Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
File: H_Umh1LLtSS8_ktaSXb_D4XTia8.mft (raw, json)
Hash identifier: kHvo0t6KA89VpEnOnCPctsh4ODkpBm//3DDopr2vQEY=
Subject key identifier: 58:27:A2:84:74:0B:2A:9B:4A:A7:D0:80:81:69:02:80:2B:BD:9A:33
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Certificate issuer: /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial: 0197B6A1913A12E0364A78E33F21C0BBEC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
Manifest number: 09A3
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (hash: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=)
2: H_Umh1LLtSS8_ktaSXb_D4XTia8.crl (hash: PNxfMJ6JJMthKqtTLKFe2a0GyduePPcfCYdT9gNy2pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:91:3a:12:e0:36:4a:78:e3:3f:21:c0:bb:ec:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=5827a284740b2a9b4aa7d080816902802bbd9a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:25:9c:29:f6:7d:7c:87:82:3f:c5:9e:78:
b9:db:c2:f4:cb:e2:84:06:06:39:ed:6a:dd:4e:e7:
8a:59:27:b4:9f:f0:c2:45:f1:23:7d:30:d1:29:8e:
a7:fe:f1:e0:e6:1c:9a:bb:ff:da:f3:3e:07:f9:da:
e0:32:ad:32:3d:07:7e:4f:61:b9:38:ff:08:5e:90:
f4:5b:ae:dd:96:6a:cc:02:61:97:16:6a:b0:8b:37:
15:d0:90:f5:b6:e4:62:c2:6c:95:14:77:73:99:fd:
7a:d5:ff:98:fd:e3:fa:3f:87:ee:e2:bb:f1:71:e0:
54:d9:45:c9:1d:1d:7f:e0:ad:8a:ed:f5:bb:ab:1e:
8e:43:a7:07:be:90:4f:61:93:03:ad:a7:ee:d7:0b:
00:1a:13:f7:78:6c:0b:26:b3:8a:ef:7b:37:fe:30:
b7:a0:80:3c:fa:53:88:c8:e7:9e:70:c2:d9:0b:64:
54:23:bb:c5:17:44:a3:e5:72:be:65:f3:f6:21:b7:
66:60:0c:4e:86:b6:be:e4:42:d6:37:eb:5e:26:28:
b3:95:6c:e1:a2:47:5a:67:2d:99:ca:e9:2c:07:1b:
e5:16:6e:b4:29:32:9b:e0:4f:c4:e3:e8:c4:8e:a5:
dc:47:54:3a:b2:5d:eb:ed:80:69:6a:a3:d5:36:92:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:A2:84:74:0B:2A:9B:4A:A7:D0:80:81:69:02:80:2B:BD:9A:33
X509v3 Authority Key Identifier:
keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:b2:f9:8c:94:38:07:38:b1:d5:b2:b0:77:07:7a:ec:8c:
48:59:fa:f7:a5:1e:45:dd:87:90:6a:03:7b:f3:57:d8:4f:c0:
d3:e4:bf:7f:a8:36:d1:13:a0:6f:b9:12:79:1f:26:85:c9:4b:
2e:e4:cb:7e:31:de:6f:e8:bf:ee:51:79:e5:2a:ed:0a:3d:e3:
47:4b:ed:87:bf:9f:69:84:c0:26:5d:50:89:c5:69:f4:43:61:
33:0f:e2:6d:7a:c4:41:b3:4f:f0:75:c5:0c:31:af:52:8a:87:
f9:2c:e9:9e:2e:5e:f1:46:14:b6:c2:a6:0b:07:3e:03:81:27:
05:32:e2:25:b3:9b:37:8e:a1:5f:7a:eb:69:6c:4a:20:23:e0:
ab:89:aa:f8:42:5f:31:d2:34:09:ae:00:5d:9c:db:a4:da:50:
bf:d8:3e:4f:ea:63:37:c2:e7:44:1c:0b:67:4b:91:1b:54:14:
2a:3b:db:a8:19:73:c8:3f:07:89:56:d4:07:64:84:e8:88:1c:
40:7e:50:b8:59:73:43:73:3c:f7:78:aa:6f:28:56:0f:aa:08:
ec:03:41:50:05:64:fb:6c:32:b2:b0:08:fc:59:e2:b2:fe:07:
41:a7:49:40:29:1d:cd:b1:ca:af:25:b2:29:af:ec:bd:16:66:
a9:eb:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:39 2025 by rpki-client