Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: OnCo6nNlB/cMDJDaZHGBIQ9f4pzQE4HsxEaZ3pzjNkU=
Subject key identifier: 8C:B1:14:5D:10:F5:BE:B0:34:18:F1:21:75:45:7C:E9:DB:CC:81:AD
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019751C672B5428627533ACC32D25CAE20E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 23:00:49 +0000
Manifest this update: Sun 08 Jun 2025 23:00:49 +0000
Manifest next update: Mon 09 Jun 2025 23:00:49 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: yB8YvViBHmjyPPe++CiBDhVrdwCioz36tXpFeZFe6co=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:72:b5:42:86:27:53:3a:cc:32:d2:5c:ae:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Jun 8 23:00:49 2025 GMT
Not After : Jun 9 23:00:49 2025 GMT
Subject: CN=8cb1145d10f5beb03418f12175457ce9dbcc81ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:89:61:08:c5:95:c8:48:5c:4e:9d:b5:14:
f6:09:69:ea:11:ae:f0:ec:8d:11:9d:54:31:11:7d:
40:e8:9d:e7:76:9f:37:a9:4c:a7:50:12:0e:04:15:
c8:e8:ba:77:71:84:1c:2c:c0:2e:79:85:b7:cc:f5:
bb:53:71:7d:50:7f:29:99:20:6c:ba:14:ac:b8:95:
ea:b1:7c:48:b0:63:9a:bb:b4:6d:cc:23:31:5d:3b:
9a:d0:47:00:92:8c:a9:f6:48:ec:62:55:25:73:d9:
98:f1:99:aa:7a:2b:79:c3:90:85:24:08:2a:e8:12:
47:51:93:b6:39:5f:da:df:bd:b8:7a:ee:73:5e:7a:
a5:12:4c:fd:ad:c3:eb:f3:0e:47:78:ec:81:d4:51:
24:d9:04:ba:99:d6:cd:95:80:83:95:83:e7:1f:02:
72:cc:8a:a8:b3:96:d6:bb:ba:f1:f1:2d:20:86:5a:
42:d8:4c:00:1d:a5:57:f3:71:54:c1:d0:73:6d:47:
dc:bd:4a:7d:bb:e4:50:24:0a:11:74:bb:09:2b:46:
e2:58:84:fd:b2:c9:5b:58:0b:4b:26:17:fe:3b:86:
09:9b:3f:bb:dc:d3:b1:a3:b2:e4:da:1d:04:e0:e4:
01:e1:4c:c2:12:7d:ad:49:b1:73:57:2f:99:d8:79:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:14:5D:10:F5:BE:B0:34:18:F1:21:75:45:7C:E9:DB:CC:81:AD
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:36:1d:f8:c6:59:7e:22:bb:e6:ae:7b:e3:53:0f:60:a6:d1:
e2:ff:ac:05:90:9e:75:9f:b0:53:b7:d0:ad:f3:41:af:c2:16:
f7:8e:0a:91:dc:4c:d4:9c:14:d6:eb:3d:f8:64:e7:0a:52:7b:
8a:a7:8c:78:68:29:50:13:36:e5:a7:2f:73:79:2d:94:d3:e7:
e4:04:25:ba:fe:62:61:0b:16:c7:b6:05:50:16:eb:47:16:0d:
dc:f5:e6:58:ee:5d:1c:d1:89:a1:40:31:f9:25:be:85:8d:e8:
2e:02:08:8a:0b:67:f3:9e:6a:62:48:9f:e4:0e:8e:2f:18:06:
72:58:e1:8b:45:1c:aa:8d:ef:fe:70:2b:0e:f9:c8:67:7c:f9:
dd:46:95:98:6a:70:3e:98:57:f2:0d:8c:38:b7:d5:5e:1e:e4:
64:a4:98:58:4c:e0:0e:47:87:48:f5:e8:26:54:f6:d9:50:f8:
13:a3:a7:ba:49:8f:35:86:c3:f6:6c:4d:ed:b3:81:a0:18:fb:
47:24:b2:65:79:9a:a5:5b:d7:3e:1d:33:67:92:89:8b:d4:17:
90:15:b1:e8:d7:33:e6:2f:cd:28:d2:e2:82:a6:0c:dc:61:d5:
0e:8f:a6:e0:7b:af:d9:54:06:0c:8b:a5:13:45:88:fc:1a:d6:
c2:ae:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:27:17 2025 by rpki-client