Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: 9T3IeY4hXm4WsEstaSpZ82LHwlCsp+chsWpoDRVx6PA=
Subject key identifier: 0C:A2:DA:BA:0E:51:53:AF:A5:39:BE:45:24:29:67:D5:EB:11:17:79
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0197B7B3422CFCB10F6891D096595EDA6F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 08AF
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: NiBxJvvMUSXPEN2zNNcMOTdSr7wKOdYYehYBMZRGkbs=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:42:2c:fc:b1:0f:68:91:d0:96:59:5e:da:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=0ca2daba0e5153afa539be45242967d5eb111779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:fa:ca:b0:2c:d8:2b:7f:b2:2b:55:f5:b6:
6d:9b:00:a0:98:b3:55:e2:ec:9d:dd:ef:a2:74:d8:
4a:e3:4f:60:09:f3:a1:2b:c9:43:f1:dc:af:8a:29:
be:42:9f:17:5b:88:11:87:3d:4f:0d:a5:96:03:a7:
9b:60:52:d1:ab:e7:33:23:9c:f1:ad:50:3d:b4:8b:
eb:ce:cd:90:72:b4:0b:96:2e:d1:ef:10:1f:08:4b:
35:b6:1e:c9:c5:d5:cd:b7:8d:32:ef:9d:e0:e6:4a:
5b:dd:26:25:5a:20:60:6b:25:83:fe:6c:c9:ae:8e:
0f:34:80:b5:d1:4e:e8:50:2f:d5:f8:bc:72:88:f5:
31:2b:6a:b1:bc:d6:f9:02:0d:1a:bc:92:a7:b4:da:
6f:4e:da:63:9a:fd:c3:15:52:d5:2f:c3:33:3c:00:
da:b4:12:c9:7e:bf:a8:52:21:27:83:da:d5:2d:46:
21:07:fa:06:74:db:97:ea:c7:22:c3:ac:63:f5:8d:
07:f5:77:f7:b6:43:0c:ff:f7:c9:58:f3:df:a9:64:
e3:b8:21:4f:99:89:b7:20:86:bf:34:96:6f:70:aa:
2d:7d:a4:b4:df:b8:46:80:63:b6:2c:54:ac:27:0c:
28:cf:04:af:cb:2b:7f:cd:32:d4:b9:d0:f5:3c:b0:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:DA:BA:0E:51:53:AF:A5:39:BE:45:24:29:67:D5:EB:11:17:79
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bc:13:dc:a0:2e:fe:19:2c:d4:a8:03:86:26:65:98:06:eb:
e4:97:5f:87:68:52:c8:9e:9a:10:c8:04:7c:07:12:50:84:e2:
b4:61:6e:0e:1f:2b:24:f3:e7:d7:41:e9:5e:8a:d9:56:6a:0a:
9d:7e:c3:a1:e0:31:4d:e4:11:84:85:7f:4e:18:5a:40:f8:80:
e5:f2:75:61:e4:a1:ba:0e:1f:1e:32:44:4f:6e:0c:b2:5d:21:
ed:f8:99:73:4b:ff:28:f5:3c:df:c1:8e:78:1c:e3:5e:29:b7:
b0:57:60:d2:9d:97:54:3c:f8:cc:78:01:e2:2d:da:be:8f:46:
b6:5c:93:09:58:87:0f:4d:4a:60:17:41:0f:34:f7:c1:aa:2a:
9e:36:8e:65:9f:8d:0c:2f:8d:0b:e9:a7:00:cc:32:29:98:ef:
f1:d6:4c:c5:a2:fe:94:03:9f:ee:24:95:7f:98:c0:3a:6c:b5:
af:34:e5:31:a2:d3:cd:51:3b:89:ae:b0:ce:11:c0:f9:00:27:
82:c4:42:38:f9:53:6c:ba:4c:bb:0f:70:ee:a0:d4:50:2b:59:
38:42:4b:1a:a2:33:0c:14:40:43:fb:7a:fd:5f:a4:a0:ca:08:
96:1e:ab:fe:4a:71:4d:75:11:44:64:2f:f8:48:86:e5:c1:80:
1a:a3:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:06 2025 by rpki-client