Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: 2eaCzIRvVbcAdv/qMgS/S5KdMJZBbWnUOCkrDXd1WDY=
Subject key identifier: C7:D7:8A:4E:53:33:26:F3:F0:8A:E0:4B:EB:DB:81:EC:82:F8:D1:BC
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 01987A1BAC19F2171F8E11408D283F5AA91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0C0B
Signing time: Tue 05 Aug 2025 12:01:30 +0000
Manifest this update: Tue 05 Aug 2025 12:01:30 +0000
Manifest next update: Wed 06 Aug 2025 12:01:30 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: NAm2M9vuDokEW2AlbNNFSFQ9DDHgm4Y5aUjnhK2IunU=)
2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:ac:19:f2:17:1f:8e:11:40:8d:28:3f:5a:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Aug 5 12:01:30 2025 GMT
Not After : Aug 6 12:01:30 2025 GMT
Subject: CN=c7d78a4e533326f3f08ae04bebdb81ec82f8d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:a2:89:a7:cf:7b:e0:70:3e:b8:99:b1:78:
1f:7a:54:e6:d1:55:bc:f0:c5:4d:46:cd:5e:01:a6:
9d:87:06:6b:76:bd:0c:4d:d5:84:32:5f:27:74:e2:
8e:57:99:2b:05:73:85:31:2d:f6:5a:34:fc:9b:6a:
9e:eb:ea:dd:72:b4:ba:68:69:67:82:f0:3f:49:5f:
13:dc:54:1b:77:50:53:f8:2e:c9:ac:45:60:84:ed:
7e:7e:b6:5d:fd:70:c9:d2:87:b0:6c:22:1c:ba:0d:
e4:a7:4f:8a:25:cb:ad:0c:a1:63:ca:e5:13:38:07:
ff:d7:70:c6:16:1b:e0:6f:c2:8c:53:a8:3e:c9:24:
89:54:c4:c6:de:44:f1:84:35:6c:54:ca:df:29:32:
71:e5:21:d9:57:59:60:b7:ec:d3:47:4a:e0:a3:97:
8a:af:e6:a5:54:06:49:fe:a7:71:76:b8:a1:3a:a1:
41:42:85:e2:e2:86:0f:98:f9:59:c6:d7:38:05:ca:
00:d4:ad:7b:e7:c8:d1:48:29:24:e8:d7:e9:5b:db:
1a:0b:d5:dc:71:e8:2e:04:04:d7:36:fb:33:1f:48:
54:c2:09:d8:6a:75:28:1f:9a:ef:d5:95:3b:6f:bb:
89:56:0c:e9:12:d3:7b:25:c4:51:ae:2c:f9:b2:ce:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:8A:4E:53:33:26:F3:F0:8A:E0:4B:EB:DB:81:EC:82:F8:D1:BC
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:46:42:fd:38:04:08:fb:2d:4b:c6:ce:00:d8:48:ff:0c:
a0:57:a7:5e:40:f6:7f:12:62:6c:4d:cb:b8:2d:3b:b6:15:e3:
ce:0e:1a:10:70:a4:1f:f0:99:2e:a7:e3:11:98:92:0c:94:d5:
e7:2c:f1:4d:f7:e6:87:1d:21:89:a0:ed:d9:a0:7f:a8:5b:de:
35:90:a5:ce:d5:1f:70:e9:6e:81:b4:3a:71:3e:69:d4:87:2c:
56:50:2d:1f:01:a4:6b:01:d0:ee:96:ee:8f:14:12:95:89:cc:
83:8c:30:c0:a1:65:05:74:bc:b4:ff:92:ba:d2:0b:a6:4a:df:
d8:00:ba:9b:c6:e4:95:32:bd:97:ff:b6:02:25:df:84:86:96:
33:c4:d1:5d:41:d2:7f:55:92:90:8e:8a:13:cc:0d:f8:d5:07:
0b:b9:55:12:0f:81:ad:01:5c:bf:0e:96:b8:bd:e7:fd:c1:4d:
0c:9b:02:77:e7:42:cf:93:90:58:83:f3:4f:34:32:db:c3:01:
78:00:8f:91:7e:94:ee:3d:8c:d5:5e:2d:1f:a7:e4:2b:e5:2f:
16:82:76:1b:fd:97:db:b9:52:b3:6c:85:7b:42:33:56:e4:be:
50:9e:6e:6f:9c:45:18:e0:ba:64:1a:28:da:f8:bc:4d:e5:db:
6e:e3:d5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:52 2025 by rpki-client