
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: wfzBKWTYYLf+6JTEOQvql2TQrvNVzgpLgFo9JAsSiPs=
Subject key identifier: 75:02:DD:34:B0:D1:FE:E2:B3:B0:21:64:38:1A:12:FE:FD:FD:B8:5C
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01974B8DD52703E61D5FB4696C0013381877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1007
Signing time: Sat 07 Jun 2025 18:01:15 +0000
Manifest this update: Sat 07 Jun 2025 18:01:15 +0000
Manifest next update: Sun 08 Jun 2025 18:01:15 +0000
Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=)
2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: OY3DFIRX+njNLLQWSdnbLXWGCRTSrrs2KPm4C/pq5rc=)
4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=)
5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=)
6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=)
7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=)
8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d5:27:03:e6:1d:5f:b4:69:6c:00:13:38:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jun 7 18:01:15 2025 GMT
Not After : Jun 8 18:01:15 2025 GMT
Subject: CN=7502dd34b0d1fee2b3b02164381a12fefdfdb85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:b6:2d:ff:c8:6c:9a:cb:07:6e:d1:a5:8f:
b4:94:c4:5c:47:4b:e8:df:db:62:40:f4:bf:27:77:
82:7f:4e:df:20:e1:2a:be:ef:a9:15:83:0f:76:bb:
03:a2:31:b4:db:3a:23:32:e3:cf:91:ed:77:bd:f6:
8a:75:86:18:66:79:a1:20:f0:11:d4:15:a8:ed:01:
bb:cf:ff:47:92:4e:5d:cb:47:ec:e5:61:88:ac:da:
e4:64:f4:07:21:98:3f:f0:48:32:16:2e:b4:7e:cb:
4d:3c:b7:96:dd:7e:81:78:01:3a:09:b7:3b:73:f0:
7f:6e:a1:5d:b4:27:82:e7:76:94:cb:cd:7f:c3:68:
1c:03:a2:46:68:99:bf:20:c0:ca:96:43:9a:0a:a5:
9c:03:b2:27:90:42:44:50:bd:02:94:5e:3a:46:63:
47:d8:45:1a:2a:7a:b3:b5:12:48:cc:64:a3:92:ef:
81:be:2c:12:f4:47:1f:2c:fe:36:5b:01:65:05:d0:
f2:8e:de:c6:df:d5:54:9a:96:a1:fa:88:2d:dc:71:
2f:38:94:af:4d:10:f9:32:3b:18:aa:07:d3:53:0e:
40:c7:59:23:27:df:c0:e5:7a:95:05:21:91:7e:29:
48:a1:73:cd:67:7c:39:d6:85:84:e2:87:07:21:1f:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:DD:34:B0:D1:FE:E2:B3:B0:21:64:38:1A:12:FE:FD:FD:B8:5C
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:90:ef:78:35:e7:fa:d2:e4:f3:73:6e:1b:c1:93:ea:0f:
4e:4b:a6:f9:80:44:a5:7d:83:c9:af:31:d8:20:7a:5a:97:2e:
ec:49:12:bc:d5:2a:0a:a8:c7:da:da:67:fe:ab:a1:89:84:27:
c1:43:d9:13:aa:c3:f2:58:a3:06:cc:c3:8e:76:5d:1a:1f:37:
4f:b3:1c:81:32:56:42:7f:58:90:29:35:34:93:1b:c9:8f:4a:
9d:bf:03:82:0a:3c:35:b5:e1:41:2b:68:61:0f:e8:d5:01:b6:
b3:87:10:72:7b:18:e9:6e:5f:88:43:06:c5:57:cb:61:49:4c:
10:44:6e:b0:97:e0:cf:c8:cd:4f:2b:86:dc:07:2e:77:41:b8:
69:f8:a7:3a:2c:f1:47:8d:e7:b3:de:a1:67:9d:47:fa:b3:dd:
ca:c7:9f:47:84:7e:bd:13:96:2f:d9:d8:fe:19:a5:fa:96:a8:
38:72:2f:5d:45:2f:de:91:0d:20:c5:e9:ab:60:42:00:55:3e:
78:02:cb:24:58:97:06:40:be:8b:65:75:28:1d:93:e4:c5:c2:
3c:c0:ea:81:22:9f:7c:d2:e1:56:a7:fd:a6:53:0d:0e:25:58:
f9:78:66:0d:88:e3:b0:92:b8:78:10:8a:25:b7:b2:99:1b:15:
99:69:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:37 2025 by rpki-client