
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: ZiDYpuO/ISXFW1BjH84S2ZH/Iw/pUC0HfOAeuJOGpkk=
Subject key identifier: 94:B4:C4:07:67:E2:FF:1F:74:99:0E:23:A5:EB:62:74:D7:37:4F:82
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 0197488D253581ABE2F92F06199C11EF0ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:01:39 +0000
Manifest this update: Sat 07 Jun 2025 04:01:39 +0000
Manifest next update: Sun 08 Jun 2025 04:01:39 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: B11PqPW8DcQ3Lru5Gb4UNo3DoANo/phnbdOI468fmT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:25:35:81:ab:e2:f9:2f:06:19:9c:11:ef:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Jun 7 04:01:39 2025 GMT
Not After : Jun 8 04:01:39 2025 GMT
Subject: CN=94b4c40767e2ff1f74990e23a5eb6274d7374f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:37:f4:29:4d:7d:d4:91:50:68:7b:e3:9e:
b5:02:12:aa:26:80:a4:f1:be:a3:93:6f:3d:11:40:
ac:92:35:c6:a6:61:4a:53:44:68:31:d7:68:ce:c1:
90:40:b3:52:34:a6:65:60:4e:b5:6c:7e:9a:9e:c6:
a2:e6:59:23:3a:74:7d:6d:ab:9c:54:16:27:3d:da:
7a:ac:df:2e:35:dd:2d:be:53:81:3f:bc:b1:81:ab:
33:e6:f7:ed:d7:6e:ab:bc:e9:ea:2b:b4:d9:2a:70:
e8:95:1c:59:89:90:29:d9:c5:7c:a6:a4:d6:03:ed:
44:0a:5c:d2:3b:82:bb:e3:25:33:24:e6:1e:38:d7:
11:2e:9f:92:77:ba:13:14:06:56:a6:98:f2:08:f1:
85:3a:0f:3a:68:de:59:a3:ee:31:52:ba:a1:18:3a:
62:81:a0:dd:e7:0b:3f:c4:c4:54:3a:5b:21:8c:ef:
78:8d:b2:ef:9e:70:c6:fd:ca:e8:fc:a0:b1:71:df:
ba:c9:d1:8d:64:bb:a3:16:45:03:dc:61:8b:21:89:
56:45:4e:93:fd:fd:d8:7b:15:5e:87:42:78:24:9e:
14:2f:f2:22:03:f3:88:13:72:7e:ee:f0:c7:45:92:
2e:ff:47:98:05:8e:e7:9a:eb:93:48:fc:dc:eb:ad:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:C4:07:67:E2:FF:1F:74:99:0E:23:A5:EB:62:74:D7:37:4F:82
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9d:1e:a8:19:2d:4d:d1:98:cd:b3:64:bd:b7:f6:36:65:6a:
33:cd:81:73:fc:be:e8:69:a6:88:09:52:8b:25:48:8e:f3:e8:
a6:ba:e9:fd:e4:bf:bf:2a:aa:a6:8a:c3:1f:f0:b7:2d:26:84:
a3:83:70:bc:05:80:fb:e3:ee:2f:3e:3e:c7:df:e9:8c:c2:4d:
ab:44:06:2e:cf:c7:6f:fc:b2:a7:cf:9d:4d:fb:a0:74:29:c2:
3c:3b:65:65:97:34:d6:19:72:d5:27:7c:66:5b:09:c4:f6:ac:
51:dd:b5:08:90:39:37:9b:39:a9:0c:1e:ab:15:8e:36:ff:08:
8f:a5:16:4a:95:de:cc:9a:56:4f:8d:54:a7:c5:eb:11:fe:21:
46:cc:fe:7f:43:1b:9a:c1:5c:8a:86:49:14:80:6a:c7:22:cc:
4b:f1:6f:fc:b3:bc:b2:c0:2b:e6:00:42:54:ef:70:e0:8b:09:
d7:1e:47:c6:5b:9e:ed:cb:d9:12:f1:c0:0d:6e:ca:c2:12:68:
b5:57:39:03:df:d7:b8:40:f3:40:0a:6a:af:9c:c8:64:4e:63:
2f:b1:9f:ad:e0:c6:8d:f0:bb:11:0c:91:75:55:34:6b:ac:bf:
d2:04:97:69:4d:c5:ad:42:bd:f1:9e:e2:33:e8:c8:aa:eb:f3:
d7:b8:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:02 2025 by rpki-client