Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: iyMknlQVnOVF2ne+D0vs4SySmoEEguP0yXLHUQlm1C8=
Subject key identifier: 3F:56:65:30:85:CD:E3:4B:5A:B9:84:2F:D1:E4:C3:44:2A:9E:42:B6
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 0197B77C739F2B405E1CE8148E575DD039B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: Mnc8c0efCSXML11D8OdiHK0l0CqaelhZl856tKFcnNw=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:73:9f:2b:40:5e:1c:e8:14:8e:57:5d:d0:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=3f56653085cde34b5ab9842fd1e4c3442a9e42b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:ae:71:e5:7e:c5:61:c9:a0:c5:09:39:f7:
9a:7b:3c:bf:e1:e1:41:05:e4:48:c1:f7:74:3b:b4:
c0:18:a7:43:e2:5b:c8:a6:89:36:50:5a:50:61:ea:
8a:15:bf:e9:9a:ed:c3:41:0f:d8:db:47:e6:58:bc:
f8:05:49:bb:f4:8d:04:2c:61:77:9a:0a:a3:36:9a:
56:b1:af:f4:ae:8f:8a:bb:26:45:30:36:f2:15:62:
90:3c:51:93:b2:0b:12:96:64:9b:b1:d3:93:1d:58:
9f:12:a6:34:45:fe:c6:ae:31:e1:b6:05:62:9f:f5:
33:d7:d5:d0:7b:7f:2d:99:b8:16:12:ef:4f:a0:56:
4c:9f:b5:e8:2e:df:20:42:c7:91:a0:73:68:12:7f:
a2:89:8b:29:7a:a1:87:42:f1:67:87:68:71:39:bb:
41:fe:17:63:49:94:62:95:92:9b:eb:70:b0:03:9f:
b2:60:92:50:88:e7:f1:e7:8a:be:71:8c:ef:0b:1e:
23:ff:19:b5:08:71:e1:b7:21:8f:a8:f4:49:25:a7:
12:ea:32:c6:83:2b:c3:cd:d6:07:3c:79:58:95:10:
ea:15:bc:3e:e3:17:cd:94:23:8a:8a:72:bc:e6:38:
d1:22:00:5b:95:4c:89:59:e5:04:e6:ca:e2:2c:a9:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:65:30:85:CD:E3:4B:5A:B9:84:2F:D1:E4:C3:44:2A:9E:42:B6
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:f6:28:63:cc:a6:07:0f:85:76:b5:a1:73:e1:91:a2:98:
37:4c:4e:5a:15:a9:3e:00:66:17:fd:0b:7b:e1:de:2a:1c:ed:
59:ce:3a:33:31:db:a4:72:c4:54:52:b5:12:f4:39:36:9e:dd:
ff:25:cb:5d:84:8b:46:f8:6e:b3:ab:0c:bf:fc:ab:6e:44:ca:
fe:ca:30:92:f7:6a:55:3a:01:92:0d:c3:79:53:43:6e:f2:de:
49:e9:67:d3:78:28:22:70:13:34:10:7f:26:ca:69:45:9e:a5:
3b:45:1f:80:b1:0b:8a:ed:1a:74:43:01:a3:66:e8:c9:b5:53:
a5:7c:0e:f4:47:7f:40:2f:ec:0c:57:70:4b:ad:03:b9:d7:76:
55:c0:a0:82:13:96:cc:73:fe:05:5e:02:c6:48:66:24:f0:a4:
2a:7c:dc:fd:45:93:a7:ff:fc:1d:d3:ba:24:72:74:8f:5e:cb:
9a:db:54:6c:c1:03:f1:31:69:8d:b1:8f:9e:83:88:f4:a2:7e:
1a:8b:19:2a:45:f2:24:91:27:23:27:ec:04:8c:48:a4:6c:6d:
1c:d4:ba:69:c0:5e:ac:4c:ac:01:15:a2:ea:de:17:f1:41:74:
8d:7e:18:c3:d3:12:16:19:a2:cc:45:92:57:be:1a:c5:d6:ef:
c6:7d:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:13 2025 by rpki-client