Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: DDYi9XLgij9Xgo/wWPEDpycdKywT0RWvXoR0Eongwn0=
Subject key identifier: 96:B5:4A:67:60:A9:C5:1A:82:69:29:11:7C:AC:D2:BF:C9:6F:99:70
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 01988166FB5D306402BF0C5487464439B76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 22:01:06 +0000
Manifest this update: Wed 06 Aug 2025 22:01:06 +0000
Manifest next update: Thu 07 Aug 2025 22:01:06 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: PoGpu4L30LTKjQBsoc+yIwHb0/rBJ+XB0XRtjWQObW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:fb:5d:30:64:02:bf:0c:54:87:46:44:39:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Aug 6 22:01:06 2025 GMT
Not After : Aug 7 22:01:06 2025 GMT
Subject: CN=96b54a6760a9c51a826929117cacd2bfc96f9970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:04:ac:f5:86:d7:8b:01:6d:5c:2b:78:15:
23:4c:57:e6:93:0d:37:df:ca:b2:5e:be:7e:58:11:
e8:5b:b5:5d:5a:34:7c:6d:cc:50:f2:1e:e7:a5:f2:
b1:7e:3b:5a:94:e0:7a:d5:87:70:7b:a1:7f:bd:bb:
f3:95:64:75:dd:5e:fc:30:44:ac:3f:a7:67:c7:54:
11:7e:90:c6:44:a4:ed:ab:95:93:0f:4e:1d:51:00:
59:e4:79:90:79:bd:bd:f5:98:c0:56:18:58:5c:a5:
b6:92:8d:61:55:5b:15:b9:44:ed:f0:d0:f0:e4:f3:
82:a5:7f:c5:aa:71:bd:e5:d6:86:b9:cf:20:80:25:
f2:2d:7f:6c:b3:7e:2b:db:65:f1:26:a2:a3:6e:08:
75:df:b2:b2:73:4c:5c:cd:26:f4:bc:d0:4a:44:84:
80:d1:ff:3a:6e:6d:80:73:64:6d:ae:ec:06:15:e7:
41:a3:3e:de:71:1a:51:32:bb:a2:bf:99:d0:80:6d:
56:71:40:35:4a:c8:34:8b:61:37:fa:68:14:2d:f0:
31:d7:17:52:86:d0:b0:62:88:30:0e:30:44:3a:85:
29:6a:a5:e7:1f:3c:74:32:fa:66:90:df:55:e5:37:
53:03:7b:48:7c:7b:53:5b:06:32:af:45:2f:14:ea:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B5:4A:67:60:A9:C5:1A:82:69:29:11:7C:AC:D2:BF:C9:6F:99:70
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:50:10:9a:2c:6b:d9:bb:e9:a3:22:33:da:8d:7d:b6:7d:1d:
c1:0e:ba:d3:44:4d:70:f8:54:a8:21:5b:71:7e:15:99:99:0c:
01:b1:04:31:cd:27:ff:30:8e:cf:0d:45:c1:bf:75:11:f6:3d:
71:8d:10:02:c6:73:69:69:d2:93:60:e5:53:be:21:65:02:93:
73:50:a9:18:97:10:b1:4a:8e:ed:48:a8:1a:b8:5e:0c:d5:d9:
f2:8d:d2:1c:14:f8:54:86:46:c5:90:3e:8d:00:bf:a1:e9:9e:
8f:e3:39:aa:20:95:a8:ad:bd:8c:03:82:e6:18:6c:e0:98:c7:
bd:be:e3:60:a8:65:f4:a7:ef:37:eb:6a:2e:f3:e8:bb:41:78:
fe:e7:b4:02:15:d0:d5:48:57:d9:eb:fa:ca:b3:cf:23:12:11:
f4:9b:cf:84:7e:a4:6a:eb:50:08:57:62:b4:66:28:16:83:b3:
29:2b:44:3f:24:67:2f:6d:25:ad:e2:6e:ae:30:b9:25:f5:e0:
cc:ad:ee:60:51:0e:7d:da:ca:29:a2:55:b9:60:76:fb:3f:37:
f3:2c:4a:22:41:eb:92:8f:5c:f6:34:a1:44:85:72:ed:40:05:
d4:da:4c:43:fa:da:c5:6c:d3:ab:ab:1f:cc:23:60:84:4b:87:
1c:20:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:29:07 2025 by rpki-client