Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: cabXViRVZ/CokpRFpojhSg5VPidnt0pM6dpDokNN9FY=
Subject key identifier: AC:FF:90:A0:F2:39:A7:B4:92:48:2E:3F:4B:DD:EA:B7:15:89:A7:E4
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 01976A059A1632A0C18DB23922F72A8539D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 03D8
Signing time: Fri 13 Jun 2025 16:00:41 +0000
Manifest this update: Fri 13 Jun 2025 16:00:41 +0000
Manifest next update: Sat 14 Jun 2025 16:00:41 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: E1A1PSaELtcapLiA+8kiBQ/sXv8WRk5QBfMktifaD8M=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:9a:16:32:a0:c1:8d:b2:39:22:f7:2a:85:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Jun 13 16:00:41 2025 GMT
Not After : Jun 14 16:00:41 2025 GMT
Subject: CN=acff90a0f239a7b492482e3f4bddeab71589a7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:64:51:b7:ff:09:c3:76:58:6c:e5:c7:8b:
30:cd:39:7a:c5:80:9a:88:1b:00:fe:50:f7:83:30:
ef:be:25:f9:32:19:49:4f:35:54:17:f0:34:d9:57:
f0:f4:ff:9d:b1:95:56:38:8f:b6:6b:f4:d6:24:2d:
97:5e:32:bb:1a:1c:16:25:fd:90:af:6b:4a:a1:3d:
6c:a5:da:12:2c:0b:ed:c8:67:6a:28:12:8f:ac:d0:
22:1a:ff:f3:ad:e1:27:a3:dd:40:de:dc:2e:16:69:
95:11:32:15:32:73:f5:28:e0:07:d8:c8:b3:29:2b:
55:7b:d7:1e:a2:56:28:58:dd:e1:33:5c:1a:be:3a:
91:9e:00:47:70:83:0f:25:02:ef:11:77:2b:33:8d:
46:58:d7:d1:b7:d2:41:94:3b:90:f4:69:d8:9e:74:
64:db:97:c0:77:57:cf:67:05:93:a6:57:29:91:7e:
eb:99:4a:bb:0b:bc:d1:eb:eb:e6:ae:48:6b:5f:e5:
2d:78:d6:d8:52:f5:71:a5:7f:8b:15:a8:9f:38:05:
7b:1a:7f:63:9d:a3:63:3c:20:8f:10:71:18:72:c3:
20:0e:28:7b:e1:09:21:7d:74:16:85:a2:a6:fa:1a:
d4:10:1a:12:7b:fb:2c:86:46:f1:90:b5:37:ec:ef:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:90:A0:F2:39:A7:B4:92:48:2E:3F:4B:DD:EA:B7:15:89:A7:E4
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6f:d3:e1:34:ad:ee:a4:f9:09:62:8d:b9:cf:ed:cd:8f:46:
1f:cc:53:e4:c5:3c:29:a8:e5:ed:e8:b0:e3:e3:e6:7d:fd:c7:
48:53:5a:be:3a:f2:8d:b6:8d:b1:81:83:b8:d4:43:f4:82:01:
a7:9c:86:4b:93:95:cb:0f:6e:a9:3e:cd:65:8b:e6:ab:26:67:
3d:3e:95:ff:94:9f:91:4f:d2:ea:91:ab:7d:17:ff:d9:57:f0:
18:d9:89:a5:5d:49:95:be:84:8e:37:30:66:a2:be:ed:66:7b:
3d:29:86:2e:0b:50:52:fc:72:53:6a:6d:b9:41:16:fe:3b:33:
ea:dd:f9:68:fb:fe:68:50:26:2e:1d:ea:34:23:c0:f7:e9:35:
b7:c3:5c:5c:a4:a2:8a:a7:38:51:ed:08:6e:95:62:45:98:9f:
3c:b8:c7:84:e1:f5:37:67:a1:5c:32:09:f8:c0:f7:21:e5:7b:
1f:ff:7c:40:07:6f:47:bf:8e:a5:86:43:2f:9f:46:be:e7:ad:
1f:69:3a:1c:16:72:73:da:a3:0d:34:f0:78:1f:20:74:21:44:
f6:ae:c0:9f:40:11:ee:f7:d7:08:34:6c:a8:fa:e1:ef:46:29:
2f:7f:6a:92:80:7d:bc:fb:c4:b7:99:be:08:b3:76:b6:3b:31:
b6:b3:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:18 2025 by rpki-client