Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: Z66DLSLOkc3CNTe5aVmpgPJbrQ/JLtLFik05GG4Ucfo=
Subject key identifier: BA:4D:E5:97:5E:A5:38:AD:5D:FA:BC:39:20:12:87:60:41:59:7F:A1
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 0197B70EC8DEB78F238C479E011DAF09B000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0D39
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: kPEn3Tm2VbgBm8jMIJtTsHYpg1mX9oDI1tAX6N2HP+8=)
2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c8:de:b7:8f:23:8c:47:9e:01:1d:af:09:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=ba4de5975ea538ad5dfabc392012876041597fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:9a:d2:e2:56:45:69:d0:13:e8:8d:6c:de:
bc:7d:f6:4b:5b:c9:57:92:f6:6c:81:c9:49:ef:c4:
b5:a7:6d:81:be:b6:4d:56:f0:d6:47:31:d7:4c:d9:
15:27:72:ee:5d:73:a9:c7:bf:70:03:fc:0b:e9:76:
49:2b:62:4a:9f:26:bb:57:df:9e:1c:f7:f6:eb:9a:
81:ad:81:72:4e:fd:80:61:c5:8d:c1:76:f4:66:11:
d0:f2:f3:21:1d:f2:04:46:c7:ec:89:84:e2:6c:4c:
bb:52:49:b2:f1:31:e7:c7:ce:8c:d6:07:ed:a0:d8:
fc:f7:ee:d2:27:84:16:8b:09:27:1d:09:d1:24:e8:
66:58:b6:09:7d:c1:f2:61:0b:09:6e:23:52:fd:b0:
2a:77:eb:79:e0:42:45:e9:2a:a4:a7:7f:e8:63:04:
a6:df:ba:90:ad:64:f4:87:66:57:f3:b0:f0:a5:a9:
87:77:da:95:d3:73:a0:d2:6b:31:4f:7b:4e:74:d3:
7b:48:c8:74:af:ef:bd:16:51:f0:c7:b2:81:e6:bc:
a4:c9:17:ed:7f:01:64:9d:e6:58:3e:6a:7e:36:55:
73:9a:3c:f9:79:43:c6:27:99:62:40:53:2b:1b:43:
5c:18:24:9a:ca:01:16:41:ab:b3:c2:ec:6d:05:ff:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:E5:97:5E:A5:38:AD:5D:FA:BC:39:20:12:87:60:41:59:7F:A1
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:96:dc:f4:7c:35:e2:02:c8:ad:53:5f:51:2e:95:85:52:
01:f4:34:af:49:71:d1:83:d1:29:3f:bf:28:ef:ac:61:a3:a2:
1c:61:c5:99:bc:59:40:d4:33:1c:22:82:cb:f3:97:11:f5:45:
24:e4:0b:78:65:f7:0f:8f:5a:8f:44:d4:68:da:3e:12:68:57:
d9:cf:33:e6:ca:c4:cd:01:dd:1b:5a:fd:d8:c2:5b:ed:34:c3:
25:d8:4d:1e:8d:87:59:a4:bd:2f:f6:5c:1b:27:21:c0:fd:e2:
6f:e9:4b:8c:d4:d3:b0:02:b5:df:13:7e:55:d3:62:d3:1e:65:
a9:c8:e3:09:94:c2:33:04:fd:f6:d6:d1:c5:70:ac:4c:14:a1:
23:8b:91:d5:89:68:d4:c0:46:3c:5a:9f:26:74:02:7a:03:00:
a3:2e:2a:a1:a4:f2:b7:fc:5f:9f:af:47:26:37:9d:da:86:19:
0d:27:73:51:76:56:cc:29:4d:84:28:c6:a9:e6:ca:b0:f4:99:
20:23:29:1c:75:0b:fe:88:e7:99:5a:e5:13:de:35:5f:da:6d:
dc:ee:aa:60:08:59:8d:94:63:26:cf:a0:91:2e:6f:31:81:9f:
1b:89:3f:df:22:b6:9d:00:56:2c:55:49:20:5e:c2:2d:53:4d:
92:a6:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:00 2025 by rpki-client