Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: bXySAgzbIQK0NY3nIDYpwValAtcyxOOENJR8VuZ/PPU=
Subject key identifier: 8B:72:89:82:54:8B:89:46:F2:3C:30:81:6B:5A:DC:E7:9E:E5:B6:06
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 01974DB2AE11B0FE69F7D520D2C0861A91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 058D
Signing time: Sun 08 Jun 2025 04:00:44 +0000
Manifest this update: Sun 08 Jun 2025 04:00:44 +0000
Manifest next update: Mon 09 Jun 2025 04:00:44 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: 1kq69AvN/AXe0xxygY2ro0DUUPWF6HjlwjXnQOieHYE=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ae:11:b0:fe:69:f7:d5:20:d2:c0:86:1a:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jun 8 04:00:44 2025 GMT
Not After : Jun 9 04:00:44 2025 GMT
Subject: CN=8b728982548b8946f23c30816b5adce79ee5b606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:f6:27:c7:28:6f:23:d7:d9:b7:ca:dc:97:
a5:5e:fd:65:d8:a2:2d:a8:69:21:cf:47:d1:8f:0d:
2b:25:d4:0c:c8:48:e4:aa:12:61:f3:97:1b:80:af:
91:0d:51:67:6f:fc:b2:3f:db:65:dd:70:7a:0a:b6:
44:76:6f:15:0f:36:9e:b7:8b:8d:29:c4:05:99:2a:
f8:34:e2:ac:bd:8a:17:82:27:8a:23:4f:b3:0f:be:
6f:9c:f6:23:a9:6e:6e:d3:c3:75:1d:1c:00:a3:f1:
ed:35:73:00:e5:09:07:35:01:c5:0b:69:1d:cb:cf:
6a:09:69:19:a6:62:ac:aa:74:5b:ca:43:3a:8a:22:
0a:8b:19:e2:5f:3d:af:5a:03:ff:35:5f:e2:7a:11:
53:e4:26:68:bd:0d:92:8f:51:41:55:6f:c0:66:d2:
dd:2a:e2:d5:ce:9c:91:48:df:a2:69:9d:7d:cf:a7:
8a:08:cc:11:e0:d1:87:60:64:81:45:21:5b:2d:ba:
73:cd:a8:79:7a:6c:49:c5:f7:d3:c5:30:a5:d9:2d:
96:63:f0:f9:85:69:e1:7a:50:a7:52:63:23:e4:23:
a8:87:8e:e5:a9:28:e7:20:f4:6e:d5:50:ef:28:e5:
77:27:6c:c8:2f:e8:27:dc:25:d6:30:03:1a:e0:6d:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:89:82:54:8B:89:46:F2:3C:30:81:6B:5A:DC:E7:9E:E5:B6:06
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:ed:79:50:06:d7:2f:24:e9:20:41:b2:67:ad:1d:2a:5b:
60:c0:c3:b1:a3:11:92:d5:89:9c:0a:1c:ee:35:70:81:ed:36:
ff:c8:f9:1f:49:8b:d9:d9:a3:ca:dd:b7:53:65:7b:2b:27:5b:
61:f6:65:06:6b:0d:3d:99:4d:de:d2:68:cc:5f:f8:b8:69:93:
51:69:d2:3f:d7:67:9d:15:b5:2e:ca:f2:e3:16:5e:29:9f:b1:
8b:d1:da:12:82:fb:c5:3b:34:60:fd:d7:03:f9:5c:ac:a9:e4:
05:9a:53:89:9f:fb:3c:c2:f5:02:ae:c2:e8:b1:14:d9:2e:dc:
ff:4d:c2:07:91:fc:4b:2c:52:5e:50:db:53:b1:89:55:4b:77:
45:29:c7:7c:39:0d:75:86:b2:36:38:51:0f:8f:4c:fc:ed:e8:
2b:f1:42:e6:99:60:cf:fb:e3:16:89:ec:ab:a4:4b:60:21:1f:
3d:03:f7:38:ee:6b:30:9a:0e:50:4b:4b:9b:88:05:5f:77:6a:
3c:89:be:6e:69:3f:45:2a:97:c5:96:00:2a:5e:55:62:08:35:
7d:b7:2b:f8:f4:59:b4:0a:cc:b4:f4:f8:14:b5:ce:cb:86:42:
45:b8:ee:e9:8b:90:33:b5:b3:3c:1c:f3:14:09:9b:f7:be:02:
37:2b:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:30 2025 by rpki-client