Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: 1phowuSxENL11lQbuC9Dy8TNUWmAwMMWijZVgn9yjo4=
Subject key identifier: F3:BD:7B:BA:17:91:48:8C:89:B9:FF:25:6A:2D:B6:A4:45:7E:96:FA
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 01993047F011E3DF2C27AD734B71C2ACF19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0972
Signing time: Tue 09 Sep 2025 21:00:44 +0000
Manifest this update: Tue 09 Sep 2025 21:00:44 +0000
Manifest next update: Wed 10 Sep 2025 21:00:44 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: J7R1NAL6nkQ9v7/maMkJ7SFiKSxIumGc01ePOOmZD0M=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:f0:11:e3:df:2c:27:ad:73:4b:71:c2:ac:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Sep 9 21:00:44 2025 GMT
Not After : Sep 10 21:00:44 2025 GMT
Subject: CN=f3bd7bba1791488c89b9ff256a2db6a4457e96fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:6a:ee:a2:32:1a:37:db:76:ae:1b:3c:9b:
c6:1f:30:09:1f:22:fc:1c:df:93:a2:63:82:6f:a2:
52:ba:29:14:e6:cf:97:e4:08:0d:48:a1:23:b5:35:
16:bb:67:95:a2:ef:1a:5e:ff:19:64:94:51:73:78:
6c:7f:63:f8:c1:b4:f5:8c:b4:0c:27:9c:72:5d:4e:
f4:eb:1d:50:cb:af:d3:46:a8:31:dc:71:ac:5d:13:
18:4a:4a:1a:87:d9:3a:2e:d1:b3:f6:dd:87:21:31:
5c:54:8c:83:40:ed:3c:90:92:e7:1c:e6:6e:db:aa:
03:1b:63:0d:0e:5f:10:d2:6c:46:32:63:d6:fa:7e:
fc:c9:35:5c:a0:02:ee:ae:81:04:83:70:72:90:6e:
d1:66:8c:ca:c5:a4:91:c5:4b:97:cc:e7:2f:d9:96:
a4:3b:01:78:b2:e4:8f:45:37:71:46:a7:e8:59:8e:
15:e7:cc:50:dc:f2:3b:79:55:99:d8:dc:58:e9:4d:
72:78:90:ff:e5:8f:12:28:20:f4:1a:c3:0c:06:ae:
1c:56:2f:b7:ca:b5:e9:90:5c:d5:7d:48:67:51:07:
2b:8d:87:e2:c5:ae:b6:75:eb:ad:f2:c2:c0:c2:fb:
d8:dd:fc:17:21:c3:d2:7a:62:8b:06:e2:37:3f:18:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BD:7B:BA:17:91:48:8C:89:B9:FF:25:6A:2D:B6:A4:45:7E:96:FA
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:8b:69:d1:83:c2:56:98:6c:71:d0:c6:1d:ca:b4:24:c1:
4e:9a:17:c0:a2:ae:dd:e4:92:34:8d:38:c4:e1:11:11:a0:de:
fb:5c:3a:fb:5d:aa:54:20:5a:a3:d3:40:8e:2c:61:1e:13:65:
0c:8b:08:0e:0b:68:90:b0:23:36:27:63:4d:32:2a:af:8b:30:
04:3e:0a:dd:b7:8b:24:c2:22:2b:07:b8:6b:6c:a1:96:50:3e:
94:1b:44:7c:79:4f:68:e8:30:05:41:74:97:95:36:88:46:2d:
28:82:c4:b1:b3:29:56:57:1d:d4:ed:ef:14:e0:3d:64:10:2b:
1a:2e:d4:3a:52:7b:8b:8f:68:b4:b4:00:01:b1:ca:bb:5a:bf:
0b:4f:e8:29:fb:af:24:1e:a0:a6:ae:45:20:c2:94:c3:98:1a:
d5:93:f5:c4:92:41:b4:7a:ef:79:a1:2c:77:07:01:d5:8f:19:
04:a5:9d:d8:bb:53:4e:dd:ae:70:47:ad:85:0e:bb:4f:d0:1d:
41:0e:a6:ca:9c:77:66:0f:c9:48:1f:5a:c0:09:06:9c:2a:77:
23:a2:4b:08:11:93:87:c8:c0:1d:57:ac:1f:db:f0:a5:44:1e:
38:5a:b6:81:ee:b8:1e:40:13:01:15:50:40:54:4e:84:89:90:
6d:46:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:03:03 2025 by rpki-client