
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: fCoe8nhApwFk8IbXxkwubOHYq3yrE2uq7OR7F42dVoQ=
Subject key identifier: 68:96:5B:66:4B:3A:48:BB:89:E7:E4:8E:41:59:F3:0E:3A:73:BA:83
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 01987FE6C541337DB8FF60EF92E6AAEC57AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 132E
Signing time: Wed 06 Aug 2025 15:01:26 +0000
Manifest this update: Wed 06 Aug 2025 15:01:26 +0000
Manifest next update: Thu 07 Aug 2025 15:01:26 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: XwUqL8o/YGY0mmjTxh7BlgVoxAOEifJISxC2ST9BQ2M=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:c5:41:33:7d:b8:ff:60:ef:92:e6:aa:ec:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Aug 6 15:01:26 2025 GMT
Not After : Aug 7 15:01:26 2025 GMT
Subject: CN=68965b664b3a48bb89e7e48e4159f30e3a73ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:3a:16:b7:8f:38:ac:53:11:00:9e:dc:c0:
1b:d0:c3:e7:31:5f:bc:d1:2d:68:48:56:ca:a7:b8:
72:d2:aa:17:b1:b0:83:de:24:01:1f:33:00:4e:7c:
e3:c8:e2:54:e5:32:24:43:f3:14:71:e9:f5:69:e5:
07:46:32:c1:47:25:f0:f8:fd:60:bf:aa:81:01:82:
ee:a0:85:b5:5c:5d:40:e4:ca:98:c9:da:4a:c0:78:
08:00:7d:f5:60:31:62:89:6c:d0:ef:58:d9:22:72:
de:39:e8:d5:86:98:dc:4e:1c:01:36:d5:08:a2:11:
d5:b1:8b:0d:e2:95:99:6a:ed:45:40:75:d6:c7:9e:
ee:d4:6f:33:fd:df:3e:87:bf:30:a3:9e:73:61:b7:
0d:c9:3b:64:3e:d4:1e:bf:7e:1a:c0:f0:da:a3:0e:
75:16:bc:78:44:2e:0e:a5:79:e5:5e:bd:74:fe:8f:
3b:c6:ac:9a:b2:93:f2:7d:ff:32:62:6c:39:c9:f1:
26:64:76:02:6c:a9:2b:62:9d:e3:ca:80:52:5e:00:
c6:26:95:bb:51:49:e6:0c:92:93:13:2f:78:92:11:
60:b9:bb:c7:26:dc:a5:54:7a:34:20:0f:b2:d4:22:
5e:4e:24:6c:4f:3a:5e:74:9e:63:7a:ea:8b:cc:de:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:5B:66:4B:3A:48:BB:89:E7:E4:8E:41:59:F3:0E:3A:73:BA:83
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:1b:19:82:13:d1:aa:ab:dd:0b:4d:d8:2e:17:6c:a2:27:
1d:79:83:f7:68:32:1e:c3:c3:0f:11:f7:e1:30:b4:1a:c0:cf:
7e:a8:8e:83:8d:d7:cb:b1:12:c0:67:9b:33:0b:1c:fd:3e:f2:
9d:ff:7b:54:32:17:f0:e9:75:c7:dc:6a:a5:14:94:e1:55:ee:
13:e5:4b:06:07:50:17:5a:4a:f6:46:7f:3a:2b:b0:21:67:84:
31:9f:b3:7a:bb:d9:82:f5:a2:ce:f2:81:f5:6d:4c:2a:8d:93:
dc:a6:4a:c2:a3:8d:d4:7b:31:58:f0:ea:4e:40:bd:d9:f7:67:
82:11:b0:aa:7c:ec:a5:bb:e3:31:ab:ac:92:c9:2a:06:a7:a8:
46:8f:96:6b:72:fa:d8:03:ab:54:08:00:bf:43:66:fc:85:2a:
50:03:35:d8:13:e7:8d:f7:47:c9:50:b8:5f:1d:0a:94:c5:16:
4a:66:18:c4:72:5a:77:46:c2:96:f5:8d:4b:23:62:5d:84:fe:
16:c0:a5:bb:ce:0d:cb:f3:21:b3:e4:c7:fa:a6:15:ab:ce:87:
66:15:cb:93:23:3b:c8:ff:48:13:f9:32:89:bb:c9:24:d2:3c:
a9:24:6f:62:3a:36:3d:c7:12:93:49:4b:af:6a:76:8f:a8:67:
a5:d7:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:21 2025 by rpki-client