Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
File: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft (raw, json)
Hash identifier: LmMzIRR0+cm7GkvuZoLGvy1aaZx9I3neLfRlkuePlkU=
Subject key identifier: C0:F4:3D:86:52:EC:73:32:0B:F4:74:F3:CC:CE:ED:82:5D:E1:7E:59
Authority key identifier: 88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
Certificate issuer: /CN=88727fad5b5c06852e1dafa071ce4767a799e050
Certificate serial: 01987374520C3D3FDB27306A362426AD2FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 05:00:59 +0000
Manifest this update: Mon 04 Aug 2025 05:00:59 +0000
Manifest next update: Tue 05 Aug 2025 05:00:59 +0000
Files and hashes: 1: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl (hash: iGfq+HmhY5/XDMaIo96af0CUbH+lukstmIYaQ3Gjvms=)
2: y26WpZEldCdiwpqodYBCZ3hzMbM.roa (hash: Q1+h8XgN41jDqcPqF4sdoSdNWkaGt5GnKBqYH1YkYlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:52:0c:3d:3f:db:27:30:6a:36:24:26:ad:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88727fad5b5c06852e1dafa071ce4767a799e050
Validity
Not Before: Aug 4 05:00:59 2025 GMT
Not After : Aug 5 05:00:59 2025 GMT
Subject: CN=c0f43d8652ec73320bf474f3ccceed825de17e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:d8:55:fa:af:2e:68:5b:aa:f0:50:2a:63:
ad:62:70:4b:76:19:cb:e6:3d:aa:8a:4e:e4:0a:77:
7c:cf:f6:d5:8c:97:16:71:f9:e0:b5:99:ee:65:44:
f4:61:25:d5:ea:4e:a7:9d:10:52:22:3a:57:0f:fc:
a9:82:9b:17:19:8e:6d:5a:52:6f:73:e8:e2:dc:59:
3f:7a:c7:6e:4d:ae:a6:31:b2:5f:47:cf:16:58:e6:
5f:0e:c4:0f:c1:3f:99:a1:2d:d6:ae:23:35:0c:b0:
38:ad:a0:2b:8f:4c:cb:5e:42:4b:ae:70:1c:be:cf:
b7:fa:6e:39:9e:28:aa:23:9d:51:df:9f:3e:da:65:
68:43:ef:39:5a:a6:45:d8:9c:e4:5b:a7:16:bd:ce:
26:e3:db:0d:32:71:02:86:7e:1d:73:41:f4:c1:41:
67:fc:ee:fe:6f:73:a8:04:34:f9:27:2b:5a:47:a0:
90:98:23:c2:60:9d:ef:63:1f:5b:33:6c:c1:a1:9b:
28:14:e4:44:a8:e5:10:1d:82:8d:7d:37:cb:63:26:
a9:86:f0:c8:49:23:ff:4c:c1:68:94:da:ae:15:1b:
83:4d:36:81:90:66:82:ec:bd:c1:65:e2:dd:7b:fb:
ae:f1:91:35:e8:83:c4:0c:8e:3d:f3:d1:06:cf:65:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:3D:86:52:EC:73:32:0B:F4:74:F3:CC:CE:ED:82:5D:E1:7E:59
X509v3 Authority Key Identifier:
keyid:88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:60:21:ac:84:56:27:79:1a:4f:b6:36:aa:fa:82:1f:c3:
d0:c6:e8:ec:0d:de:58:4e:04:f1:33:6b:46:6f:8c:ff:d1:c6:
