Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: HkkEMksK1xkx0bZQcyZKj7vEhFrTbkwPPJ+JmQv65BI=
Subject key identifier: B8:25:01:C5:96:3C:C4:B7:47:EA:E9:6A:EA:6E:9E:66:A6:89:18:9D
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 0197B6A03B1C20D3CAD36F9A31E8C2BB2C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1370
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: EuZNUIzuSLiI4IEqjf2hkH+ceHWF2EzVmXvRAcIokIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3b:1c:20:d3:ca:d3:6f:9a:31:e8:c2:bb:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=b82501c5963cc4b747eae96aea6e9e66a689189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:59:4f:04:d0:31:13:ed:30:04:30:99:b7:
53:97:d5:ee:f2:81:17:66:5c:07:44:97:66:e2:a1:
02:82:d9:98:55:d3:bd:0e:c0:c7:1e:60:24:97:40:
cc:d2:cb:48:a4:02:57:1a:3f:3c:2c:c4:c2:58:77:
6f:c6:cf:bd:6f:f1:43:27:12:a1:36:58:33:83:8a:
77:13:28:b3:6b:e1:57:26:18:24:6c:14:c4:83:e2:
4c:7e:6e:0e:9b:02:5a:f8:bb:4d:28:3c:ae:ad:ce:
6a:8a:48:e8:a3:74:07:32:b1:40:e0:06:3e:0d:ec:
73:0e:0a:e7:b2:98:12:7c:ef:c8:c4:3c:74:5b:d1:
ba:e1:77:b4:d6:f6:a6:8e:d7:7e:9e:09:bd:69:94:
82:9c:a4:d7:8e:22:79:e5:e6:b0:ea:cc:f1:a8:23:
6e:29:9c:34:fa:0d:09:42:e5:f7:40:4d:62:df:1d:
59:db:c6:e5:16:9a:70:4c:8c:62:aa:5d:f5:89:bd:
db:c4:c9:9d:35:eb:d6:db:d3:d6:fa:c5:db:86:02:
cf:90:2e:b6:94:63:77:a5:48:e9:2c:ec:1f:90:65:
85:59:5b:61:e7:c4:7d:1c:9e:23:68:ab:26:b5:e0:
5b:b2:7f:98:0f:02:c7:8d:a1:a4:a9:24:82:4b:5b:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:01:C5:96:3C:C4:B7:47:EA:E9:6A:EA:6E:9E:66:A6:89:18:9D
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:26:69:e8:26:b2:84:3f:0a:03:53:bf:09:60:98:df:3c:
cb:24:a2:a3:f8:65:00:a2:af:5a:64:03:52:7c:e1:d3:e2:68:
1f:72:ea:de:0f:97:d2:d3:70:d1:97:be:16:a7:23:77:5f:be:
6e:f7:5f:ad:a8:e1:42:71:8c:81:5e:62:da:fd:29:9e:55:77:
a9:19:3f:05:4c:cd:16:23:2e:fe:68:66:fa:15:42:d0:05:81:
1b:17:d9:05:9f:ec:6f:db:d5:54:c9:fd:35:50:4c:05:1f:4d:
e4:4e:e9:15:b3:29:e8:6c:df:06:7d:83:a7:bc:a6:c2:b5:4c:
51:f8:ac:4c:d8:64:90:bd:b0:16:65:d0:c5:55:bb:a5:a5:a2:
57:5e:7a:10:fc:67:09:35:ce:e5:be:d6:44:8c:22:8b:51:fe:
bf:35:40:9e:9d:86:d7:04:2c:8b:3e:1d:a6:6a:fb:18:56:94:
7b:62:96:98:4d:4a:83:40:72:4e:d9:b9:ea:bf:11:66:4a:f1:
30:db:f4:5f:65:74:b8:cd:c2:4b:66:45:fd:fe:04:68:8d:5a:
db:5a:de:3d:e4:6f:fd:1d:8b:40:da:9f:9e:e0:43:5f:b9:b2:
47:7d:ee:5a:16:31:89:70:5d:ea:42:b3:08:bd:66:f0:05:f1:
d8:41:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:35 2025 by rpki-client