Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: 8YjHjlh/XxZ8Y/Ugx5Qb+jqiP6v/B4Z8oP4rXaq4MBY=
Subject key identifier: AB:69:F3:C8:FB:16:1A:A6:89:44:C2:26:C1:82:4F:57:38:AC:C1:5A
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0198D583F9A881A025E57AFBD03CCFDE127E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0943
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: OBPHSiKXyTjyWBqg2Ooq588IUqJXLATUqQica4nhfm4=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f9:a8:81:a0:25:e5:7a:fb:d0:3c:cf:de:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=ab69f3c8fb161aa68944c226c1824f5738acc15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:71:a4:ef:0b:e5:98:d1:4b:f2:c9:c4:58:
c2:86:d9:2c:3d:b3:eb:49:7c:2f:28:f5:dd:e3:55:
73:5b:54:f8:ce:56:6a:a1:ae:70:8e:03:fb:ba:bc:
43:3a:e7:77:87:85:75:58:32:8e:d6:1f:8f:7a:93:
d6:3a:f3:3b:4a:a4:c3:62:80:ce:1f:13:c8:3b:43:
f5:77:76:31:2d:56:a4:8e:c9:37:29:30:d2:d5:4c:
60:dc:89:07:9e:84:2f:61:56:a7:5c:b3:15:89:fa:
3c:be:2f:3f:d8:04:0b:7d:74:b2:c1:df:87:5e:9e:
28:2a:54:25:f5:c2:53:32:65:80:ba:63:a8:0f:55:
13:3e:a3:22:91:67:9a:76:9b:d7:a4:89:ca:5e:ad:
a4:de:66:de:9f:54:91:8d:de:c1:cd:21:7e:be:9f:
3a:cc:5f:af:44:7a:94:a8:ff:7e:ee:29:2d:c4:0a:
bb:7b:fa:1e:ac:8f:36:26:b1:ad:3c:5e:f7:a1:a9:
65:2d:77:5b:2c:d0:d5:0a:f1:d6:7f:5b:61:25:94:
30:06:da:83:8d:bf:ec:e9:56:fe:d9:d6:3a:26:6f:
e5:18:4b:c5:7c:75:76:4a:0e:e5:96:18:6c:ba:99:
b7:0c:7d:20:99:78:17:f9:61:bd:7e:c3:31:8f:dc:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:F3:C8:FB:16:1A:A6:89:44:C2:26:C1:82:4F:57:38:AC:C1:5A
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:8d:cd:51:03:31:27:cc:cc:66:b5:d7:56:6a:57:54:5c:
15:f4:fd:b3:44:31:dc:70:dd:75:3e:a4:5b:e2:11:cc:b6:ca:
12:d0:bb:70:c3:f2:c4:65:63:74:4b:68:ca:ff:5f:64:f3:4d:
e1:e9:93:3b:e7:a1:7e:51:1b:e5:34:15:80:68:1e:05:fd:4b:
f6:06:f1:b2:a3:e4:f7:05:21:a7:da:e3:62:6b:52:44:1e:e6:
7f:ed:29:38:fa:b8:79:96:9b:12:0b:c9:54:2c:9f:3c:72:04:
7c:a9:a4:50:48:6f:a3:ee:de:f5:91:a4:f8:d3:1c:c9:7d:50:
74:af:18:38:b5:e7:86:60:eb:e6:89:a8:eb:f6:3b:f1:de:06:
b2:b3:1d:d9:0e:60:bb:6e:d0:ec:d7:d6:91:92:90:2d:df:54:
a0:14:01:1c:63:2e:12:68:45:8b:42:a6:23:d1:4d:53:d2:ab:
0e:83:c1:03:9b:4e:31:0a:33:8c:19:bb:9f:16:49:1c:c6:68:
c4:b7:02:4d:06:4c:76:06:38:2f:90:1d:7a:bf:c8:08:01:b7:
12:fa:8a:d4:2b:31:d7:68:97:8c:36:1d:a8:99:83:93:3a:04:
fd:21:5f:01:8a:da:a3:8d:ea:12:8b:5d:a4:6d:35:ee:2c:00:
73:05:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:09 2025 by rpki-client