Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: 8U8neGkChpFMcLKj5HsssEd7GUsHXPAhSqHpTJyFIRw=
Subject key identifier: 1C:28:98:40:9C:75:FB:2F:0C:73:DF:FD:70:9D:4B:C8:AA:76:AA:67
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 0199228C9ECAF4131FB166905195E1F02E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:04 +0000
Manifest this update: Sun 07 Sep 2025 05:01:04 +0000
Manifest next update: Mon 08 Sep 2025 05:01:04 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: 4m14hvuLRMHII6LXtODHTpLMn2VY7VzbOHYKunF2QXs=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9e:ca:f4:13:1f:b1:66:90:51:95:e1:f0:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Sep 7 05:01:04 2025 GMT
Not After : Sep 8 05:01:04 2025 GMT
Subject: CN=1c2898409c75fb2f0c73dffd709d4bc8aa76aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:3c:80:2a:db:ba:23:08:8d:d8:b6:dc:54:
67:2b:90:34:98:d1:d9:fb:cf:89:7c:85:15:c0:ae:
0c:db:30:4f:94:cc:9d:15:60:d5:a7:c2:5d:74:b6:
a6:b5:6a:e5:3f:09:25:31:d3:81:d1:82:23:7f:55:
07:48:ca:43:4e:72:2e:23:d0:3f:4f:08:c4:f4:e5:
78:ed:8d:bb:b2:2d:d2:f4:c0:1d:ef:bc:f0:5e:eb:
f1:f8:af:c5:8a:5e:2b:3a:b8:cc:b2:80:00:b2:3f:
22:ba:45:6a:03:b8:9e:ef:3f:fb:44:de:87:4d:64:
a2:c9:9a:ca:7b:e1:12:8b:04:2f:a4:1a:e0:65:c6:
8c:cc:e2:4b:75:79:f2:d7:23:25:a5:1c:26:02:ab:
cd:7e:91:f4:f5:50:52:54:82:ef:5c:49:9e:7d:28:
b1:a6:9c:fa:d6:4a:fc:65:4d:33:19:ee:aa:99:cf:
66:ae:82:11:dc:86:5e:7b:2d:34:f6:69:85:8d:c1:
46:e1:ca:cd:b9:8c:77:db:ac:07:c8:9b:34:f0:ea:
11:7e:e1:44:e6:21:6b:57:3a:05:27:14:11:2e:ea:
81:da:4d:9f:2d:19:04:8f:91:f1:a2:b1:52:0b:05:
4f:cc:20:62:b2:89:ef:05:67:ff:06:56:42:e7:5f:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:98:40:9C:75:FB:2F:0C:73:DF:FD:70:9D:4B:C8:AA:76:AA:67
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:4c:cc:2e:a0:64:6b:4d:80:e9:aa:d3:fe:34:c5:90:0f:
42:6c:86:02:0e:9d:a8:9b:23:53:df:1a:a3:ee:0c:00:79:e3:
a5:13:db:1e:6f:4b:6a:7c:d7:29:35:82:53:b8:2b:d7:66:ae:
02:15:71:f3:df:d2:7f:1d:a6:44:8c:8b:31:8d:7d:01:bf:ec:
b5:a3:ee:39:22:b7:d4:50:16:f8:01:cb:bc:5f:e5:b6:7d:84:
ed:37:4c:20:00:52:8f:0c:d8:c0:5b:0f:da:05:93:e2:9f:e2:
5d:73:54:b4:98:c3:da:ae:56:e4:a8:34:8d:b9:a8:82:55:3c:
63:35:b3:08:a9:73:70:df:8c:74:00:5b:8d:b2:76:3b:01:63:
23:0d:fa:2b:ec:10:f0:38:10:e5:75:b5:f1:6c:45:c0:02:dd:
06:9e:bf:78:a2:d9:80:d0:06:f0:ab:3e:c4:d2:58:56:6f:68:
61:d9:4b:88:ae:43:58:4a:9d:64:1f:d1:db:e7:23:ea:53:6c:
ed:a9:39:01:9f:5c:7a:38:b7:da:ba:b4:64:f2:92:47:49:e8:
df:bf:36:3e:aa:f2:19:91:06:05:f9:df:c7:06:fc:96:3c:02:
98:c6:97:2e:b5:ab:56:d3:85:87:05:7c:67:a8:9c:5b:a2:67:
a8:d9:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client