Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: Ve8eF3sVglx47y8/UWm9sbRogq8zY698UB/Ftlk7woo=
Subject key identifier: 58:72:94:76:3E:31:E2:36:0E:05:B1:3A:11:39:D5:9D:7A:8E:37:39
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 0197B5FC4A041113D0176FA95D5C19A34A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 0323
Signing time: Sat 28 Jun 2025 10:01:39 +0000
Manifest this update: Sat 28 Jun 2025 10:01:39 +0000
Manifest next update: Sun 29 Jun 2025 10:01:39 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: Qs7VktR5vFhYhkkq17vk8hgUVItAR6C+ysFctCNayWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4a:04:11:13:d0:17:6f:a9:5d:5c:19:a3:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Jun 28 10:01:39 2025 GMT
Not After : Jun 29 10:01:39 2025 GMT
Subject: CN=587294763e31e2360e05b13a1139d59d7a8e3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:15:f0:15:5d:11:37:c1:71:0e:f0:8c:aa:
28:19:3c:0b:be:5b:23:ba:e1:77:66:55:4a:c3:2b:
4f:ad:03:d2:58:0a:cb:99:b6:da:3e:79:80:30:2d:
8b:07:58:4e:3b:3e:3e:07:d4:d7:66:fe:84:60:58:
99:71:93:ba:a9:be:fe:ac:3e:d8:57:64:fd:e3:8a:
60:3b:1f:37:4e:7b:3f:40:f7:7e:e1:62:46:30:db:
a1:61:c2:8b:fe:c7:ee:4a:2b:35:dd:13:5a:fa:63:
bb:2b:cb:cb:7d:dd:d0:52:35:b5:bf:69:b2:3c:9d:
c5:ea:06:23:f2:68:27:00:c3:e6:6c:e5:02:41:ba:
58:48:52:e1:2d:25:9b:e9:85:b6:b6:dc:37:91:90:
6c:e5:47:20:e1:7c:d9:d6:e7:92:9f:cd:58:09:0e:
92:c6:c1:14:fc:30:ed:bc:d5:8a:8c:4f:b2:20:c0:
96:a8:ec:a4:04:74:e0:b5:9b:e7:cf:15:e1:06:9c:
d5:f6:93:77:44:7e:b6:87:c4:42:03:09:81:74:52:
fd:9f:03:ae:64:49:b5:d5:b3:e1:f5:53:ef:52:7d:
d9:5c:ae:ce:31:08:06:2d:e9:f1:7f:27:2f:fd:b0:
0e:d8:04:2d:30:d4:48:33:76:89:14:9d:70:61:bf:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:94:76:3E:31:E2:36:0E:05:B1:3A:11:39:D5:9D:7A:8E:37:39
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:50:a8:79:53:79:88:62:39:a9:9d:25:9a:44:a6:c3:9d:
57:d8:a8:49:50:74:15:09:e3:27:cc:a2:cb:5c:a5:d1:b4:4c:
37:d9:79:54:ff:0e:80:2b:0e:c5:98:02:3c:e3:68:38:bc:2a:
7d:6f:86:88:4b:d6:2e:51:95:60:1d:59:e0:cd:48:35:8e:b8:
d8:22:02:4c:92:4d:fa:7a:51:b6:a4:cd:5f:3e:30:36:35:f6:
a5:cb:48:b6:86:30:6a:90:a8:ba:c3:dd:67:1f:51:4a:4a:dc:
3e:ea:1a:c2:46:b1:d4:8f:81:32:15:ed:d9:63:3d:35:f1:a0:
f3:e0:42:1d:14:c8:d8:15:0f:32:85:51:55:71:96:2b:2e:12:
22:31:c4:5d:52:83:66:48:f4:fa:bf:75:e5:a7:43:42:c6:b6:
01:9a:6c:d4:78:14:bc:b8:03:22:80:e5:ea:be:5a:1b:4e:6d:
a3:46:7f:7e:67:48:e5:51:38:82:26:a7:62:3d:2c:5d:0f:f3:
71:45:66:20:2d:35:48:c4:01:37:10:6d:86:7a:8e:e3:f3:14:
d2:f3:4a:53:69:81:47:46:a1:84:70:18:46:8c:55:f8:65:4b:
c9:44:25:76:56:40:f9:49:a9:8b:76:52:a9:3f:f5:a3:9a:e8:
38:1b:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:50 2025 by rpki-client