Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: EJFykuW2ulHM7toHqTXwwqjUPMYUqxdB6M0A2M5/fOw=
Subject key identifier: 25:D7:0B:56:02:AF:08:FC:04:43:EB:3E:98:3D:E0:D3:93:E8:94:06
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 01988CFE0AC2A724A7481E19823E0A6F5FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1588
Signing time: Sat 09 Aug 2025 04:01:55 +0000
Manifest this update: Sat 09 Aug 2025 04:01:55 +0000
Manifest next update: Sun 10 Aug 2025 04:01:55 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: 1Bd/XQoHikNZHFBT/W85z8lxaT9VTvgMlX0EukJ4l0A=)
2: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:0a:c2:a7:24:a7:48:1e:19:82:3e:0a:6f:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Aug 9 04:01:55 2025 GMT
Not After : Aug 10 04:01:55 2025 GMT
Subject: CN=25d70b5602af08fc0443eb3e983de0d393e89406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:59:e2:a8:cf:b8:38:6e:b3:ef:cb:4c:86:
65:51:d6:4b:ec:69:64:d8:03:6a:b6:00:ac:60:93:
45:e1:5a:61:20:96:98:65:49:26:a9:3a:7f:de:a0:
b3:45:08:5d:f9:8f:2f:0f:65:0f:99:8c:89:70:1c:
42:db:ff:d7:69:7d:da:95:14:3d:e4:be:e2:f5:21:
88:62:0c:b0:6c:71:ea:aa:00:1d:98:02:92:11:12:
3a:32:83:e7:39:4c:d3:1e:3d:62:e7:71:1d:b0:4e:
21:35:15:18:18:28:3d:8d:3b:1d:86:5a:22:10:5b:
5a:c6:f1:d0:15:cd:13:3c:23:a7:73:f5:82:e8:15:
ae:9c:08:23:f1:31:97:c2:c6:82:58:9f:d3:da:5d:
97:9f:c7:e5:88:96:27:c1:d6:97:40:a9:2d:40:14:
52:22:e9:be:32:b4:e4:08:83:98:ca:ff:58:54:59:
72:be:84:6b:41:fe:80:72:46:d6:05:87:a6:6d:37:
87:77:9e:04:90:48:16:38:43:6c:d4:3b:fd:36:af:
e9:b2:32:eb:4c:fc:e6:24:a4:f7:e1:a6:76:9d:39:
68:e7:5e:16:e6:48:c1:a4:92:85:8a:e8:17:d8:85:
56:b5:19:dd:62:e4:26:89:32:a6:12:5e:d1:a4:ff:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:0B:56:02:AF:08:FC:04:43:EB:3E:98:3D:E0:D3:93:E8:94:06
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:04:ff:5d:ef:49:10:59:eb:6b:93:1c:a6:1f:c0:53:46:6a:
a1:ee:de:76:ec:53:5c:21:bb:38:7e:96:e9:b2:58:a8:95:68:
fd:d6:94:11:0d:2b:0b:2f:8b:d4:c3:c3:ae:05:26:ed:44:13:
d4:34:6c:ff:b5:ff:f8:7c:95:0b:87:71:05:41:e2:93:c1:4f:
7e:fb:85:07:4d:55:70:f0:f9:1a:1f:d0:cf:86:7a:45:71:59:
64:53:4e:dd:7c:25:dd:df:c7:64:db:86:af:17:60:ea:80:c6:
f6:09:79:78:74:b3:ee:65:3a:39:c2:52:ee:3e:96:1b:92:8c:
78:d7:08:e7:10:47:23:30:d5:21:61:ff:ea:b5:95:97:79:d3:
43:13:60:dd:29:d1:51:0d:8c:10:93:d2:1e:65:06:4e:42:81:
9c:d8:ad:69:b9:fc:58:f4:28:ba:e6:6f:0a:62:12:93:09:eb:
e5:9d:01:ce:38:4a:b0:91:aa:9e:2c:cd:60:21:8d:5b:b5:b2:
66:a2:2d:5a:2c:f3:53:26:ea:df:f6:e9:8a:7b:d1:33:ca:86:
25:d4:19:4c:e7:94:95:50:20:90:89:ca:46:fd:70:4a:bd:aa:
d6:69:c1:e7:8d:97:e3:3a:70:e4:32:bc:a0:d1:90:aa:0a:49:
51:04:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:05 2025 by rpki-client