Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: QR4Lcb+nBOeWEKgsPPSNqAiJOyRNfHpMjbFh9jQj7iM=
Subject key identifier: E3:D8:92:D6:CC:0B:E7:9A:29:7A:0C:00:87:7E:9E:B0:82:BE:74:61
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 0198D583A747AFC35681D2F16E187714C29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: CrT5UMVbZ8AoPNQSjeMRXkk7dOTFxb8wjFEhQo4ixhk=)
2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a7:47:af:c3:56:81:d2:f1:6e:18:77:14:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=e3d892d6cc0be79a297a0c00877e9eb082be7461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:46:9d:89:7c:59:8d:d1:66:69:e6:60:09:
64:87:eb:39:0a:16:0e:d6:07:db:03:50:0e:1b:66:
6f:ea:3d:9e:58:37:01:b0:5e:9c:3c:f6:8d:19:41:
76:eb:28:aa:2d:ea:ab:f3:a8:0a:c7:7c:e5:68:0e:
07:6d:44:e4:2a:ed:50:06:02:38:bf:c4:ab:35:44:
b9:aa:c7:01:18:1c:05:4e:4b:9e:f4:57:ae:9e:ef:
dc:eb:91:98:30:2e:37:7e:90:e4:80:0a:76:e1:70:
ca:af:d5:d0:ba:28:68:96:f7:58:77:4e:95:ba:a2:
71:0f:67:12:d3:e5:94:34:61:ce:a8:f4:ae:74:98:
fc:77:65:9d:b4:51:8e:01:76:08:37:c2:2a:a2:88:
0a:8b:e5:e8:fa:62:9e:94:ad:7a:c4:fa:f4:a8:46:
ec:39:ae:4f:28:f8:f0:4c:7c:2b:e8:83:cb:c0:49:
ac:8d:6a:94:0b:35:8e:49:c3:0d:9a:10:93:8b:0f:
b1:a2:4d:85:bf:4d:72:ad:75:d0:8b:0d:09:88:32:
f4:5c:e5:69:99:af:91:d1:bc:db:59:38:14:49:f3:
34:b0:44:3d:c2:d5:9a:98:c6:1c:9d:ac:50:13:55:
16:c2:f3:51:ee:4e:05:95:59:1b:41:98:cc:ac:6c:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:92:D6:CC:0B:E7:9A:29:7A:0C:00:87:7E:9E:B0:82:BE:74:61
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:40:b4:cd:22:82:85:a7:cc:7e:d6:a9:f4:fb:a9:64:88:3d:
20:f8:3c:f8:e1:e0:ba:f8:75:c2:bc:2a:be:10:d3:1c:33:80:
3b:a5:80:e5:89:08:52:83:20:9f:d9:ea:ab:5e:e4:f4:6f:5f:
67:00:db:28:13:8d:34:15:af:57:b0:e4:66:ff:d4:f5:df:66:
9c:9f:f2:d6:54:a1:1d:4f:43:88:77:3a:eb:06:ab:d4:4b:e2:
4c:cd:bf:f2:5a:ce:03:fc:52:09:79:58:48:a3:b9:5f:73:75:
14:50:4e:16:54:dd:50:fd:d0:82:2a:3a:a2:fe:bd:39:2b:cf:
8d:05:ae:f7:43:1e:62:58:2b:2e:a3:e9:a4:59:0f:ef:ee:63:
83:11:04:0c:06:21:91:76:2d:8a:b4:3a:c1:32:61:01:6e:a1:
9f:c6:aa:a5:3a:38:f7:12:65:cb:b1:69:89:a2:9a:84:8f:25:
6f:9e:52:7e:3f:34:c2:37:4c:42:16:30:a7:b1:04:b5:b7:aa:
a2:3e:9c:d4:14:2d:4f:53:8f:e6:c3:1c:a7:57:34:e9:f2:c2:
b8:fe:da:47:05:67:fd:6e:d3:c9:41:af:95:02:2e:83:c1:4e:
a5:55:23:23:d2:97:39:3f:43:8d:35:24:65:07:5c:86:b5:c9:
3d:a7:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:39 2025 by rpki-client