Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: Uiqzbje9fKXm7mzE2UinOp+4Dy3rPKUs4/fblav60/k=
Subject key identifier: 16:66:D9:5B:0B:75:ED:45:15:49:10:3B:C9:83:C4:90:94:43:E8:9B
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 0197B7EA24AE0230140EEDE091C7BFD1A8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 05C4
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: ITQMFxKQ+4qAKZ3CS6NBkgSE1/JfSURgeKdOOZNOsx8=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:24:ae:02:30:14:0e:ed:e0:91:c7:bf:d1:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=1666d95b0b75ed451549103bc983c4909443e89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:bf:f4:33:be:78:41:85:7e:76:22:89:47:
e9:62:68:50:4c:b0:00:c7:a0:2a:4f:4c:f9:a0:58:
4d:cf:88:69:47:39:fa:4a:10:69:40:c6:26:54:f8:
01:6b:8f:cf:f5:63:ca:97:28:c0:5b:4d:dc:59:ce:
dd:51:00:95:89:bb:17:ad:86:e1:05:77:a4:f7:5a:
52:56:69:e2:e5:cd:eb:34:57:37:f2:ce:4b:4b:ad:
b2:6c:37:4b:11:d4:2a:5a:1b:a3:63:60:dd:f4:07:
43:c9:90:df:17:7e:1e:15:3e:b5:50:0d:f4:d1:ad:
85:32:1d:f3:31:d2:9b:59:2e:55:88:91:78:2e:8f:
1d:b2:bf:e8:6e:0d:fa:6b:36:4c:9e:f1:f8:41:6f:
88:dd:3b:7c:df:18:80:a9:fb:86:07:6f:b7:b5:0e:
c9:ce:68:65:01:00:15:34:fa:7c:e0:ba:3e:48:af:
87:80:48:11:08:48:9a:99:de:1c:10:8a:7e:af:73:
f4:d4:52:24:a2:3c:92:94:7d:9d:eb:90:8a:c5:3d:
65:06:ec:14:1e:54:53:e1:86:d7:4d:15:10:08:14:
36:b4:c1:14:20:65:b5:de:e2:69:2f:6e:92:88:70:
ae:3f:7a:9e:1b:18:f9:18:29:5b:5a:5a:d8:18:13:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:D9:5B:0B:75:ED:45:15:49:10:3B:C9:83:C4:90:94:43:E8:9B
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:b9:85:a1:b2:63:3b:10:ea:d5:de:0f:1e:d2:0e:17:0b:
1b:79:23:b5:d2:84:51:b3:a1:61:aa:ff:92:24:4b:60:cc:8f:
c7:ab:4a:55:bd:5c:56:bd:36:90:7d:bd:c5:0c:c7:61:01:13:
99:3c:e0:4b:a8:52:b3:67:58:54:16:58:c6:ba:3a:da:0f:7d:
05:65:24:0d:4d:bd:ed:7d:e2:f0:f0:1c:d5:63:16:33:2f:f9:
d0:8e:be:99:4f:a0:aa:e4:60:02:77:ae:09:c9:4e:40:b0:40:
95:7e:9f:c3:1e:93:19:71:8c:49:b9:74:83:f2:e6:28:34:d9:
0f:39:80:ff:dc:da:b7:69:66:49:cf:e2:d5:2a:65:9c:7b:52:
3a:ba:fe:d5:8b:77:c9:c2:9d:c2:6c:54:5a:8e:3f:25:9a:cd:
f0:57:2a:fc:23:81:5f:54:a6:c8:47:88:49:98:fb:69:ec:31:
ff:97:19:93:46:9e:d6:d3:2b:e6:35:f9:3a:43:2d:d5:13:86:
c2:c4:25:a4:ce:9f:88:3a:dd:17:1a:0e:35:91:87:98:53:59:
fc:40:ab:e0:f7:2a:1c:19:b2:2f:4e:26:a6:6a:34:d4:32:93:
c1:05:89:be:13:7e:ca:d9:7a:ed:8d:c1:02:42:48:ad:78:ee:
29:41:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:14 2025 by rpki-client