
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: EivlgKjcMBINYy5PfYDh7g81933ZoVsu3ZuTgvaocS8=
Subject key identifier: CC:13:E1:DF:82:F2:B3:ED:C2:82:20:BE:72:20:D0:F4:9B:A3:A8:5C
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 01984A40F9434552BB5A77F4D25426FBCE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 1188
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: B4+rj4iTBNro///SztuidEVZlj7VORSKs5/i5WJwrJY=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f9:43:45:52:bb:5a:77:f4:d2:54:26:fb:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=cc13e1df82f2b3edc28220be7220d0f49ba3a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:7a:a2:80:24:37:78:e0:da:36:36:91:7d:
a9:cd:8b:ec:f0:60:58:4b:fd:41:08:9e:fb:65:e9:
68:3e:60:ed:fb:2a:5d:cf:b6:ea:f5:37:53:a4:60:
90:3b:3c:65:c2:43:40:48:1c:c0:ff:aa:c5:04:15:
64:56:d4:41:ca:18:b9:7d:8d:c5:0b:1d:69:2d:e7:
7f:19:c5:61:ac:ff:ca:02:34:01:04:9f:93:e4:d7:
a6:52:ae:41:95:85:24:06:a1:86:98:86:74:3a:9c:
58:79:57:50:a6:8f:07:7a:1f:30:92:f5:c3:b3:3c:
f2:2a:72:cf:6c:5e:b4:dd:ac:d8:95:9a:49:a3:8b:
21:ab:b4:a0:6f:ea:41:2b:62:a0:4c:00:24:ee:0d:
14:db:37:2f:77:5c:c2:da:db:6a:17:ed:b6:7a:3b:
ae:01:1e:19:6c:52:6d:79:c0:e2:45:5a:d6:3d:59:
30:67:21:c1:1c:a9:9c:fa:1b:5e:6a:0d:99:b3:e4:
8d:4f:0d:44:3d:ca:19:5c:44:8a:97:f4:1e:fe:3d:
4f:93:b4:ab:e9:13:9e:ad:b8:6e:54:4a:cb:70:12:
19:7b:78:5b:05:ee:77:61:3a:04:13:26:81:fe:6b:
0f:f8:4f:9d:0a:11:8d:65:91:7a:45:bd:41:06:ac:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:E1:DF:82:F2:B3:ED:C2:82:20:BE:72:20:D0:F4:9B:A3:A8:5C
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:41:b6:37:92:a4:32:7a:00:c7:19:c9:02:46:88:54:bd:
27:66:6f:33:7e:e5:a9:b4:8b:a0:54:32:c2:35:a6:8f:66:ae:
f8:d6:c4:0e:05:06:d3:b7:31:ba:da:c0:76:1a:83:27:98:4f:
a7:df:c6:94:43:a9:71:12:48:1e:9d:6c:4f:ae:e0:11:52:cd:
fb:32:41:83:92:1c:d0:df:f9:b3:fe:51:d2:b0:cf:66:cc:4a:
67:5a:2b:18:8f:ec:8d:32:45:da:7b:2f:d6:c5:8f:20:2d:fe:
f0:e7:f2:14:a3:56:0a:ee:14:21:bc:6c:05:fb:7d:c3:d5:4a:
37:92:83:2e:4e:a4:84:e1:38:eb:d3:c3:4b:fe:75:3a:8c:bf:
85:bc:ab:6b:2f:0e:21:18:65:40:d7:76:6b:5f:21:0c:c1:cc:
90:c4:6e:90:1f:ad:29:c0:54:36:2f:29:07:a1:59:fe:7f:3b:
e4:69:1b:0f:1c:b0:9f:39:97:2e:f4:22:5d:c3:d6:70:48:ef:
46:e1:02:ac:7f:ee:58:24:62:d5:6a:c9:ae:b7:35:ed:3b:e6:
e4:10:79:f4:a6:ad:5c:f7:6d:5a:f0:fe:48:d6:5f:8a:39:df:
9c:c0:12:1c:d2:53:a2:f5:26:08:60:52:22:52:a4:7d:bc:81:
42:41:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:00 2025 by rpki-client