Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: uQvYjjxB/v0drNyfTt524+Cz4Jg71tnpwTe0MJJjtTI=
Subject key identifier: 8F:7A:1A:28:43:AB:22:32:1B:AC:DA:5A:0C:1E:87:74:38:18:DF:F7
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 0197BA7D74429D0400B28732874D692DBA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 07:01:13 +0000
Manifest this update: Sun 29 Jun 2025 07:01:13 +0000
Manifest next update: Mon 30 Jun 2025 07:01:13 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: h7ijFwnXM2iO37d6H3se38lLVNLgu48imHAPFyEp+hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:74:42:9d:04:00:b2:87:32:87:4d:69:2d:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Jun 29 07:01:13 2025 GMT
Not After : Jun 30 07:01:13 2025 GMT
Subject: CN=8f7a1a2843ab22321bacda5a0c1e87743818dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:61:c8:8d:b0:0a:68:99:0f:12:93:37:0a:
41:a3:59:4d:fb:07:d0:e6:ee:25:04:e6:b8:21:fe:
1e:28:e6:aa:69:d9:b0:45:50:a6:4e:2d:70:7a:6c:
77:fd:41:bf:61:ba:ac:c2:05:b8:f7:cf:08:62:f2:
ec:78:91:87:7a:3a:e8:d6:af:58:93:2b:00:8b:e2:
c8:3d:e6:fe:58:6e:97:1e:a4:60:c6:f8:c0:d9:88:
c8:e7:83:b9:92:58:76:17:f4:ea:7e:0f:6b:96:4a:
49:56:85:f4:40:8a:8c:5f:c4:04:39:a6:1c:bc:29:
fd:3e:a8:d1:4f:33:0b:32:e3:be:e4:63:7f:0c:3b:
b6:e2:87:7d:cf:94:c0:2c:35:09:aa:5b:69:0e:88:
26:fe:d9:d7:fd:00:57:7f:48:65:55:08:8b:1c:7f:
39:6d:ec:10:c5:cb:78:b4:93:26:19:e0:56:47:a5:
e3:89:ee:68:30:5d:52:cd:5f:d1:5f:40:66:0c:e6:
70:fc:a3:b6:0c:b1:44:c1:58:8d:89:2b:17:e4:4e:
ba:00:8d:4f:59:f6:70:58:ae:c2:de:67:d0:20:ba:
61:bf:c0:d3:59:c9:74:66:46:79:63:b1:90:f1:7a:
61:74:14:a8:f3:05:47:e0:af:48:ae:20:c8:7e:a9:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:1A:28:43:AB:22:32:1B:AC:DA:5A:0C:1E:87:74:38:18:DF:F7
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5e:b6:7e:bd:68:41:86:a9:d1:e4:fd:81:5a:5d:2b:c3:ed:
96:a5:20:db:da:67:2b:0c:73:87:5d:6c:43:9a:73:7c:77:7d:
4d:24:52:7d:10:10:ee:aa:5a:8c:36:fb:2c:7f:05:2e:73:22:
ca:f9:47:55:68:5f:ef:35:7e:94:cb:13:c4:f5:f3:d9:99:77:
48:5f:e7:ae:03:68:92:de:c0:fe:5b:80:d9:bd:d7:bd:da:d2:
66:21:6f:54:e8:61:e3:2f:3a:f4:da:e4:8d:12:4e:de:ce:32:
38:de:3d:2a:1c:ae:a4:1f:6e:bb:19:f6:5c:57:cc:4b:e4:93:
a0:1b:34:e4:68:02:8f:b2:2e:a8:d9:f3:f8:db:32:ae:5a:67:
66:e9:57:f7:67:ee:12:73:a6:1b:99:4f:f9:78:ab:30:0c:d3:
f2:7c:d4:3d:75:23:e1:98:80:6d:2d:9b:29:e5:8a:4d:5f:f5:
c3:91:74:87:d1:73:8b:41:b3:03:04:e2:75:18:01:67:07:8b:
17:00:d8:23:3d:23:11:45:b6:56:32:c7:fd:25:66:f4:48:e6:
9d:db:f2:9b:54:8c:cf:2b:9d:76:8f:87:a1:ae:f9:00:8c:6d:
f9:a9:a4:f0:ee:ac:25:0d:d2:23:74:c1:d7:6a:f7:d3:d7:91:
df:43:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:32 2025 by rpki-client