Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: 8ct311JvncJoQTUCObZHpihnnaeLf5SeWEsdNjq8Bts=
Subject key identifier: 4E:FF:B0:2B:BA:AD:28:DB:9B:CD:D8:6C:34:BB:86:05:8F:8B:A3:58
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 0198DAAA1ACFC19B635ABFF42A271E672D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 164C
Signing time: Sun 24 Aug 2025 06:00:37 +0000
Manifest this update: Sun 24 Aug 2025 06:00:37 +0000
Manifest next update: Mon 25 Aug 2025 06:00:37 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: jo15QyfzDtKq0J3BwPgNkQ/HKXNMjinGnUvccStKELc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:aa:1a:cf:c1:9b:63:5a:bf:f4:2a:27:1e:67:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Aug 24 06:00:37 2025 GMT
Not After : Aug 25 06:00:37 2025 GMT
Subject: CN=4effb02bbaad28db9bcdd86c34bb86058f8ba358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:00:29:19:c1:55:45:22:62:11:1d:d2:4b:
21:f9:93:8e:23:26:db:b1:1b:23:7c:95:7b:a3:3e:
a4:b7:30:f9:67:f0:f9:df:30:7e:e8:14:41:8b:63:
1a:19:63:8c:79:42:a0:19:fb:1a:57:f1:c2:69:f2:
aa:e2:4d:9a:06:13:33:71:0b:ed:b9:de:1b:ce:6a:
a1:97:ec:ec:15:63:88:ca:2e:a8:76:b6:3b:ae:a0:
f7:63:d4:ab:57:6c:fa:64:f0:8e:63:f0:1b:50:3a:
4a:9b:07:d6:c1:41:db:38:97:bf:bc:d3:28:8a:3b:
4a:90:9b:2f:ca:2c:f0:d9:9b:f5:09:d9:52:86:be:
18:14:cd:59:0d:a0:fd:54:00:01:3e:03:49:5b:cf:
e1:d7:85:ec:3f:0b:d1:ba:29:0e:5c:27:05:ac:f3:
75:cd:7a:e5:12:10:b2:df:ec:64:46:17:07:30:65:
86:49:d8:84:08:79:c4:cf:f1:67:e4:81:2f:0c:26:
82:e2:a9:c9:40:e0:3b:6b:43:9b:67:a4:8b:c3:60:
e4:7c:25:38:1d:ab:77:65:f9:3d:37:63:41:1c:9d:
e6:bd:59:5d:48:5d:78:bb:44:c9:b2:36:a3:00:f7:
d7:fc:83:86:2c:10:d5:38:0d:bd:5e:85:ea:32:16:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:B0:2B:BA:AD:28:DB:9B:CD:D8:6C:34:BB:86:05:8F:8B:A3:58
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:e0:64:49:4f:29:a5:ef:b8:93:f6:46:c4:be:63:34:03:
46:aa:37:ea:0f:01:d0:46:91:92:9c:55:57:8c:cc:ed:31:76:
67:48:45:e2:a7:84:22:40:3d:fb:2f:99:d0:81:2b:d2:41:93:
1b:48:bd:4a:df:a8:d4:6d:94:e1:87:ed:fa:0a:59:90:fd:c9:
93:51:cc:29:5d:00:40:02:65:bd:c9:d5:ae:84:86:5c:df:86:
df:eb:2a:e5:28:a9:e0:32:ae:83:93:38:12:4a:6b:06:9f:92:
42:a6:d5:f4:42:88:df:af:a3:fb:cf:5c:69:96:98:2c:39:09:
09:cc:cf:e4:7d:28:2c:d7:49:26:13:a6:e2:96:e8:be:7a:b3:
b7:bb:3b:1e:0b:6a:70:55:c7:50:1c:1a:68:90:30:e7:a1:26:
5a:46:db:0c:48:4c:fe:89:87:b6:8c:0e:3e:35:cd:c4:d4:ef:
9e:fe:f9:31:8a:e2:d7:34:e2:49:df:79:bb:2f:5d:14:5a:d5:
ae:ad:1e:d9:ad:96:58:e4:c0:44:1d:60:b1:10:48:ea:fb:db:
8c:88:a3:0a:4b:43:2a:d8:14:67:7d:2b:4a:06:98:43:a2:fb:
26:ac:16:5b:51:57:06:d6:9b:43:ec:eb:55:03:b2:1d:c5:e0:
13:f8:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:54:50 2025 by rpki-client