Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: 3O5PivuSGXpPtkTo0114qKl7JLjErpFSVLJcJ6RlxPI=
Subject key identifier: 1F:7E:E1:34:A8:E7:81:3D:51:58:82:28:42:5D:A2:97:7F:EA:DD:02
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019856456332D110AD8B62339F8A5859540B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0616
Signing time: Tue 29 Jul 2025 13:00:44 +0000
Manifest this update: Tue 29 Jul 2025 13:00:44 +0000
Manifest next update: Wed 30 Jul 2025 13:00:44 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: qV2rB/yGINZN10AKFwJWcRTv7c+SA3ERU2gVgejh/do=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:63:32:d1:10:ad:8b:62:33:9f:8a:58:59:54:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jul 29 13:00:44 2025 GMT
Not After : Jul 30 13:00:44 2025 GMT
Subject: CN=1f7ee134a8e7813d51588228425da2977feadd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:d4:ed:c2:d7:a4:d1:25:41:e2:b9:ae:12:
6a:25:ee:ef:84:d9:95:a0:81:13:ab:35:55:9f:1d:
2c:13:b9:39:6a:c1:f2:34:e8:ee:13:1f:18:2b:c7:
39:cb:58:69:48:7b:7e:b1:2a:25:18:b5:c9:c2:5d:
fe:a8:c3:a5:02:40:ce:9b:93:3d:27:74:e4:e4:45:
6e:95:ba:7a:c2:74:70:dc:c7:c5:ef:a3:66:ca:40:
0f:a5:39:06:97:8d:fb:43:5e:32:23:57:5f:41:93:
26:05:a5:bf:f3:99:e4:c7:0e:1a:17:5b:5e:f2:ec:
a1:41:ff:fa:ca:46:48:8f:04:4c:9f:88:a4:a3:c3:
a5:04:0a:e9:a0:30:dd:c3:88:e4:93:a0:6d:35:15:
db:2c:b3:b6:c1:ac:0a:5b:92:86:b3:71:e1:b3:49:
62:e6:c7:0a:f0:48:1c:98:0f:2a:7b:ce:1c:74:3f:
df:5f:bc:52:36:52:95:72:17:4a:07:58:9c:ec:24:
49:29:99:b1:6f:85:36:7b:e7:41:7d:c3:c9:21:c0:
97:8d:20:b0:47:06:d8:2f:8a:56:2c:01:e6:1a:cb:
2f:91:9e:5c:42:17:85:89:30:a5:c7:65:89:91:7c:
dd:d5:b0:5e:b2:6b:d2:3c:4b:c1:a6:c2:df:12:ee:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:E1:34:A8:E7:81:3D:51:58:82:28:42:5D:A2:97:7F:EA:DD:02
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:9a:13:94:ba:01:90:a7:9d:7b:27:d1:85:91:4f:b2:c1:
38:f7:db:10:1f:2c:87:49:7f:30:1e:74:15:5b:84:0c:e8:76:
b6:b4:4e:cf:4c:e3:5a:b9:1d:0f:b7:5f:22:05:98:1f:f9:06:
1a:5d:80:2e:32:0b:72:eb:e5:28:06:64:01:51:65:96:1b:c0:
6a:40:ff:75:c1:76:83:b7:75:fc:ae:4c:7d:f5:bd:f4:20:41:
93:32:22:ca:6b:e8:70:95:c8:d9:91:68:d6:c3:c0:22:f7:40:
8b:17:7b:c9:ef:51:f4:2f:14:0c:41:f6:cb:c6:8c:9a:02:9a:
f0:3f:d7:91:b7:65:62:f5:96:aa:65:61:29:0d:8f:42:4f:eb:
ac:66:9e:dc:f1:7a:d4:dc:47:30:99:a6:e2:a4:14:ba:da:9c:
b7:c1:9b:29:5c:88:77:04:94:1b:63:98:7b:dd:9b:52:e5:8d:
80:5a:76:7e:f0:4e:5e:79:38:b0:1d:d7:6d:be:a9:95:5c:0d:
34:cd:98:f8:5c:06:10:07:3c:dc:d6:ea:f2:19:46:0b:78:0e:
01:5e:cf:c1:85:1f:fb:22:06:d6:01:a8:54:87:c7:34:0e:12:
11:bb:c6:8f:b7:3b:2e:ef:f6:92:ea:2d:4b:b8:10:ab:08:5d:
a9:38:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:19 2025 by rpki-client