Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: QqS8YDiua0ZttOiUZ0IZt24EkSc6/coYzcvLpyoFjdU=
Subject key identifier: 48:77:F5:60:AF:55:7E:E7:DE:CC:62:23:F2:C4:4F:39:1F:55:AC:0B
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01977E31404CDC4624E4A5E2F4CC1C9921AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 14:00:46 +0000
Manifest this update: Tue 17 Jun 2025 14:00:46 +0000
Manifest next update: Wed 18 Jun 2025 14:00:46 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: VDqigDjRKPv9Jq2NYaLXSGnuCUZue7UDF0cxBugNVDs=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:40:4c:dc:46:24:e4:a5:e2:f4:cc:1c:99:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jun 17 14:00:46 2025 GMT
Not After : Jun 18 14:00:46 2025 GMT
Subject: CN=4877f560af557ee7decc6223f2c44f391f55ac0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:a8:8a:f2:54:67:e8:85:82:75:44:f7:ca:
8c:b2:3c:16:e9:19:e5:71:81:f3:e4:d1:6b:10:ff:
8b:b9:67:eb:82:73:82:4f:77:2f:7c:ac:11:8a:8b:
f5:e6:9c:eb:30:1d:43:eb:21:ac:f0:b1:c1:c7:1c:
e3:a2:df:fb:f4:c0:d5:56:ef:50:eb:e4:b5:f1:9d:
46:2d:48:3a:c1:a0:d0:41:2e:67:ed:aa:df:be:8f:
1d:c6:56:13:b0:76:50:83:ae:17:c0:0d:57:d3:e0:
99:df:30:03:fd:01:61:42:54:ed:ae:07:df:81:7f:
b1:db:60:e5:63:e6:9a:de:94:6b:22:f2:29:44:4c:
73:e2:c6:36:4b:5f:de:ff:ee:36:e3:28:aa:be:4f:
39:84:0c:59:70:85:25:98:f6:bb:c3:ec:42:81:97:
52:32:3e:8e:6b:fa:75:37:3e:23:dd:fa:48:5b:fe:
ed:85:dc:a6:78:fc:a6:af:c3:9c:a7:8a:e7:22:84:
d3:17:59:15:af:9a:ec:0f:d3:7b:75:99:e8:13:ac:
45:c2:84:0c:73:48:ea:6f:2b:5b:25:26:ad:d1:a6:
64:ac:99:9a:77:34:fb:b4:e7:44:5f:27:84:4b:5f:
94:f8:35:cc:56:8e:36:13:17:c4:ed:17:78:75:f3:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:F5:60:AF:55:7E:E7:DE:CC:62:23:F2:C4:4F:39:1F:55:AC:0B
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:21:1d:9c:c1:45:d7:8a:19:f7:18:05:27:7c:80:bc:06:
ad:26:a0:9c:7c:ef:e7:79:e9:6a:84:6a:60:67:24:95:ac:df:
01:0c:8b:22:c7:be:cc:cb:93:fb:ac:1e:b3:93:72:00:cb:18:
e3:68:22:49:4d:03:e2:6e:3b:15:35:c4:3e:73:df:8d:80:9b:
83:89:97:57:e3:24:27:ec:50:1c:a6:7e:30:d2:25:78:89:2f:
1a:3f:bf:df:fd:85:0a:da:b2:71:2e:3e:e3:18:7d:3c:62:30:
a5:4c:e3:e2:08:12:53:2e:e7:b2:cd:bb:25:17:ad:ef:57:51:
de:7d:3c:b5:91:d4:41:9a:68:07:65:d4:a2:a4:4b:8d:10:4a:
45:db:8b:03:50:4b:95:6b:03:76:c7:29:57:af:87:f5:af:26:
f9:f8:c3:24:23:ce:e7:cf:3f:05:ef:93:bb:93:f3:02:f2:73:
34:ee:b1:31:1e:42:b2:77:1c:01:61:53:f4:9c:50:69:6f:78:
c1:3d:00:bf:79:56:cd:c3:8e:49:db:33:b9:ad:c0:d7:0f:1c:
23:08:ef:9f:c4:ab:c4:f8:5c:1e:9a:e2:75:ff:a7:a7:6d:47:
b3:12:eb:b0:8f:92:38:1e:b6:d4:b9:ec:56:e0:8a:24:fc:cb:
93:30:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:47:22 2025 by rpki-client