Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: 5dgUJj4nQohDzwZ40WNaswyd8b+VXyu1jDZLnyHdoRs=
Subject key identifier: D1:FF:8A:22:DB:AD:15:F6:E9:87:BC:CB:B1:46:27:B3:A1:25:6D:42
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 0197499EDC0F41EEAC71B8CD6FC779F802D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 063A
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: vG373HXfepiu9sg+Z5mzEilORJ821EM9IcYO9Ya5vQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:dc:0f:41:ee:ac:71:b8:cd:6f:c7:79:f8:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=d1ff8a22dbad15f6e987bccbb14627b3a1256d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:93:68:9b:18:d2:7f:33:4e:92:1f:af:e5:
b5:cb:09:92:17:4d:33:4e:87:7f:fb:17:e1:9c:c2:
df:28:bf:72:02:a7:16:7a:36:d3:a1:f4:16:d4:83:
0a:04:3d:75:8d:52:22:2c:86:24:2b:55:5a:f8:03:
80:94:17:4f:2a:91:ec:2b:39:45:6d:47:6b:7b:db:
e2:22:6c:8b:5c:e1:c9:59:3b:b5:39:bd:54:92:16:
3f:d8:c4:17:8b:b5:b8:b9:10:dc:f7:56:1c:98:59:
f9:6e:a4:27:a2:b7:40:b8:f1:7f:7b:03:52:07:db:
73:c9:e9:23:7b:b1:f7:00:ff:51:a3:47:f5:01:22:
83:b0:5c:44:90:7b:ba:6c:d3:c0:ca:37:4c:82:7f:
bd:71:56:89:81:fa:a1:d5:ca:5e:3b:fb:8e:e9:5c:
2f:10:27:90:e0:64:ad:d3:87:6d:b7:75:16:d0:45:
a0:b0:31:f2:5f:2a:2e:22:cd:e2:b4:f4:e0:c7:12:
11:52:28:3b:d5:ea:6a:75:14:23:8d:88:e8:de:4c:
e2:d3:2d:93:9d:ed:30:7f:f8:fb:5d:ee:43:82:85:
21:da:55:35:fc:cf:0f:5a:a6:b3:c5:4b:a2:11:bf:
81:b7:af:3a:2e:d1:06:eb:92:bc:2f:98:ec:7e:d9:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:8A:22:DB:AD:15:F6:E9:87:BC:CB:B1:46:27:B3:A1:25:6D:42
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:63:88:17:ff:49:60:5a:41:e6:e6:d4:9f:2c:e0:60:bb:
a7:cd:7e:52:8c:e9:93:20:80:f0:59:35:d8:65:49:f6:01:81:
2d:de:03:55:68:c1:ac:e9:19:95:57:4f:76:3f:37:02:bf:bc:
75:c6:75:f1:e9:fc:f9:b4:f0:ef:f2:ab:d0:c9:e2:ac:88:e6:
4e:aa:1f:c3:51:13:3a:7d:0e:01:77:25:fb:c5:3b:34:b9:ce:
d3:22:a2:9a:8b:82:28:22:48:33:fa:5d:66:9e:10:4d:9f:03:
48:f8:fb:e7:1b:01:b7:0b:ad:f7:9b:2d:b1:87:93:09:bd:63:
d0:95:34:a5:a5:1a:5a:8f:87:cf:4e:b2:7e:33:9b:b0:20:bf:
6f:be:98:46:15:95:2e:3f:6b:5b:bf:87:91:0f:f7:10:ac:ec:
28:04:08:d5:b9:e0:88:fa:63:7d:92:f4:0a:1c:62:2a:f8:e6:
a7:5c:b7:76:69:b1:00:18:09:ce:d4:14:87:f9:52:6c:0d:6f:
48:bf:f8:d4:99:b7:ac:5a:ea:0d:c3:a8:dc:a5:3b:26:25:84:
23:ac:53:19:9a:d9:8c:b5:b9:16:32:78:c1:14:1e:ce:89:c0:
67:db:03:92:bc:a7:71:fc:5c:0e:9e:c1:8f:66:3b:37:c5:7a:
82:49:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:45:12 2025 by rpki-client