Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: 2CCHxhzklogFgm1nWM50uJc7gC4qaTdMsLop/1tilBU=
Subject key identifier: F4:0B:E3:E6:16:63:F5:F3:49:D2:35:1C:2D:C5:16:AF:65:49:42:FE
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 019848F7186E9720E81DF86DC916F614869F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0E05
Signing time: Sat 26 Jul 2025 23:00:09 +0000
Manifest this update: Sat 26 Jul 2025 23:00:09 +0000
Manifest next update: Sun 27 Jul 2025 23:00:09 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: SgoLVHKZ2O/SNKM43cvEjTiQookQ0oXftakazhWoR2k=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:18:6e:97:20:e8:1d:f8:6d:c9:16:f6:14:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jul 26 23:00:09 2025 GMT
Not After : Jul 27 23:00:09 2025 GMT
Subject: CN=f40be3e61663f5f349d2351c2dc516af654942fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:70:03:c9:98:31:c4:19:17:63:98:5b:0e:
11:53:87:86:75:63:55:1f:0d:8e:8e:f0:a1:e4:ab:
1a:20:76:c2:d2:72:41:e8:eb:34:a0:d6:63:fc:db:
37:35:dd:5f:bb:b1:bc:5d:2a:08:fe:ec:05:fc:72:
f9:59:72:65:6f:62:80:0b:fd:38:31:d1:1b:07:cd:
cb:94:38:30:5d:8d:a4:22:dc:fa:7c:8d:cf:45:e4:
4b:aa:6d:1f:fb:99:a2:8a:af:6a:c9:9a:7a:49:38:
fd:9e:86:69:50:83:f9:6a:21:ec:64:d3:2a:74:a0:
89:b3:55:8c:0a:5c:91:ac:83:8c:94:10:1d:a5:ef:
e0:de:1d:f0:2c:a3:45:66:68:a9:2f:72:fc:b5:fa:
64:22:88:2c:02:c5:d4:0b:ad:24:7d:d8:f1:0c:d2:
da:c3:35:f3:98:f4:f4:97:07:bc:aa:53:df:11:11:
c2:95:48:e7:8b:e8:16:61:86:1c:ae:17:ae:6a:d4:
94:e0:43:df:f5:9c:6c:8f:c6:f4:5b:52:79:e0:e6:
6d:01:c7:91:0d:e1:57:c9:30:1a:3a:8b:8d:93:9e:
52:c4:42:e8:d8:f2:1b:bd:d9:a5:40:25:c6:b5:c0:
1f:61:38:eb:91:d1:08:d6:af:96:67:01:dc:c5:bd:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:E3:E6:16:63:F5:F3:49:D2:35:1C:2D:C5:16:AF:65:49:42:FE
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:54:c3:35:31:9c:38:b1:42:54:25:d9:8a:ac:ae:5c:a8:
f2:b5:2f:7f:73:49:1e:9f:c9:25:2f:6e:c3:55:9e:fa:88:4e:
e9:c4:b7:0b:b4:2c:97:90:00:f6:ca:ed:7f:ee:e6:48:52:81:
3e:62:12:74:9d:3a:d2:1e:30:51:7e:0e:9a:b8:80:71:98:e3:
68:73:50:e6:da:90:91:a1:67:08:27:87:12:3d:34:c6:4c:10:
59:dc:a2:ca:0f:35:81:cd:cb:98:55:cf:16:e5:2c:28:ea:c3:
e0:ae:1d:cc:db:b0:e8:7f:33:a8:a0:67:0d:bf:ab:7d:3a:5b:
8c:27:29:c2:28:7c:56:c0:4f:f0:4e:ce:67:54:f3:8b:f9:4b:
de:90:f5:91:2d:70:71:61:8c:4e:36:46:14:f5:af:1c:de:05:
4e:c8:f3:6a:57:68:05:fa:ee:24:d2:5c:f8:76:b1:6a:45:74:
b8:5b:c6:fe:19:d9:81:12:18:cc:0b:76:63:3d:a4:81:fc:ee:
f2:60:37:97:c2:a7:5a:a3:39:10:d0:5f:4b:41:5d:27:9d:d8:
e7:7d:dd:55:bd:86:91:9f:2f:6d:1b:ff:26:03:28:42:12:33:
37:4d:89:27:4f:62:f4:4b:6a:41:6e:a2:c0:86:f6:b7:ab:5a:
28:3f:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:41 2025 by rpki-client