Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: wX5kYjUL7tAV1GsuArTDhB9XV1Ki6TuyLB0z3dGoark=
Subject key identifier: 42:A6:59:47:51:B7:EE:64:0F:5F:BB:ED:CF:EC:50:33:42:D2:D0:06
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 0198D47342A49A41BE6DBBBCC98E0F74A786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: KJCyphIYGXXrl4if8zh+zy30gTeWNl+xO1st5GWvdao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:42:a4:9a:41:be:6d:bb:bc:c9:8e:0f:74:a7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=42a6594751b7ee640f5fbbedcfec503342d2d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0d:73:25:28:f2:0d:22:87:da:31:82:bc:66:
d8:d1:49:b0:22:b0:f6:2b:af:63:4d:75:fe:0a:ca:
ca:34:ec:ad:cf:30:c9:6f:ac:b3:72:f0:39:a6:45:
b1:6d:69:5b:f0:cd:4a:a7:86:66:f1:98:42:88:98:
f4:dd:ab:a4:14:ee:38:3e:d6:49:9f:29:4b:3a:18:
52:df:ae:31:b1:5b:51:e8:2d:59:6a:58:d6:48:d5:
ad:0d:12:99:e9:2c:90:8c:90:a3:fc:4e:1f:13:dd:
65:6f:05:f2:61:26:07:9d:6b:51:28:27:fb:a5:ff:
26:86:7e:c1:12:c6:62:9b:b4:4a:ba:16:65:37:df:
2e:bd:51:e3:39:99:2c:ed:85:d4:5c:64:54:17:c4:
2d:f5:38:f3:81:54:98:8a:98:f8:8b:dd:d6:c2:66:
e5:d9:7f:bd:af:ba:ec:da:ca:eb:84:d8:b8:ab:18:
dd:7e:2e:bb:42:e4:0c:4e:ad:89:99:6c:7f:d7:41:
a1:bf:3e:94:58:24:e7:66:e3:2d:23:e5:e7:85:3d:
f4:3e:8f:9b:e3:9e:90:b8:6e:0a:5c:15:86:89:e5:
5a:0c:af:f1:21:a4:f8:16:0f:c5:74:b8:f7:84:39:
5e:ce:17:42:14:55:77:2a:ae:75:24:c2:f3:74:b7:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:59:47:51:B7:EE:64:0F:5F:BB:ED:CF:EC:50:33:42:D2:D0:06
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:b6:b6:28:ec:92:ab:3f:de:78:71:24:00:a6:02:a3:1e:
56:37:05:8e:37:89:5a:d0:cb:1a:0b:73:bb:62:85:b2:d8:0f:
50:1a:8e:e2:b5:e8:fc:c2:b9:5d:8b:66:7e:b2:a2:20:79:8b:
af:b8:c9:16:18:5b:8e:0e:bf:81:17:c8:bc:da:2c:c8:11:c9:
bb:0d:22:82:1a:4c:94:64:4f:d7:01:33:15:f2:b6:0e:ae:16:
34:c5:47:4e:99:40:fe:95:cb:48:cf:9f:c9:20:e8:ed:ee:e0:
21:69:13:12:f1:31:56:e4:c5:60:b7:74:60:8b:38:57:f1:c1:
b3:82:f6:81:5f:f0:6d:92:ba:75:88:e7:b8:21:e1:1b:38:61:
88:18:b7:f9:1f:c9:8c:a1:c5:a3:79:df:9a:b8:ea:b0:bf:24:
be:2f:98:d6:1c:6b:c1:b3:7c:8b:aa:73:3c:7d:d0:10:2a:6f:
c2:a3:d7:e3:11:35:a6:c2:2a:1e:2e:b3:1c:3d:e8:1f:33:0e:
e0:6c:4e:4c:95:e7:4c:44:d9:a0:37:5e:c9:56:ef:5d:f7:87:
05:f4:84:bb:38:f5:9f:de:c3:df:42:90:2e:d2:10:60:bb:49:
b0:19:d2:30:6c:a9:0d:e0:d9:f8:af:10:f4:2d:bc:b6:40:1e:
a7:ad:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:18 2025 by rpki-client