Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: UxhAyEAmIdQ7xGxIneaEuTKIcJXlCnMBS68X+jjcLx8=
Subject key identifier: 8E:22:E3:5F:F2:D6:E4:BC:8C:D2:38:9A:63:F5:E7:D8:23:FB:A6:42
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 0197B70E9DBF50E2E08B0BA4E15408E83385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 1484
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: 8Li3m4ku22I2RX5e1nwrxSngaBvjX3YV3WOf/zfAps0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9d:bf:50:e2:e0:8b:0b:a4:e1:54:08:e8:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=8e22e35ff2d6e4bc8cd2389a63f5e7d823fba642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:33:03:d7:10:41:ae:d1:37:dd:fb:ab:4c:
63:e4:64:f0:1e:ac:86:59:59:e4:c1:9f:c7:74:13:
6a:63:4b:67:cf:6e:f6:3c:45:9d:29:9c:35:fa:d5:
65:4c:9e:b4:cd:bf:7c:0b:78:9b:72:dd:7a:af:ff:
5f:08:02:f9:f7:f8:97:e4:b4:7e:42:a1:75:4e:11:
62:7a:9a:58:fc:26:05:53:5f:30:ee:40:17:66:06:
06:37:42:bd:ab:dd:45:d7:f0:ba:a8:b7:eb:94:6f:
bc:12:6e:a4:60:b8:ba:66:8c:b3:16:25:37:08:62:
0b:50:ad:fe:4d:a8:54:c8:2d:fa:22:75:db:a7:69:
1d:41:6f:6a:c9:8c:82:44:d2:71:1b:0b:fe:be:9b:
52:c5:fb:9a:66:b4:93:a1:29:eb:bb:1b:cd:47:a5:
e2:81:e6:62:9c:a1:39:d8:f7:7f:04:aa:a7:5b:74:
1d:55:e9:52:96:a9:4e:b5:3c:db:dd:47:40:f1:4a:
e8:5b:c8:23:a9:96:d5:43:69:05:73:b5:95:44:3a:
98:bb:0f:18:7f:05:c3:27:f0:cd:4c:e0:c9:5a:35:
76:fb:52:04:15:26:a1:ca:9a:48:bd:76:15:cd:83:
4f:f1:f7:18:35:99:57:6a:bd:9e:29:8b:61:fa:11:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:E3:5F:F2:D6:E4:BC:8C:D2:38:9A:63:F5:E7:D8:23:FB:A6:42
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:13:9e:a7:96:79:59:2f:05:97:1b:bf:08:af:74:d2:99:
77:43:a0:e4:f8:11:10:5f:9e:2e:51:ad:eb:6f:d4:97:9c:bf:
46:2d:dc:22:14:6d:e5:bd:d1:08:38:7f:29:77:51:ea:bd:87:
72:5e:15:f4:4b:1f:77:fd:d8:1f:2d:bc:93:74:97:a8:8e:1e:
7f:0d:53:2e:d4:08:2b:25:f8:48:6d:db:81:d3:55:da:1d:ce:
3c:86:30:4e:21:59:35:1a:cd:3c:55:8b:19:9b:35:1d:5f:7e:
e9:3a:15:2c:c4:00:a9:6f:fb:43:37:c0:02:85:c5:fe:b4:f1:
1d:ff:ac:b5:ce:0d:3c:a4:c9:f4:8d:8e:d7:69:5c:15:e2:89:
c5:55:f9:95:34:3e:d0:82:42:dd:f5:3a:30:79:77:0d:a7:bb:
07:f0:52:00:66:de:b6:58:96:50:3b:ca:65:e3:a8:d0:36:3b:
4f:1b:1c:e1:9a:b0:e3:84:1b:ea:11:84:5f:9c:6f:bc:60:fb:
5e:74:97:70:ba:d9:aa:99:5d:77:3f:7d:ba:3f:0d:ec:5b:0f:
56:0c:71:52:04:a9:a2:a5:7f:d0:86:84:6f:0a:87:1a:27:73:
53:22:5d:87:e2:77:0b:47:df:46:85:17:76:88:c2:87:dd:41:
1e:cd:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:45 2025 by rpki-client