Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: 56RR6yMtx+MjRq0bBhC6wKcUzqF/YUJsscD0j9/8sH8=
Subject key identifier: 23:AB:58:CD:F9:83:E8:A7:3C:7B:4A:AB:78:E0:22:37:A0:92:BF:B2
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 0198D6CD7DE46108C7FD8A5B776F66F5A4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 135B
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: 3E8UkLe95RwTMxJ4J4RHyBuoD9isxBU0h3HmbIk1mgs=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7d:e4:61:08:c7:fd:8a:5b:77:6f:66:f5:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=23ab58cdf983e8a73c7b4aab78e02237a092bfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:f9:b5:89:bd:80:81:53:73:1f:05:c1:b2:
01:c5:be:f3:f2:3e:25:b7:82:dc:fd:d6:29:a0:8e:
f5:a7:c6:3d:0b:c6:7c:90:78:7a:e1:df:48:b9:92:
28:cf:c4:a1:b5:3b:57:80:64:81:4c:76:cb:6b:d4:
ec:b7:1e:be:30:a0:ef:ef:ac:f3:6c:52:79:43:5d:
d2:da:86:33:9e:88:1a:39:9b:85:4f:f3:3a:04:f1:
04:00:58:3f:b3:77:6f:e2:4e:6c:21:90:eb:34:3e:
8b:22:1e:89:8a:7f:b3:44:49:46:f9:73:30:37:0b:
16:37:14:6a:35:bf:8a:95:c5:2d:a5:16:41:1a:15:
9b:61:57:30:ab:ea:36:30:52:8e:3b:aa:e1:32:ef:
3c:b5:ca:88:e9:5f:ad:a6:d6:0f:8f:1f:81:1c:20:
a2:c7:c4:24:d2:e2:f9:6e:c1:73:b6:cb:f8:aa:64:
92:58:23:a1:a6:db:f6:8a:94:03:f6:ed:e1:dc:bb:
40:9c:34:0c:e8:de:31:8a:b2:a2:e3:90:da:cd:27:
b2:02:c4:c2:c3:c2:c5:74:df:3c:dd:9c:7c:13:ec:
44:3e:7b:e5:d0:48:81:c0:c7:df:f9:a0:d6:22:f9:
20:fe:61:44:59:0d:74:9c:23:e4:38:77:6f:c0:21:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:58:CD:F9:83:E8:A7:3C:7B:4A:AB:78:E0:22:37:A0:92:BF:B2
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:44:5c:26:9e:c6:cd:10:be:8f:99:e1:bb:fd:66:64:25:
f7:83:1c:fb:23:46:88:5c:0f:34:6e:4a:c8:59:8b:4b:9d:23:
ef:97:06:dd:db:b1:48:81:9f:b5:78:75:01:b5:06:2f:79:55:
e8:f4:8e:58:e3:3a:74:50:48:7d:4c:17:dc:f4:d1:32:1e:58:
95:a7:8f:c7:bd:41:06:e1:ce:e8:09:39:a3:e1:20:eb:69:e9:
4c:66:c6:ca:c0:b7:75:be:00:a0:d4:95:c0:1e:35:ea:86:e1:
26:0f:88:04:e0:99:b6:58:05:62:b9:74:25:3a:e9:93:af:4f:
e6:ff:c8:e6:13:64:b9:cf:3b:39:6b:05:7a:b8:79:54:58:b5:
1b:52:54:c6:a2:25:ea:83:7d:ca:09:be:3f:73:5a:3d:0f:fb:
0f:ea:b1:ff:e8:03:2a:7c:ea:83:1a:b7:04:7a:b2:6b:d6:e3:
fb:3c:98:38:03:7e:a8:3b:d3:58:46:73:73:5f:b2:9c:ac:b9:
8a:8d:f1:ec:f0:6e:40:c0:b5:65:0f:b2:7e:33:a9:b5:d0:97:
72:25:b8:e6:e7:8f:10:b5:bb:f0:a5:ce:38:b0:db:95:73:c6:
8b:7e:b0:27:21:fd:21:ce:a3:89:ab:4e:5b:4e:64:76:54:5f:
ba:28:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:03 2025 by rpki-client