Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: Ic+JE6blJHeJdWQbFCUmN0Rxk6Bd78NzBlHhJa1NKLk=
Subject key identifier: BF:61:2F:CD:A7:7A:70:AC:80:50:37:33:68:77:15:CD:3C:1C:F3:29
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0197B77C1419BF62C16748E6E9A8C4F92C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 113C
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: SnhZf9J2aJU+SC9F//iB/hIhBWB2Hn6LojwrDLbiry8=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:14:19:bf:62:c1:67:48:e6:e9:a8:c4:f9:2c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=bf612fcda77a70ac80503733687715cd3c1cf329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:2b:47:41:46:5b:90:8e:b2:ae:a4:94:a3:
88:4f:be:e1:37:12:25:f6:e7:58:3f:5b:1f:50:97:
d7:fe:78:a0:35:e1:2c:f7:6a:72:66:2f:74:d9:cd:
ef:0e:a1:cd:e7:09:a3:7c:58:10:6c:32:41:e9:5f:
22:ca:66:c9:61:34:e6:4e:1f:e2:9a:f1:1c:c7:13:
b5:dc:ff:68:ec:ab:33:8c:c2:bc:de:3e:58:25:19:
29:d4:63:f8:3e:f3:21:bd:12:38:51:f0:2d:12:b9:
01:ae:da:78:e3:15:78:d5:31:16:ef:22:54:9c:26:
36:60:06:69:df:4b:1c:14:3b:d8:d0:37:4f:77:29:
87:85:65:c3:b0:d9:9e:23:93:0e:ef:b0:d4:45:94:
a1:0c:ed:db:e7:07:3f:a3:d9:bb:9e:72:3f:4c:0d:
5c:72:8c:07:75:6c:1c:c4:a3:e8:5e:5c:44:d8:9f:
6f:dd:50:20:0b:95:5c:c6:32:64:12:50:3a:ee:90:
4d:ba:a3:53:3b:76:04:be:57:61:d2:dc:63:2e:87:
f8:7d:ff:8e:d5:04:91:10:11:49:95:25:6c:e1:33:
5a:da:6e:9c:ce:f8:d0:3c:d0:4a:00:58:86:6c:70:
69:9e:ab:4e:a9:bf:5e:3e:ca:63:5c:d7:44:0c:8d:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:2F:CD:A7:7A:70:AC:80:50:37:33:68:77:15:CD:3C:1C:F3:29
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e7:67:b7:a7:32:cc:72:98:33:5b:d2:d2:45:7e:a4:6e:dd:
65:ba:4d:57:9e:98:85:50:63:e3:ef:b3:c1:d7:e3:d4:95:7d:
e2:99:95:c8:75:a2:88:73:20:80:df:d5:aa:d0:0f:58:30:e2:
70:79:1f:e0:59:69:cf:8f:98:25:d7:7f:68:11:c5:20:1f:b4:
c0:cc:d1:ce:2c:62:ce:47:4d:73:0a:65:8a:91:e5:b1:1a:16:
ed:36:15:1e:fb:d8:85:e8:80:bb:1c:70:8a:a1:81:1e:89:7b:
71:6c:a8:40:f6:fa:56:59:a1:c3:1d:1e:62:e4:85:22:67:92:
9f:9a:f0:77:c1:74:f1:da:fc:a0:b4:72:16:4e:e5:84:ff:78:
25:9d:4d:f8:db:9a:2b:80:17:37:e0:eb:54:c5:36:dd:be:94:
e7:49:6f:75:ce:28:d5:ce:61:19:c0:ee:f5:2a:3d:2a:93:5c:
4c:3f:f0:96:c6:ba:11:26:13:49:cf:92:1d:b8:17:dc:95:84:
89:9a:2b:ae:ae:76:f4:45:a2:32:58:8e:74:6b:96:ef:9c:70:
9d:a8:98:5b:0b:18:21:5a:92:38:20:27:71:5b:e2:73:59:fe:
b5:3b:94:f0:84:b6:e7:11:c9:c6:a9:e4:e5:89:be:d2:6a:51:
53:4c:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:07 2025 by rpki-client