Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: Ga/WraP8K6onNZTHllPjSlME0N1EjLiyuxWfjPZu5Qo=
Subject key identifier: 35:11:8D:98:6C:18:A7:70:45:96:2F:F5:90:92:C1:28:15:8B:68:77
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 0198D8BD28A5F6B5DA87B5F4D639BB787CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0DCF
Signing time: Sat 23 Aug 2025 21:02:11 +0000
Manifest this update: Sat 23 Aug 2025 21:02:11 +0000
Manifest next update: Sun 24 Aug 2025 21:02:11 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: cXtLVfn/GkdqyzLR5qFrMmFTNkDuEV3XcqBviaFByOs=)
2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:28:a5:f6:b5:da:87:b5:f4:d6:39:bb:78:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Aug 23 21:02:11 2025 GMT
Not After : Aug 24 21:02:11 2025 GMT
Subject: CN=35118d986c18a77045962ff59092c128158b6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:67:47:9b:c6:ed:f9:f5:9c:98:50:f4:ac:
85:ea:96:f4:eb:e7:04:ef:98:50:bb:5f:5b:fa:7a:
65:0a:f8:af:df:d6:af:e7:f0:60:0e:1f:7f:93:8c:
7c:14:64:ad:f8:79:51:3e:21:6d:a1:97:c4:fe:c1:
6f:6e:ec:be:92:ce:92:76:3a:54:04:9f:e0:0d:b6:
fc:95:cf:59:9a:23:3a:9c:1c:f5:52:16:d4:ca:66:
eb:2e:16:c9:88:0f:6e:9e:ab:53:04:42:d5:42:57:
2c:77:f4:50:25:d6:ac:e3:12:34:fa:09:b8:9a:91:
95:c4:15:51:63:a1:68:94:ac:03:df:91:8b:ad:8f:
53:64:0c:b9:a6:ce:1b:a9:ef:4d:db:2e:4c:1a:ef:
9a:a6:6a:3f:08:e3:bd:26:c6:4d:55:2d:96:2c:da:
71:65:84:94:2e:02:74:2e:c7:25:3e:36:d6:a0:bf:
4f:66:80:a9:a4:15:9c:1a:a4:b8:5f:39:af:9f:c6:
c9:b0:82:1f:3a:77:f9:b1:90:87:8b:63:fc:66:ec:
ec:89:88:95:c7:a9:ef:9c:c1:ad:23:a5:0c:1c:85:
43:86:7c:aa:b9:f4:48:25:ea:3c:e9:b4:71:79:4e:
8a:cf:a8:5b:92:27:d9:ea:ba:a7:80:03:7e:9f:c4:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:11:8D:98:6C:18:A7:70:45:96:2F:F5:90:92:C1:28:15:8B:68:77
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bf:60:f7:ac:8a:cc:89:90:e8:44:40:95:bb:26:90:ad:e1:
05:60:06:5a:7a:24:81:4c:28:9c:a0:ef:9b:25:c2:6d:07:72:
1c:0f:a3:da:e3:46:bf:5c:48:d5:d5:33:7e:21:b3:07:dc:d3:
4d:4d:00:15:f3:b6:d3:cf:4e:3e:cc:08:df:d0:c8:4b:9b:5d:
7c:12:71:d7:12:20:4a:03:72:4a:01:44:89:f5:e6:72:cb:be:
b3:4f:ab:45:48:1d:27:e7:5b:dc:43:ad:e3:54:81:cf:fc:ad:
27:cb:4b:ad:0f:fe:0d:47:8f:34:4b:b6:17:24:a3:11:29:c3:
16:6a:59:44:48:f6:cb:f6:b4:33:30:f7:77:94:f3:26:32:0f:
07:a7:14:bf:d8:bc:44:d7:b8:93:7c:ed:44:70:24:39:52:b0:
c1:0a:c2:e0:a2:be:7f:45:ac:f8:2a:b3:77:b9:fd:ef:e0:86:
77:b6:d1:a6:11:0d:4b:db:32:f0:11:44:49:86:9e:e8:c5:71:
c4:db:a3:70:68:8b:34:16:22:9a:73:28:db:ee:ba:68:f5:09:
b5:64:69:f8:2c:ab:b5:c2:77:d1:28:27:02:fc:5f:63:06:aa:
7c:09:b8:11:f8:55:d0:45:e3:56:32:b8:6e:27:a0:12:6d:68:
00:89:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:17 2025 by rpki-client