Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: c2oRHz8jbEndMuNsEyAboMJ6Mv9jsKqMgEzYd0ZeU3I=
Subject key identifier: 84:73:AA:8B:E2:9B:80:BD:17:7B:02:66:4E:D2:B6:63:01:AF:7E:FD
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0198808B7161B0DEC2A57BFAD9B9A89AFDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0917
Signing time: Wed 06 Aug 2025 18:01:18 +0000
Manifest this update: Wed 06 Aug 2025 18:01:18 +0000
Manifest next update: Thu 07 Aug 2025 18:01:18 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: pVbtEt9mGvfIarah2At+KAwZACQqD3EYROLxI9L+N9Y=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:71:61:b0:de:c2:a5:7b:fa:d9:b9:a8:9a:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Aug 6 18:01:18 2025 GMT
Not After : Aug 7 18:01:18 2025 GMT
Subject: CN=8473aa8be29b80bd177b02664ed2b66301af7efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:7b:87:d8:9d:47:b0:f2:b5:8c:3b:c5:5c:
58:46:47:ca:cb:ce:20:71:93:76:42:8e:10:8f:1f:
7d:28:c8:5e:40:9f:99:71:11:3b:df:a9:87:91:4c:
6d:3a:58:a5:f2:70:6b:70:fe:28:5b:fc:fa:3e:3c:
4b:29:f0:4f:da:ab:d5:79:6d:4b:23:37:56:47:a9:
6c:4b:ca:a2:7d:57:f6:53:f0:d0:b7:0f:be:40:7a:
93:0f:55:44:3f:93:4e:2e:b7:9f:f7:69:cc:6c:5d:
c8:d5:94:68:25:d7:54:86:d5:a1:ac:03:07:48:a3:
5f:5a:94:26:44:f4:0e:51:7b:f5:1b:22:6c:f4:df:
e7:24:e0:cc:2b:01:47:a7:4f:b0:06:c6:a9:2e:c0:
e3:7e:15:a6:63:62:56:1f:d9:22:95:32:4f:55:34:
b1:66:59:3f:82:f8:63:a6:98:f5:8b:8c:e7:92:30:
6e:e2:aa:23:38:91:bb:db:db:ac:68:08:e0:5c:ac:
f8:bf:53:69:07:cc:a8:ea:8d:20:38:66:16:ce:aa:
0e:6b:2d:a7:6d:ca:41:c7:f1:fd:55:5f:51:8b:66:
e2:c4:e9:2f:bd:37:20:55:bb:b2:f9:64:39:c9:81:
ad:31:61:9d:13:56:56:e6:f5:5b:1d:ab:ef:75:1b:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:AA:8B:E2:9B:80:BD:17:7B:02:66:4E:D2:B6:63:01:AF:7E:FD
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:48:bb:21:b5:26:b5:bb:a7:5c:f0:ab:cf:a8:cf:cc:61:47:
91:52:50:f8:e5:7b:1e:8f:24:6f:5d:80:e6:d6:50:52:3c:ae:
96:e9:a6:cb:2c:73:c5:a1:e2:27:f6:13:f5:a4:ec:7f:20:5b:
12:0e:77:5a:40:6d:1e:b4:e2:91:70:87:ca:58:7d:f5:bf:bb:
ae:d6:17:22:d8:37:6f:f9:e1:a7:b9:4d:45:e8:08:21:11:eb:
38:ba:75:d9:76:b5:8d:5a:93:a0:72:3a:b4:61:c0:71:d8:d0:
83:1a:70:5c:4f:58:c7:d1:b5:af:07:3d:51:68:30:f6:ca:5e:
35:80:64:38:25:89:44:ca:c4:42:72:49:ec:af:eb:ad:4b:93:
c5:30:a9:78:25:67:23:30:e6:e5:4a:cc:5f:55:c6:68:6e:13:
7d:99:7a:13:a6:7b:ce:a7:4a:0c:6d:79:d6:60:65:fe:fa:de:
a3:2b:b8:29:dd:d9:fc:9b:b6:a4:63:15:77:98:85:3d:84:25:
87:a2:2c:c3:2c:39:62:e3:9c:f4:5e:5c:52:ec:b0:fc:59:73:
cc:9d:cc:f9:09:c1:f1:ad:6b:0b:a5:12:c3:e4:d1:44:d6:8f:
82:f5:ad:6e:87:25:14:41:a8:a6:02:d3:cf:66:14:cc:62:19:
d8:c8:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:21 2025 by rpki-client