Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: 50Wyoqj58IBhm0GuxIznhvPf/dlnkF9PLEbkV9CPrJw=
Subject key identifier: 00:52:27:B9:90:F7:2D:47:97:5E:7D:3E:C4:FA:D4:17:14:5D:62:77
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 0197470C32965FE63EA685599F8F63E065CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0CFF
Signing time: Fri 06 Jun 2025 21:01:10 +0000
Manifest this update: Fri 06 Jun 2025 21:01:10 +0000
Manifest next update: Sat 07 Jun 2025 21:01:10 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: 42xlM6u2AqGYsx3hocRA4uPvleGg32n+6pmzsNnrcV4=)
2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:32:96:5f:e6:3e:a6:85:59:9f:8f:63:e0:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Jun 6 21:01:10 2025 GMT
Not After : Jun 7 21:01:10 2025 GMT
Subject: CN=005227b990f72d47975e7d3ec4fad417145d6277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:1d:d1:1e:f5:40:f1:bb:9d:b8:2c:83:77:
a9:4e:ca:96:c9:e2:73:3f:3b:d4:d1:09:dc:8a:59:
81:01:10:08:8c:74:6f:09:42:2d:52:3e:09:18:8c:
9e:5d:d6:2a:ed:69:2a:09:82:0b:94:f9:b1:51:ca:
d7:9e:9f:a7:20:69:09:42:0a:a3:c8:aa:50:2b:45:
9c:70:67:c0:e0:4e:f9:1a:6b:4e:e2:92:00:b0:32:
e4:17:ca:d5:07:70:e0:8b:f2:5c:d7:91:94:96:89:
24:a2:1f:33:0b:ef:9a:d9:62:85:54:86:b3:9b:97:
a6:62:7c:7b:93:d9:14:57:96:92:8e:5d:e0:2b:44:
07:c1:08:9a:8c:34:9f:0d:2c:7b:c1:ff:52:0b:b7:
a1:d4:e3:91:26:4c:43:ed:6c:3c:28:c5:a8:8d:5b:
12:bf:36:21:99:d5:fa:98:a6:ba:20:87:7c:70:d3:
a0:d5:ee:67:ac:2c:2f:0f:9b:82:2a:4c:f3:03:e6:
bb:21:96:78:20:14:ba:99:78:ed:e9:09:61:ee:68:
55:d3:d3:3c:24:47:32:41:00:a6:57:ca:8d:75:8a:
5c:89:69:48:67:33:ff:44:12:f6:66:e2:0f:3b:15:
44:e3:5b:ac:57:e7:0e:ca:6c:e9:bc:8c:57:85:64:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:27:B9:90:F7:2D:47:97:5E:7D:3E:C4:FA:D4:17:14:5D:62:77
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d7:bc:39:a0:5b:24:af:78:16:90:45:0e:0e:ec:7f:b9:4b:
e9:3e:60:0f:fb:50:a6:7a:4d:85:97:39:db:7f:2d:19:c6:2c:
2a:f0:bc:16:b3:b7:53:e1:ee:69:c3:70:4d:15:36:fc:d2:24:
87:d9:7b:d5:9d:85:bf:8e:e6:b6:37:67:b5:15:35:1f:eb:a9:
71:bf:a9:96:07:bd:bc:46:d3:5f:bc:36:25:ed:82:da:d9:de:
e3:67:35:52:69:c1:80:ba:9b:03:aa:79:75:15:ed:54:e4:60:
d6:e0:5e:e1:99:7f:eb:2b:33:9b:65:0b:ce:ed:e1:7f:46:cd:
2b:78:ad:2c:a9:f3:4f:6a:8f:cc:45:38:56:b0:2b:ac:f9:84:
b8:cd:44:30:6b:d2:86:e3:cb:d4:2e:56:bd:29:fe:3e:6f:42:
f9:0c:80:9e:f2:8e:54:94:9b:75:a4:c2:43:52:ed:0a:40:0e:
95:3c:d8:ab:43:f7:5d:cb:30:23:eb:02:45:58:49:9d:aa:2c:
51:04:7c:24:e5:a4:3d:f1:82:85:dd:35:83:eb:b2:50:d9:4e:
46:3b:03:04:01:97:5d:34:ba:aa:c0:12:7d:ac:f1:c7:d3:14:
68:da:9c:41:7e:8e:1c:82:b9:c2:45:72:ce:d9:60:51:d6:0d:
60:8e:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:37 2025 by rpki-client