
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: zZNB6kTLaSPz/hUeedxxgla0kaICOzJ2BRTGQ2hAMyQ=
Subject key identifier: 5E:0D:A5:46:A3:3D:A5:46:86:BC:12:D0:22:75:5B:5D:F0:2C:09:AB
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 019872D0203713D72C447616ED37C52792C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:38 +0000
Manifest this update: Mon 04 Aug 2025 02:01:38 +0000
Manifest next update: Tue 05 Aug 2025 02:01:38 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: oZ4abuaSo3Jt9Nft2UCH3kwJbx9BQZx6u8HpwhZjoYw=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:20:37:13:d7:2c:44:76:16:ed:37:c5:27:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Aug 4 02:01:38 2025 GMT
Not After : Aug 5 02:01:38 2025 GMT
Subject: CN=5e0da546a33da54686bc12d022755b5df02c09ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:38:36:7d:36:30:26:37:f0:20:0c:ff:12:
62:fe:61:da:ba:db:ef:46:05:f9:51:9a:7e:e0:ee:
58:7f:61:ee:6c:b1:54:6c:62:1a:9b:ee:1d:df:ab:
da:06:30:55:cb:4d:45:c8:f5:46:df:d3:6f:00:e7:
62:f9:44:2f:0b:bd:f4:7b:93:93:ef:9d:1d:b8:f9:
28:f8:b5:02:86:f0:2d:91:3d:fd:9a:82:fa:d1:dc:
26:f3:c8:f3:63:3e:7b:cf:e4:44:76:bb:32:98:c4:
54:a0:10:50:c7:a5:63:93:c7:2d:36:f9:e3:09:fc:
a6:24:93:63:4c:05:b0:f9:cf:50:6a:00:6a:bc:ef:
7b:c1:0f:13:5b:95:f5:5d:b7:44:1f:62:e2:e9:f7:
b6:ad:0d:58:b1:71:fd:35:a4:e8:ce:db:f1:d4:26:
3a:71:dd:b5:45:1c:ef:2b:c5:9f:49:3a:c2:a5:a6:
e0:fd:35:78:10:ad:38:a4:d2:3e:4a:ff:b2:e8:2a:
54:fc:2d:71:81:33:d8:06:5f:bf:f0:20:ce:25:dc:
02:3f:2b:c5:38:96:11:a1:07:23:c6:2d:18:43:ed:
45:8c:37:07:c1:0b:fc:a3:03:fc:04:05:11:ce:a8:
4e:7e:81:a1:a6:b8:29:ca:0c:85:c6:12:3a:bd:fb:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:A5:46:A3:3D:A5:46:86:BC:12:D0:22:75:5B:5D:F0:2C:09:AB
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:27:38:31:45:1a:62:51:18:9d:a6:74:15:8a:ac:f5:12:18:
1d:80:80:9d:d4:69:97:00:02:6e:07:7d:cf:39:91:47:0a:47:
cd:55:b0:9e:fd:d2:d4:bb:11:d0:61:0c:b6:68:4a:60:b7:bd:
f7:3e:dd:33:5c:56:3d:3e:a7:b8:1f:e9:c8:33:56:8f:da:8b:
3c:ba:e5:33:b5:10:05:e6:d4:4c:2e:46:5a:c6:48:8a:81:55:
db:48:6c:29:7f:04:0e:41:90:11:82:a3:aa:0e:21:91:e0:5a:
9c:27:3b:fc:c5:89:fc:5a:ca:d9:b3:bb:6c:f3:2e:c3:b2:a5:
a6:91:33:27:84:33:8d:37:0c:0d:d3:d6:04:7c:be:52:fa:ae:
1f:31:d3:9f:0b:fb:aa:75:85:23:ae:e1:37:f3:e1:93:42:d1:
ad:8b:15:7b:ba:50:e8:1c:10:ba:c9:f0:89:ec:de:84:39:54:
8d:cb:9f:42:55:88:f1:df:81:d6:a4:98:97:93:e8:e7:37:21:
62:cd:94:c1:88:d7:7c:ea:22:03:d8:14:b5:73:d9:94:40:10:
8c:d6:86:0c:18:a9:f7:8d:29:63:38:43:59:bc:30:cd:66:bf:
7f:f4:94:5f:21:59:8d:63:48:a4:a8:80:ba:67:ae:61:1a:b8:
1e:9c:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:38 2025 by rpki-client