:52:29:ae:ff:9c:e3:55:dc:5b:56:bd:e7:
0a:9b:5e:62:21:fa:46:e9:85:83:c2:95:57:21:68:
bc:99:17:43:c7:7d:69:7f:a8:1f:50:3e:36:df:78:
0f:b8:fd:48:10:4b:ae:bc:7f:35:36:b5:9a:b4:97:
27:aa:e9:3b:ba:62:b5:53:16:8a:36:d1:36:d0:00:
1e:c9:73:a6:8d:fd:d2:5a:b1:66:63:2c:3b:87:ee:
71:8d:73:35:5d:dd:40:d9:94:37:0e:a1:39:f5:b1:
85:e8:85:17:a6:b6:b8:2c:d9:31:37:45:45:c4:ec:
9d:62:16:93:93:b2:b3:cb:ca:e2:92:d7:a8:0f:2e:
c1:88:91:85:a4:33:9d:23:7c:f8:ec:fc:6a:61:0c:
46:1a:15:f0:46:56:06:cf:28:4f:69:de:ec:c7:b7:
64:bc:ef:84:d0:5d:04:ee:2e:2a:0e:f6:2c:d5:f8:
68:7d:28:3e:55:f0:03:5a:f6:92:a5:25:79:8d:7a:
99:b2:62:04:d1:1b:71:ce:29:1c:99:fe:d3:bd:b2:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:F8:C0:AB:A9:9C:7F:B9:A4:70:5D:28:51:F1:3F:8F:0F:5F:81
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:be:17:c8:22:9a:b0:3e:03:f4:b1:92:f2:31:39:59:72:
96:22:45:0b:36:87:cf:d7:80:11:d3:26:fb:07:47:60:79:6c:
00:52:c9:16:b8:45:f5:e5:37:0e:92:28:78:82:fa:1c:4c:2b:
36:09:7a:06:f0:8c:43:4b:cf:44:7f:9e:54:bb:23:1f:24:55:
0d:75:74:6f:28:fc:80:1b:24:92:1a:6c:14:fa:a8:fe:94:87:
1f:a2:bf:c7:dc:e9:d1:98:f4:66:e2:96:6d:84:14:a0:8e:c2:
71:81:ed:72:d7:f3:c4:a0:33:16:4f:7f:de:56:cf:f6:13:6f:
d9:51:f6:71:c7:83:4d:cf:a1:8b:9a:e9:fa:6c:a6:52:8f:e8:
63:b5:57:f0:47:7a:7e:87:3c:83:1c:22:3d:e3:13:80:18:8d:
13:3b:8d:d6:26:ee:64:3a:1e:9c:8b:2e:eb:15:3e:25:9d:53:
b6:57:dd:86:91:87:6d:c0:c8:c8:5e:f7:59:4d:12:62:c5:e2:
cb:c2:c2:7f:7d:ff:c4:1c:1f:e3:b9:a5:b4:8e:9a:2a:48:ab:
a7:bc:d1:8f:05:c3:9b:08:7a:a0:22:6a:58:d0:20:26:d0:f0:
f3:d8:0c:69:5d:b3:04:7a:27:68:fd:ee:9a:4d:40:81:22:59:
fe:aa:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:55:05 2025 by rpki-client