
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: loX4gBcIGsyiFUuPjUasOvCpbexpWjoopSChCwd5F1M=
Subject key identifier: 40:42:A1:3A:BE:DD:8C:31:91:D9:2F:C7:77:EE:9D:2A:BC:AE:41:10
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019874BD9B0D4B824C0FE13889CF2A520CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:00:39 +0000
Manifest this update: Mon 04 Aug 2025 11:00:39 +0000
Manifest next update: Tue 05 Aug 2025 11:00:39 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: 84/aM/ZL7W6RRruy5u2fu5MrIHtkdHt0U3Aox7AgjKE=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:9b:0d:4b:82:4c:0f:e1:38:89:cf:2a:52:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Aug 4 11:00:39 2025 GMT
Not After : Aug 5 11:00:39 2025 GMT
Subject: CN=4042a13abedd8c3191d92fc777ee9d2abcae4110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:99:c6:e4:85:27:cb:90:13:44:5e:b6:c2:
84:36:64:4f:ec:ce:39:25:32:59:58:fb:f3:23:26:
b1:b6:19:e3:9f:49:67:93:db:81:21:03:e1:a9:d0:
76:83:fc:b3:69:50:a3:f1:7d:16:d6:b8:fb:cf:2a:
47:3d:c0:5b:b1:20:6a:7b:5d:db:78:5e:2e:83:07:
5c:58:18:56:73:7c:99:be:ff:87:cb:62:b0:1a:02:
86:c3:1a:e5:67:ec:80:5d:af:00:f1:2a:a5:67:28:
72:69:b7:8d:06:18:04:3f:7a:bc:a8:5f:9b:4b:2b:
d5:94:4a:d3:49:4d:9a:d6:c7:55:c1:f8:18:03:8f:
29:22:05:cc:17:5c:b6:f5:90:f7:30:10:a0:9b:80:
ee:0b:bb:ac:9c:6c:5b:60:ab:20:e2:0c:2e:19:b0:
c5:93:47:95:53:7b:0b:1e:f9:63:e0:fd:2a:67:ab:
f5:88:1d:20:00:ad:70:46:04:03:80:41:92:d2:ad:
0d:a0:ac:3f:2c:d4:d6:a9:f5:cd:ab:57:ba:6f:84:
36:72:ed:03:23:bb:f3:37:5e:e2:76:aa:86:a3:b1:
7b:7c:8f:f3:df:d4:1e:19:ba:4b:15:53:aa:df:ff:
45:5f:ff:66:76:63:49:9f:b1:1a:4b:6c:d3:3a:4d:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:A1:3A:BE:DD:8C:31:91:D9:2F:C7:77:EE:9D:2A:BC:AE:41:10
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:80:bd:76:66:ef:87:57:22:87:b4:ea:97:40:64:d8:49:6d:
21:bb:fe:78:b4:3a:be:f3:f2:8b:b9:68:45:b6:99:c7:ea:4b:
0a:fc:de:ba:f1:27:99:bb:2d:ad:4e:ee:37:9c:40:0f:f1:37:
2f:fb:cc:8b:16:07:62:79:ad:e5:17:d4:dd:75:dd:84:40:52:
39:db:67:79:35:49:0d:e1:96:c5:6e:1c:9a:6c:3e:b0:0c:9d:
c2:b4:01:38:11:a0:29:74:b6:e4:d5:45:c2:47:00:de:c9:d0:
c2:61:0b:dc:87:d1:3b:79:86:30:65:f5:79:77:87:cd:db:bd:
d8:7b:fb:4c:74:46:16:0a:d2:53:65:91:d5:1f:70:15:38:80:
7c:74:3f:62:d5:83:81:1d:09:64:c2:dc:0d:21:ac:fc:ac:28:
68:1e:1e:ab:01:c5:18:ff:ea:3f:ef:36:3c:f0:4a:e6:0f:0f:
9f:53:b0:49:d9:88:21:b9:f3:ae:49:1f:77:1b:cd:30:84:64:
7e:6a:3b:15:7d:2d:56:c3:12:ad:a4:de:f6:c3:a0:18:e0:d3:
d9:77:55:94:49:2b:24:57:f3:93:5c:d0:e6:71:f2:df:0e:f6:
ce:fb:67:5e:31:d7:b7:14:8c:7e:04:6d:aa:f1:c9:e8:c0:bd:
9a:e2:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:23 2025 by rpki-client