Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: B5fJgNSjrvqdQcQzAsGeVJsj95qJz9/cn6V/ZQgDdyI=
Subject key identifier: 8E:05:25:2D:44:74:1E:3B:89:74:18:4B:55:05:9A:87:40:80:94:A1
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0197B7B30B6F75A83FC25CF815780C420E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0CA7
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: +VC9GcrCQyTRjASjQjGG0UsZ8+Jo18addhyJJdcV4bk=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0b:6f:75:a8:3f:c2:5c:f8:15:78:0c:42:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=8e05252d44741e3b8974184b55059a87408094a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:00:43:c4:0b:2f:53:3c:63:86:8d:b3:94:
e8:d1:21:a6:44:70:6f:db:89:52:19:4a:9f:02:56:
3b:60:52:5e:cf:ad:ba:66:0b:23:38:13:b6:8b:fe:
e9:e1:39:f7:a2:5d:65:7c:f0:72:1a:69:6b:09:76:
4f:47:36:81:d9:50:19:fe:68:dc:e9:98:ce:2d:28:
e0:00:4f:ca:fc:1b:3a:98:4e:ca:15:cc:c1:79:33:
3c:95:4f:28:68:50:01:21:31:17:4d:54:ab:6b:76:
95:9e:cb:fb:34:bf:59:58:3a:f6:35:b5:92:43:44:
5f:5c:3b:c3:80:39:e0:94:3e:98:16:86:a4:ab:8c:
67:f6:d5:9b:bc:39:70:9e:1c:fa:73:8c:a0:73:6b:
f1:16:cf:86:7d:d5:9b:0c:be:53:9d:25:83:ab:04:
89:9d:38:c9:c4:a4:9f:49:f2:31:af:8f:81:91:b9:
fe:f8:69:5f:28:d5:e6:d5:8d:15:eb:6b:a6:25:09:
cf:c3:d2:77:9c:31:11:39:72:34:e2:83:c9:a6:b8:
42:2f:9c:6c:97:d9:35:7f:a4:32:44:c1:76:96:b6:
74:04:37:66:14:17:ce:43:a7:e3:61:c1:70:7b:7f:
a0:af:be:b6:7b:eb:d4:a5:fc:10:3c:23:58:d1:2d:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:25:2D:44:74:1E:3B:89:74:18:4B:55:05:9A:87:40:80:94:A1
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:68:c1:fb:7e:38:af:bf:08:e9:ce:8c:b6:6a:e7:d9:34:
e0:e3:e0:c3:83:88:d8:31:10:0c:78:b2:d7:49:28:79:e7:d1:
70:06:dc:73:e0:11:e8:f3:0b:e8:5f:0c:06:b2:bf:a9:e9:5a:
ec:ce:ca:1e:2a:d5:2b:e8:d4:2f:41:71:f8:bd:7d:ff:07:7b:
4e:d9:08:a7:c2:49:52:4e:f7:a4:7d:07:84:8b:e8:e1:88:f8:
93:8e:ba:25:ec:6a:f7:3c:e9:42:56:86:25:0e:aa:81:93:a3:
fe:f5:10:d4:5f:2e:79:0b:af:35:0e:6b:a0:b4:6c:8a:50:6e:
ab:c0:6f:b1:13:77:e9:9c:dc:05:e2:76:f7:cc:85:bf:aa:c1:
03:48:9d:6a:4f:9a:f2:5d:82:f8:5f:5e:0c:a8:f5:ba:0b:de:
f8:72:5a:0c:f5:4d:25:13:ac:53:87:34:65:7e:90:51:93:59:
f5:32:51:b3:8c:89:b0:cd:9f:30:b2:75:c0:26:2e:e1:f8:5c:
d6:9f:d5:28:c2:13:d1:07:2d:5b:9a:b8:57:0f:b2:9e:26:e0:
7c:3f:61:d0:c3:6c:eb:cd:64:63:d4:c4:6f:c7:67:7c:d4:20:
60:87:6b:11:56:41:02:28:b6:cf:82:67:48:be:6c:d9:6e:ae:
5a:7c:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:02 2025 by rpki-client