Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: YvbBUYk/srwP3ASB6sInwaipoPEi38+b13xmU95l+Qg=
Subject key identifier: 7C:04:EF:3A:04:C2:8A:38:C5:57:28:BA:5E:8E:94:38:8A:86:60:04
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 01984C6644ED8A4C4E2CDB717E4317D43BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 0389
Signing time: Sun 27 Jul 2025 15:00:27 +0000
Manifest this update: Sun 27 Jul 2025 15:00:27 +0000
Manifest next update: Mon 28 Jul 2025 15:00:27 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: zqigpS4nBRTGmmH/5FXikQmWfdjBSRccwT0saz6X1OA=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:44:ed:8a:4c:4e:2c:db:71:7e:43:17:d4:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Jul 27 15:00:27 2025 GMT
Not After : Jul 28 15:00:27 2025 GMT
Subject: CN=7c04ef3a04c28a38c55728ba5e8e94388a866004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:9b:6a:00:c5:bc:7d:e8:8d:94:3c:16:45:
d0:fb:d9:38:28:b2:10:da:1f:68:7c:59:c0:25:34:
0b:92:e5:6b:e6:87:6f:20:6c:0c:e0:47:8a:fc:2c:
e5:02:f4:ba:13:01:32:2d:88:57:d0:de:ca:54:91:
cb:7f:ef:8c:f1:c2:08:a1:48:5b:99:c5:d6:3e:73:
a5:b9:6c:3b:be:eb:5d:90:3d:2e:e8:63:5a:f5:74:
ab:b7:39:b6:d7:fa:78:9f:fc:b1:a8:64:e8:4f:10:
fb:4f:f4:63:7f:6b:d9:a2:87:64:b5:8e:e8:51:e5:
08:98:ad:5c:78:16:84:05:64:e5:b6:65:36:e4:81:
c7:af:74:b3:6a:3f:ed:29:4f:76:03:b9:0e:a8:f7:
4d:7e:5e:2d:8f:09:b8:3d:11:2c:8e:65:9a:74:a4:
f2:0d:e9:4a:4e:e4:19:bb:a3:2f:21:7d:0a:6b:fe:
d5:44:a6:17:b5:fb:ef:a0:93:a9:d3:bc:43:60:88:
e3:70:00:db:de:e8:44:ce:4b:5d:f0:e1:88:e3:59:
1b:97:91:d2:6e:04:60:98:06:41:0f:0c:a0:8f:90:
59:90:6b:99:ed:b8:90:45:12:b0:f1:94:ae:0f:0e:
29:ae:04:d4:5d:4a:20:12:a9:33:e1:b2:9c:73:ed:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:EF:3A:04:C2:8A:38:C5:57:28:BA:5E:8E:94:38:8A:86:60:04
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:11:b4:d9:db:60:00:b6:33:c3:9a:8f:5e:86:ad:41:22:c1:
84:a5:62:81:49:a1:02:25:2b:be:be:5a:1e:1b:bb:cd:97:31:
12:51:f0:25:7f:01:33:23:88:51:40:0b:2c:0d:b9:d4:1d:e9:
3a:96:9a:02:a7:6b:79:fa:37:60:f7:b7:f6:d8:63:0c:8e:07:
d3:4d:6f:ac:be:21:e4:9a:bc:6b:03:34:37:ce:0a:6b:0d:03:
48:7e:7b:83:1a:bc:10:c2:4b:bd:96:c8:73:64:f7:b5:7c:38:
aa:c5:f7:68:eb:c9:df:cb:0c:53:15:d5:ac:e8:08:04:69:cc:
d8:2f:13:fb:50:b4:20:94:72:34:45:59:54:2f:2f:15:64:6b:
f8:75:3a:67:52:72:8c:54:e3:5e:af:37:9d:41:a1:81:08:55:
87:b0:84:48:6f:48:bd:95:ef:d3:18:92:aa:6b:61:ac:15:32:
84:09:7b:49:3b:c1:b6:10:81:91:fa:17:38:a0:28:2b:10:73:
af:29:ce:0c:c8:ac:af:4b:e2:06:09:23:1d:34:1c:6d:19:4e:
f2:e1:cc:02:fe:b7:14:b0:19:aa:9c:97:a9:f0:2a:5a:a0:ed:
0e:02:98:3f:10:db:51:59:38:bb:7b:5f:5f:81:08:c3:fa:99:
cc:2e:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:19:51 2025 by rpki-client