Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: 1mkjAWASjNNbbDoOIcE1z+QOAjNyLqM7T/VIihCsn2Y=
Subject key identifier: FD:C3:17:11:3F:2E:22:E0:D7:0A:BF:1D:53:D0:82:C0:73:92:6D:1A
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 0197B77CA227680B19727472C1006DCCC0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: JffPDEHGOWUl06DI+tPM/ydcRinGTTezIXmK+bOcET8=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a2:27:68:0b:19:72:74:72:c1:00:6d:cc:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=fdc317113f2e22e0d70abf1d53d082c073926d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:e1:3d:1d:e7:02:e5:08:19:4e:54:02:7c:
36:fc:72:61:6b:82:82:fb:56:11:c9:a9:b3:77:74:
5f:2c:d5:28:99:e8:ae:ec:02:76:b5:2c:71:2f:79:
ae:9b:d2:2b:b6:7f:fe:c4:bc:be:bb:dc:29:fb:93:
14:f4:23:9c:41:49:b2:19:82:84:9d:c1:ed:e9:28:
42:07:55:61:d2:b6:f4:f6:85:1c:18:27:ca:ba:f0:
77:d4:e3:95:05:ac:73:b8:f6:8c:2d:7c:8a:68:cf:
cc:44:38:10:85:03:d8:38:a8:91:19:3d:bf:75:64:
af:45:1e:c9:c7:6f:3e:35:7c:ad:91:87:0d:79:f6:
5e:4a:ec:34:f9:d2:af:99:26:15:32:dd:cd:da:cb:
64:47:7c:7c:9a:d3:eb:74:8a:ff:1d:2b:a4:08:1b:
64:df:c2:fa:68:30:ce:af:89:d5:e4:29:c7:df:40:
14:a4:ed:d4:aa:aa:4c:33:47:70:f7:e5:6d:75:78:
c0:e4:88:82:26:6a:7d:72:88:e2:91:21:e0:27:dc:
12:30:ad:a4:52:3e:98:03:5b:58:5c:a7:f4:2f:1f:
a3:27:94:2c:0f:fd:a1:21:90:84:11:a8:c9:aa:b5:
6a:0d:b8:74:ef:97:de:b6:dd:66:9a:3f:96:a6:9b:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:17:11:3F:2E:22:E0:D7:0A:BF:1D:53:D0:82:C0:73:92:6D:1A
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:d7:bb:55:9a:11:7e:1c:1e:12:b7:7a:f1:31:c2:e7:f9:
4c:10:6e:1b:10:bb:4e:22:6c:dd:b5:b2:dd:cb:1a:b7:1a:f2:
1b:53:a0:a2:e8:2e:13:c0:e4:56:7c:80:80:38:ff:1c:3d:96:
6f:e0:96:22:67:7b:17:2d:01:b8:a3:4f:1e:f3:7f:b5:e9:11:
bc:64:b3:9b:34:28:31:f4:db:cd:20:50:01:3c:7f:78:60:f3:
ca:bd:0b:95:63:d2:49:d3:5d:50:20:39:c3:a8:d4:00:d0:0f:
55:24:ff:9f:15:32:19:ec:20:cf:0d:ae:ea:f1:79:17:8b:ca:
22:28:bf:46:3c:23:5d:6c:02:c4:5c:0a:bf:e1:3a:2f:2f:ce:
91:89:32:92:13:96:54:a7:d3:2b:33:d2:75:03:70:06:42:7e:
85:1c:c3:88:12:af:d5:8e:cd:5b:8f:95:78:ca:f3:da:a1:51:
98:f2:1d:19:26:60:71:01:13:16:7f:50:63:b5:25:53:dd:4e:
fb:96:ca:42:1b:e8:88:5a:42:e8:b5:7e:f0:2c:cd:c8:e8:ae:
dc:bf:5e:09:d4:c2:f4:45:ac:c1:a2:33:a1:b4:14:36:1e:58:
d0:b2:ae:e9:0e:67:62:dd:ec:71:c6:e0:39:90:75:b0:d8:90:
f0:ed:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:10 2025 by rpki-client