Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: QrUjUgSYXHJiO8U6ZL3++k2oDLNaE4k0InctY5KDZHI=
Subject key identifier: 5E:C6:7C:FB:66:F1:B0:9F:D7:11:B5:FC:24:2C:95:91:2B:4D:D9:88
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01976D064EC145B2E55A47B7C469BAEB9C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 134A
Signing time: Sat 14 Jun 2025 06:00:18 +0000
Manifest this update: Sat 14 Jun 2025 06:00:18 +0000
Manifest next update: Sun 15 Jun 2025 06:00:18 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: xtae4P/XGiojckMZhK0rTZ3paI+Vrej87p29gcSVsNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:4e:c1:45:b2:e5:5a:47:b7:c4:69:ba:eb:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jun 14 06:00:18 2025 GMT
Not After : Jun 15 06:00:18 2025 GMT
Subject: CN=5ec67cfb66f1b09fd711b5fc242c95912b4dd988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:dc:8b:9e:aa:d8:9c:fd:60:0b:69:b7:b7:
9f:fb:1a:22:9e:bf:97:4c:fa:74:e6:8b:db:84:86:
ea:18:43:7f:13:c5:98:28:f7:2d:ff:c8:63:a4:d4:
fb:91:b7:6b:05:b7:4f:be:f9:9e:c0:59:82:e4:22:
48:5a:2f:2f:af:63:ca:d6:33:74:73:1c:b7:a0:d5:
8a:2b:97:c0:e5:d4:ee:c7:2e:f3:2d:30:e4:74:eb:
f3:32:8d:10:70:72:d4:5d:64:63:68:e4:c9:5b:8c:
91:6d:8f:f2:03:6c:5f:7d:b7:6e:f6:47:07:0c:1c:
40:19:5b:71:cf:3b:8d:1e:ef:e6:0e:9e:41:be:5a:
18:57:e9:f6:9d:0d:4f:45:b7:c1:71:9f:02:3f:d9:
e1:f5:6d:20:d6:21:1b:77:31:ac:cc:eb:88:d4:3c:
74:62:8d:5e:46:2d:f1:46:00:81:99:41:0e:12:a2:
e6:1d:81:3a:44:c0:61:53:e9:5d:68:1c:0e:fa:49:
b4:92:f1:14:03:ea:bc:04:48:50:53:83:6c:61:16:
7f:be:d0:6e:e3:61:f9:70:a2:ed:fd:f0:1f:ea:55:
56:d4:ab:f1:d4:40:bb:e2:31:2e:16:10:e6:4b:5a:
40:78:5d:ed:b6:85:3c:82:5c:d7:66:3d:5b:9f:16:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:7C:FB:66:F1:B0:9F:D7:11:B5:FC:24:2C:95:91:2B:4D:D9:88
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7b:47:ed:1d:f5:bd:42:31:36:67:1b:8a:09:54:2a:29:72:
2c:c3:c2:91:14:c9:fb:c7:75:87:d2:60:4b:8c:5d:8e:d4:e9:
bb:b7:e3:9c:fe:a8:0a:9a:c8:b9:43:76:8e:ff:89:6d:59:36:
87:f8:5e:55:8e:42:9e:f3:2d:66:00:a7:3a:5f:b2:77:e5:90:
47:ee:d3:85:38:23:e9:ec:99:42:2f:73:a8:e7:6c:d3:41:aa:
09:63:71:62:7a:9b:fd:8b:fd:1b:7f:fd:09:c6:30:64:76:64:
f8:e2:bc:ed:18:55:0a:30:0b:a9:bf:ab:6d:3d:19:f6:fd:de:
23:6e:70:98:8c:e6:d3:13:30:75:fa:bd:c3:92:3a:94:98:04:
d2:88:84:db:30:f6:68:7c:a0:a3:01:ac:05:28:50:0f:75:d3:
67:7d:43:e4:cb:8c:87:a9:fd:55:a5:bf:31:ec:ab:a0:19:b1:
b3:62:3e:d0:4c:43:97:11:47:b3:80:92:f2:47:e9:79:cd:37:
51:4b:b1:ac:b8:7d:21:cd:67:8c:72:d2:18:f6:fe:c0:50:79:
86:01:97:2d:00:26:c4:61:16:ee:7f:f5:32:15:e0:17:fe:99:
27:56:6f:a7:0a:cf:6a:9d:9c:43:b0:68:0e:c0:92:58:64:44:
ca:d2:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:01 2025 by rpki-client