00:8d:84:e2:48:bc:8a:16:a7:34:cc:e9:52:28:83:d9:67:94:
0d:14:8a:53:71:7c:f6:ca:a0:9f:38:ba:7b:13:47:1c:ef:0a:
6b:24:3f:6c:bc:13:8e:9b:a4:0e:76:7c:f1:8a:41:33:8a:9c:
12:c8:5a:49:b9:8b:7c:87:ff:93:3c:f8:9f:ba:75:19:8a:e7:
ab:b5:38:ef:7a:31:50:46:33:54:a1:68:b0:61:1b:38:17:70:
73:aa:2a:9f:f0:ce:70:17:b9:e8:e6:b6:4d:8d:08:f7:58:77:
a3:ec:fe:aa:dd:6a:78:6b:95:ba:de:7a:27:c4:c2:d1:97:92:
dd:63:8b:33:b0:ff:d8:05:13:f8:e7:3e:9f:24:51:46:32:74:
32:01:52:82:0f:36:86:e6:d9:ea:9a:67:72:77:6c:b7:6e:12:
66:3b:b4:93:3c:c0:2a:bc:78:79:14:97:c9:d1:84:4f:9f:1a:
e6:17:c7:1c:1a:14:c4:30:2e:40:fb:4a:98:d8:a1:d2:00:41:
82:70:b0:c3:a3:ea:6f:bd:8c:43:d6:0e:da:f2:46:47:79:e6:
b0:85:f3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdFIMPT/bJzBqNiQmrS/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzI3ZmFkNWI1YzA2ODUyZTFkYWZhMDcxY2U0NzY3YTc5
OWUwNTAwHhcNMjUwODA0MDUwMDU5WhcNMjUwODA1MDUwMDU5WjAzMTEwLwYDVQQD
EyhjMGY0M2Q4NjUyZWM3MzMyMGJmNDc0ZjNjY2NlZWQ4MjVkZTE3ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3YVfqvLmhbqvBQKmOtYnBLdhnL
5j2qik7kCnd8z/bVjJcWcfngtZnuZUT0YSXV6k6nnRBSIjpXD/ypgpsXGY5tWlJv
c+ji3Fk/esduTa6mMbJfR88WWOZfDsQPwT+ZoS3WriM1DLA4raArj0zLXkJLrnAc
vs+3+m45niiqI51R358+2mVoQ+85WqZF2JzkW6cWvc4m49sNMnEChn4dc0H0wUFn
/O7+b3OoBDT5JytaR6CQmCPCYJ3vYx9bM2zBoZsoFOREqOUQHYKNfTfLYyaphvDI
SSP/TMFolNquFRuDTTaBkGaC7L3BZeLde/uu8ZE16IPEDI4989EGz2WXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD0PYZS7HMyC/R088zO7YJd4X5ZMB8GA1UdIwQY
MBaAFIhyf61bXAaFLh2voHHOR2enmeBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhKX3JWdGNCb1V1SGEtZ2NjNUhaNmVaNEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNGEyNjAtODRiMC00NjhlLWI0OTct
NWE0MTkyNmZlZDdjLzEvaUhKX3JWdGNCb1V1SGEtZ2NjNUhaNmVaNEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hNGEyNjAtODRiMC00NjhlLWI0OTctNWE0MTkyNmZlZDdj
LzEvaUhKX3JWdGNCb1V1SGEtZ2NjNUhaNmVaNEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGdgIayE
Vid5Gk+2Nqr6gh/D0Mbo7A3eWE4E8TNrRm+M/9HGAI2E4ki8ihanNMzpUiiD2WeU
DRSKU3F89sqgnzi6exNHHO8KayQ/bLwTjpukDnZ88YpBM4qcEshaSbmLfIf/kzz4
n7p1GYrnq7U473oxUEYzVKFosGEbOBdwc6oqn/DOcBe56Oa2TY0I91h3o+z+qt1q
eGuVut56J8TC0ZeS3WOLM7D/2AUT+Oc+nyRRRjJ0MgFSgg82hubZ6ppncndst24S
Zju0kzzAKrx4eRSXydGET58a5hfHHBoUxDAuQPtKmNih0gBBgnCww6Pqb72MQ9YO
2vJGR3nmsIXz4A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:49 2025 by rpki-client