Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: oDxqnF3eiEMFyESwfoZ0MbI4bumhNlyeAUj3iD/WpL0=
Subject key identifier: DC:BA:B8:5B:54:D7:83:A7:E5:67:5E:E7:AE:C2:D0:20:3D:4D:19:B9
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 01976D3E4FC553614EAC9EB3651E96DB7E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:01:29 +0000
Manifest this update: Sat 14 Jun 2025 07:01:29 +0000
Manifest next update: Sun 15 Jun 2025 07:01:29 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: IKQsZF0uL5T/wNm4H1ajkTgQQ+MvDFYUfk6aiwRCovA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:4f:c5:53:61:4e:ac:9e:b3:65:1e:96:db:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Jun 14 07:01:29 2025 GMT
Not After : Jun 15 07:01:29 2025 GMT
Subject: CN=dcbab85b54d783a7e5675ee7aec2d0203d4d19b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:dc:88:c3:b9:6f:43:02:74:9c:4e:d6:a5:
ee:1d:37:c0:87:2a:de:ed:8b:14:23:8c:75:a4:d1:
c7:52:1b:a1:8d:47:fe:bf:a9:f8:3d:aa:0a:5f:15:
bf:3f:4a:a8:ec:11:60:e6:fe:c2:13:ba:3a:12:52:
65:91:3d:01:2f:eb:2b:36:77:0a:5b:97:29:a3:ee:
63:c5:b6:2b:af:68:dd:36:16:a8:55:62:ef:95:fb:
b4:24:0e:e9:1f:68:0d:fa:86:55:c8:43:d0:c8:1c:
b1:99:43:53:db:aa:db:91:6a:ed:c6:24:c3:ee:b9:
6e:af:90:42:1c:71:95:9f:b6:3e:06:0c:0c:9c:e5:
7d:56:a7:39:23:c3:ce:bf:d8:30:57:4f:82:11:4c:
90:d6:66:58:cd:a6:cd:44:e0:b3:9b:b6:d7:94:73:
7d:a1:59:7e:79:3d:3c:62:58:0b:da:e4:82:08:39:
87:d8:e9:6e:f8:cc:90:e2:a7:b1:bb:18:9c:7a:9f:
3b:a2:85:7e:17:a3:4b:38:10:6a:7e:03:d6:ce:bc:
e0:3c:ec:ad:7c:de:01:8f:4a:f4:85:f8:da:b4:2d:
f8:8c:04:32:85:db:04:c3:f0:0f:ef:74:64:8d:f7:
e9:c8:b7:40:70:a0:ac:57:60:f3:b1:fa:e9:e7:c4:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:B8:5B:54:D7:83:A7:E5:67:5E:E7:AE:C2:D0:20:3D:4D:19:B9
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:21:95:0c:85:2f:24:47:99:57:ea:f8:2a:94:e3:ac:8a:a8:
d3:5c:c4:39:3f:60:12:38:4e:d2:11:1a:13:e7:ba:89:ed:19:
87:58:44:33:bf:6e:67:de:f7:7c:43:3d:09:ca:aa:52:fc:bb:
14:05:9c:15:66:db:57:14:a7:23:aa:8a:07:5f:a0:f0:a6:d5:
72:6c:f6:86:b8:26:05:67:68:c2:f6:23:a3:80:5f:94:80:97:
3d:da:a1:d5:de:93:d4:c7:06:db:aa:73:41:ce:19:d3:85:4e:
d0:5a:c3:0a:54:6e:87:a9:9a:5c:20:47:1a:99:ec:08:03:63:
fa:70:10:e6:ea:9c:aa:5a:74:15:2b:22:4a:40:e6:5f:a0:86:
84:48:14:81:25:37:3d:94:33:a6:1a:48:53:fd:11:1c:1b:a1:
48:2e:fa:b9:24:52:fe:21:eb:17:5d:1f:e4:9d:3f:b0:a7:93:
f8:65:4c:6b:12:b6:8a:ec:f1:9a:1d:7c:ca:62:6b:86:71:40:
cd:8b:c1:86:24:c0:4c:88:1b:fd:6c:98:d4:42:7f:1f:a0:34:
bf:ea:a1:19:75:06:be:d3:92:1b:9f:31:97:2d:c1:f2:8c:da:
29:ad:22:c7:f6:55:50:5e:83:1f:e3:68:67:4b:e0:2d:b6:e2:
6a:f7:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:51 2025 by rpki-client