Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier: a2thLMrMmVUieEUcd/cpdUC6hQ3KYuAKujtU86zdjZE=
Subject key identifier: 49:C2:99:F9:43:A2:9D:77:E3:B3:1E:88:DA:6C:BE:D6:C6:A1:10:12
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 0197BAB451A418F867118FB23FFB06744DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number: 15CE
Signing time: Sun 29 Jun 2025 08:01:08 +0000
Manifest this update: Sun 29 Jun 2025 08:01:08 +0000
Manifest next update: Mon 30 Jun 2025 08:01:08 +0000
Files and hashes: 1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: To5IgWI5C7++gixOwUS8GaDrZ8OQ6Hkbk/YliyACxME=)
4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:51:a4:18:f8:67:11:8f:b2:3f:fb:06:74:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jun 29 08:01:08 2025 GMT
Not After : Jun 30 08:01:08 2025 GMT
Subject: CN=49c299f943a29d77e3b31e88da6cbed6c6a11012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:33:5a:5a:f4:5c:ab:91:56:7d:6c:7f:a4:
4f:17:ec:15:7b:df:78:f0:5e:ac:4b:61:ab:3e:8c:
f8:cf:a9:58:53:e4:39:b1:1b:1c:dd:39:7b:23:2b:
5e:3e:33:99:7f:87:ac:a9:74:b0:67:a0:2c:7b:fc:
ff:7c:2a:e4:92:54:8c:6b:34:28:d4:51:da:18:55:
9b:12:69:c0:f5:d1:4d:34:c1:04:8a:87:61:f5:75:
db:95:32:1f:db:24:d3:49:5d:63:cb:ba:79:82:1e:
a3:d9:30:b6:08:d6:58:05:3a:ef:6f:b6:b4:f8:3c:
ec:03:19:a8:d5:0f:24:58:ab:c6:15:bd:6b:12:5e:
18:11:e6:91:55:79:5c:1e:7c:92:c7:ce:cc:f2:8d:
78:2a:02:e2:e7:80:21:19:03:be:3e:94:b4:b8:7f:
e6:26:e5:55:05:a3:bb:2f:27:d9:cf:bd:d2:1f:51:
08:6a:65:0c:ac:3f:8c:d5:2e:e7:69:d5:04:c3:27:
c9:05:aa:06:30:21:79:5e:f7:84:9f:31:41:2e:60:
34:f8:27:de:9e:4e:67:2b:65:be:42:e1:00:1a:c3:
9b:bd:a9:d2:fa:5a:bb:f4:0b:d1:a5:5c:0a:c6:3c:
dc:9f:00:2e:ea:d4:eb:b9:ac:2d:53:2c:38:70:6b:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:99:F9:43:A2:9D:77:E3:B3:1E:88:DA:6C:BE:D6:C6:A1:10:12
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f8:0e:15:a0:20:97:ba:87:cc:81:8d:58:48:d2:f1:36:78:
11:52:21:bd:1e:2a:d0:3b:e7:24:6d:d4:88:13:68:df:76:ad:
67:68:e5:10:cf:6d:0b:e4:16:3d:3d:1f:3b:e8:c1:9d:f3:eb:
c6:b5:a0:e5:b7:98:51:9d:1d:71:1c:0e:ac:2b:84:9f:99:0e:
bc:c3:eb:c0:be:2e:d6:28:bb:3f:c6:27:66:72:be:fc:8a:da:
42:a5:26:d5:00:21:3e:a0:49:ec:17:ec:11:ec:9a:54:62:e4:
a3:a5:d3:d3:7e:97:7e:39:33:3e:88:a7:db:4f:56:ac:f5:db:
5f:54:71:58:00:f5:06:ac:3b:19:85:ec:5a:ba:7c:46:79:2c:
61:d7:15:0e:a5:fb:bc:4d:5e:f8:1d:9d:68:9b:de:fe:67:93:
95:92:6a:cc:61:f4:af:ec:9f:4a:5e:a0:29:7f:be:3a:c9:46:
7c:9c:91:2f:94:19:64:6c:a9:67:30:61:9b:ab:cd:74:88:7f:
ea:75:21:48:0a:49:ff:3c:57:93:e3:9e:d7:a3:4d:be:5b:7e:
5a:71:58:90:9f:ca:64:ef:ba:a4:c4:f9:3d:6c:7a:f8:07:9c:
be:f9:65:33:0b:d5:bd:af:c7:09:2b:1a:51:fa:f8:e3:10:33:
29:61:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:23:11 2025 by rpki-client