Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: w1t1jWWsRlrMDWAwTQgs9YG/1T+86trYkRmcNbFutB0=
Subject key identifier: D0:16:BD:B2:F5:2E:D8:1E:E8:5F:55:9F:30:88:D4:E9:53:A3:35:63
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 0199FC583173887232EABA0AB1A03FB73210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 15B1
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: QdohxqNkn8smbESCTqqXKODav94NuCVLRk7OZKSDOfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:73:88:72:32:ea:ba:0a:b1:a0:3f:b7:32:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=d016bdb2f52ed81ee85f559f3088d4e953a33563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:f0:93:57:d4:cd:41:b9:e4:89:73:d5:c0:
d8:3c:e9:37:75:ca:61:49:06:46:f6:a3:b3:8c:33:
2d:2c:af:7c:ab:dd:bc:b9:16:10:7d:c5:2d:fc:1b:
8b:17:93:91:cb:c9:2e:0a:ca:c7:d7:9b:89:0a:a7:
5d:27:0e:c4:17:37:cc:d6:99:77:39:bc:71:99:ae:
4d:6a:f7:76:c9:bb:05:a5:20:9b:19:92:f5:9a:64:
5e:be:a3:2f:4d:93:b8:2b:b2:6c:43:af:3a:fb:4b:
57:88:62:b2:bf:69:0f:e8:77:6d:18:c0:f2:c1:89:
4e:ab:60:3e:0f:c4:c1:0e:ff:0b:fb:e7:c6:bc:c5:
ae:04:ff:10:c3:5d:b6:0b:de:2c:4c:67:33:29:ca:
6b:95:fd:8c:a9:ed:d0:20:8c:13:fd:3e:1c:5c:04:
bb:a5:8c:1a:ba:e4:cf:d4:84:2f:40:71:96:14:43:
b0:6f:dc:2d:d5:ea:9a:ea:6d:74:45:6c:8a:a7:e2:
4d:68:c4:71:59:2d:b3:c6:29:c8:d0:af:68:ca:9e:
32:ce:9e:77:7f:78:93:d3:f3:fc:c0:43:c4:1d:44:
9f:ee:b2:3b:fa:88:c8:ee:5b:bc:2a:87:7f:41:3d:
09:70:68:75:a9:95:76:a8:ea:d3:e0:0e:95:ee:5b:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:BD:B2:F5:2E:D8:1E:E8:5F:55:9F:30:88:D4:E9:53:A3:35:63
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c9:68:df:f4:dc:6c:c4:19:9a:3e:41:c3:9c:ad:4b:5c:95:
cc:2a:f7:99:9e:dc:48:cb:4b:be:d1:ce:91:1d:1d:ab:54:03:
b1:e5:1c:29:87:f5:0a:cf:67:8f:72:0e:6a:2d:55:90:7f:6b:
bc:e0:db:98:cd:e7:e1:c1:37:65:f6:e8:2b:3c:6c:41:af:98:
7c:15:78:3d:b3:86:a3:1c:fe:ce:a0:22:d4:30:b7:d4:f2:95:
08:c4:ea:9a:e0:48:ac:83:5b:a1:b9:2a:f8:68:8d:62:e2:f4:
36:a6:03:87:b9:f0:c9:98:2d:6c:39:52:b6:02:22:18:0a:d7:
fd:9d:da:cf:85:3f:90:35:19:3d:40:5c:90:8d:60:8b:f7:be:
9a:12:94:d2:88:54:b7:09:50:93:be:86:1c:99:fe:b5:23:29:
44:a7:8c:39:7e:61:e1:14:ae:11:d5:17:28:ec:52:5f:98:2e:
50:4c:68:41:b7:b8:db:ab:7e:f5:0f:ad:59:6b:96:23:b3:88:
11:24:0e:43:84:62:0a:74:81:66:e5:1c:71:5c:49:22:97:51:
34:07:bd:83:c6:7d:e9:cf:e2:04:9c:69:92:cc:55:9e:e2:01:
4c:54:c8:21:2c:1c:69:f4:4b:bc:ac:e3:cf:93:c2:45:8c:a7:
2f:50:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:13 2025 by rpki-client