
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: x9zRMqNYq3lvnQJxPXFBP0hX32FMRlgXTulsqxWNuDw=
Subject key identifier: 8A:8F:80:73:3E:FC:D4:B5:67:19:09:03:F5:06:47:AA:7D:FF:C1:56
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 019882424C3430B5F70DF5D85FC34572C96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 02:00:39 +0000
Manifest this update: Thu 07 Aug 2025 02:00:39 +0000
Manifest next update: Fri 08 Aug 2025 02:00:39 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: M5MZSt9fSI99yTy1ajhpzv7m6lTxD2kkDiuxsiucyzk=)
2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:4c:34:30:b5:f7:0d:f5:d8:5f:c3:45:72:c9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Aug 7 02:00:39 2025 GMT
Not After : Aug 8 02:00:39 2025 GMT
Subject: CN=8a8f80733efcd4b567190903f50647aa7dffc156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:85:e2:8f:c6:4e:8c:89:7b:b7:5e:1d:84:
f5:c5:6b:8d:55:ca:c2:34:93:0b:4a:9e:a9:9e:6d:
23:31:04:4d:f8:2d:0d:fd:4c:6d:9e:84:b1:d7:e2:
f4:2a:e3:68:53:90:53:43:da:d6:e6:2f:65:77:f1:
67:53:18:65:60:6b:41:16:b8:91:54:17:27:c6:d6:
84:b1:d1:c9:0f:3f:53:ba:17:48:b0:fd:ac:6c:89:
41:c0:e7:d6:f8:4a:9b:0b:e2:b7:b8:45:31:1c:4e:
67:00:e1:34:04:4a:6d:7f:cb:2f:61:52:f2:41:34:
af:d0:60:4e:5f:3b:be:19:d9:8f:1e:1f:82:d3:a4:
45:e9:0e:b2:14:1b:25:2a:ff:92:84:2a:98:20:17:
53:14:84:cb:9f:cc:c7:ce:1b:49:ef:0f:0b:06:f7:
f5:1f:23:ec:ea:a1:0c:ea:85:e3:3c:63:29:b5:2c:
a9:95:02:3f:a7:38:de:06:3d:e5:28:e6:92:39:f7:
4a:36:99:49:60:e4:ce:3e:8e:e1:1b:b2:90:29:0a:
2d:42:b0:d8:61:de:89:34:08:37:b6:77:51:37:ea:
51:d0:07:15:06:2c:f7:f0:ac:4b:bb:ae:f3:b1:09:
28:e7:60:79:58:59:b6:5e:75:a2:a8:b2:c8:1c:1d:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:80:73:3E:FC:D4:B5:67:19:09:03:F5:06:47:AA:7D:FF:C1:56
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5d:7d:d7:25:fa:a9:a0:cf:66:0b:b5:ed:f4:7c:95:3c:b6:
08:ef:37:be:ee:0d:1c:08:c3:c5:09:5b:4a:30:b8:ef:c3:7a:
c4:4c:65:14:61:78:6c:58:25:a9:f0:72:a8:3e:99:2c:64:42:
14:0b:23:ab:96:62:5a:ea:d3:10:35:89:09:0a:2f:26:0b:e4:
23:b9:54:66:8e:c7:7e:31:f0:4d:95:46:0c:b0:99:eb:ce:77:
09:84:f2:78:a3:1c:66:5c:03:2f:01:36:91:68:70:9f:32:be:
4c:46:38:d9:09:f5:9f:25:f6:45:6b:2e:62:80:54:06:ae:b2:
4d:67:20:66:11:62:6a:11:d8:41:dd:f3:24:3f:ca:98:9b:1f:
38:52:d2:a3:56:63:5a:76:7d:7c:9f:86:67:87:3c:97:90:20:
bc:2c:4e:cc:83:c9:6a:2b:5b:f8:9d:39:cf:89:af:6e:af:91:
d2:9c:a0:33:fd:c3:e2:30:e3:9d:e1:bd:85:fc:54:8d:d3:52:
f1:d3:aa:ab:11:e8:be:c9:cc:40:da:68:6e:e9:bd:30:74:8e:
e5:f7:b2:5a:3d:0f:ed:06:c7:00:ab:bf:1f:5a:29:9b:98:7c:
f4:57:b2:11:41:fc:45:70:f5:7b:df:38:ce:f5:e8:48:df:d4:
69:e2:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:15 2025 by rpki-client