
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: RT73zlrs3n1fa+f9LEShzUKbYhNHjaoRAZohvcf0pgQ=
Subject key identifier: 7F:7A:FD:31:F1:8F:91:12:FD:BB:4B:01:C6:9C:01:EB:18:86:A2:FD
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019874BD7D232300A037BC5E7350C34904DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0860
Signing time: Mon 04 Aug 2025 11:00:31 +0000
Manifest this update: Mon 04 Aug 2025 11:00:31 +0000
Manifest next update: Tue 05 Aug 2025 11:00:31 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: Q4BRjB+z5OAiN7rg24o1FFSjo7LNx8BcG0j2IyPTo3Y=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:7d:23:23:00:a0:37:bc:5e:73:50:c3:49:04:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Aug 4 11:00:31 2025 GMT
Not After : Aug 5 11:00:31 2025 GMT
Subject: CN=7f7afd31f18f9112fdbb4b01c69c01eb1886a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:03:e5:32:ac:e6:05:fb:c3:3a:dc:3c:3c:
e1:b1:6d:23:9c:fe:46:a4:14:99:3e:d7:54:93:e6:
f0:56:45:eb:3d:27:6a:ff:f2:69:24:1a:9a:a8:73:
0d:89:16:e2:f7:01:d3:a0:ac:f4:6c:7c:cb:4e:fa:
0c:0d:9b:4b:95:ec:ff:98:75:b1:ad:bd:e2:a7:43:
5b:c8:89:4f:32:4b:7a:66:c1:39:32:91:34:8c:fd:
a4:1e:77:d0:9a:75:e9:92:46:42:4f:55:54:4c:2f:
4b:da:83:70:5b:85:91:5d:74:6f:87:5a:b5:87:5a:
53:26:20:c0:cf:5d:04:aa:e3:bd:53:a6:cf:79:7f:
56:cc:53:d1:6f:95:8e:29:7a:a3:1e:56:e0:9f:6a:
62:42:9c:3e:49:d9:9f:4e:80:af:37:37:dc:31:9c:
19:f3:e6:3c:a3:96:4d:aa:7b:e0:6c:12:df:ac:8a:
3b:91:ff:6e:6a:31:71:c3:56:fe:f3:76:c1:2d:22:
ce:af:ed:7c:13:d2:50:76:ec:61:29:75:b2:b0:9a:
2f:60:20:23:96:db:e9:33:0b:bf:31:fb:ec:ea:d1:
43:e1:4b:4a:10:3a:b5:af:d2:5c:26:81:e9:b3:1c:
e2:3a:3d:b0:a2:c1:02:36:3c:64:ba:04:16:b4:f5:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:FD:31:F1:8F:91:12:FD:BB:4B:01:C6:9C:01:EB:18:86:A2:FD
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:a0:59:3e:37:79:fd:77:28:f1:b8:a8:e1:94:e3:18:ce:
76:72:0c:20:76:80:73:fc:f7:88:8c:a5:5d:a4:88:e2:18:eb:
0d:8f:be:3b:5a:00:06:77:1b:5c:75:93:23:6f:fb:fa:68:b7:
84:63:8a:4e:f0:08:d5:5e:8a:86:3f:c3:7b:37:6f:55:7e:a7:
8c:7c:9f:26:84:19:05:52:d3:5b:a7:10:35:1a:72:37:43:2f:
b4:f9:7c:53:50:ad:81:5a:92:44:f9:af:f0:9b:4f:17:ae:1e:
52:6c:4f:c4:ce:a8:5a:cf:2d:44:a6:26:f0:fd:7f:c9:b0:52:
9a:46:04:c1:ba:41:7b:86:7d:e4:83:ee:ae:76:b7:4d:40:0e:
32:25:5a:d2:b2:90:ce:e5:92:4b:e9:f6:8a:5a:39:b0:fd:2e:
7d:67:72:e4:41:28:66:76:87:c5:b6:9e:aa:87:89:49:05:0a:
01:a2:58:e6:66:41:d3:1c:27:89:85:b4:08:ef:ea:cc:b8:9c:
7c:6b:37:a9:2f:2a:c6:96:12:8c:b9:6c:b1:7e:35:db:9f:40:
a1:be:09:86:59:75:9e:72:00:f9:50:fd:90:66:8b:c7:4a:d4:
06:2e:ef:bd:c3:20:b9:f0:68:41:4f:4a:f4:a6:b2:8c:5c:0d:
41:27:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:22 2025 by rpki-client