Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: 9svk3HOIM3x6FYaYgoo7w10IB56GiYByzbEv/QdJ/Ek=
Subject key identifier: B9:5E:6A:B6:19:9B:FD:57:5E:17:B7:F3:CC:07:D0:92:20:B9:55:BC
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 019880F8D29A7FB2F8F5D436DD776F4B49E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0E22
Signing time: Wed 06 Aug 2025 20:00:47 +0000
Manifest this update: Wed 06 Aug 2025 20:00:47 +0000
Manifest next update: Thu 07 Aug 2025 20:00:47 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: RDjWWu3VmpLGLC/ZSxg9QsSUI7/bHhmZuVzMr+qpWc4=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:d2:9a:7f:b2:f8:f5:d4:36:dd:77:6f:4b:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Aug 6 20:00:47 2025 GMT
Not After : Aug 7 20:00:47 2025 GMT
Subject: CN=b95e6ab6199bfd575e17b7f3cc07d09220b955bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:ad:7e:16:69:be:a0:0c:05:b4:93:59:75:
b8:85:63:54:02:23:dd:5d:84:cb:bb:a5:46:91:72:
46:a0:68:9b:00:a1:9f:ae:9d:1a:07:6c:60:d0:fa:
61:78:6e:9b:03:32:86:11:23:e5:60:a9:d2:f8:b2:
71:fe:eb:97:5e:b9:e1:05:d8:2c:5a:e8:df:b4:4d:
5f:83:d4:c7:b4:6e:fd:e3:f3:2a:02:8d:e9:e5:85:
a1:90:b0:a3:ff:07:4d:20:66:df:78:5d:f6:be:9b:
8e:86:ec:75:1b:c4:84:aa:f8:35:fc:b2:fb:03:fd:
ab:c9:62:a6:c1:1f:d8:eb:57:66:5e:68:28:4f:15:
2c:b9:7a:72:e1:b6:8d:49:3e:55:d7:05:28:7f:ed:
ea:b3:8a:7d:15:6e:cd:74:54:fd:b8:15:eb:73:47:
ca:e3:b8:2f:70:a9:87:36:c9:20:b5:80:ee:77:f4:
54:f7:58:a9:a7:1e:fd:57:50:ca:c0:e6:ef:3f:75:
1c:8b:fb:22:b4:e8:f0:7d:c1:2b:dc:23:4d:42:e1:
1a:9e:d8:85:4e:4b:e3:27:b4:e4:ec:e2:87:5e:58:
89:57:ad:5b:26:2c:ee:a8:6f:3a:c5:37:ee:8e:38:
d6:06:96:5a:10:a9:a0:4f:97:d5:b2:7e:56:96:da:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:6A:B6:19:9B:FD:57:5E:17:B7:F3:CC:07:D0:92:20:B9:55:BC
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:88:e2:a7:73:52:0d:db:f1:de:aa:49:ee:00:24:ac:62:df:
00:83:ae:96:f0:49:23:b7:7f:bf:6e:7f:39:3c:b1:d0:4f:96:
65:f1:96:3f:be:d1:07:04:f4:62:6a:d5:bd:81:93:b8:ed:71:
63:36:65:9a:a0:a6:ec:62:e9:73:04:d7:d3:95:e1:a8:a9:2b:
00:e9:de:88:fa:a6:31:5e:56:d8:33:c7:e2:69:fe:18:0d:5e:
40:86:1c:bf:75:44:23:a7:e4:6a:16:2b:85:3c:4b:4e:d5:7c:
ab:3f:82:f8:86:47:ca:a5:c3:04:24:37:07:56:17:51:ce:bd:
63:36:ff:a2:7e:c0:3f:b6:d1:7f:6a:a0:5f:af:fa:e9:49:db:
d9:79:f9:11:34:94:23:e8:73:c2:c1:47:14:80:60:2e:ed:69:
a0:67:47:ad:92:e7:36:2d:ad:b5:fa:a8:bd:16:b6:5a:8f:f4:
18:e6:e2:89:3d:78:52:be:fa:d7:0f:97:1c:84:7b:9c:e3:74:
00:04:99:09:5d:11:04:8d:00:eb:ba:93:f5:87:8b:f1:60:ef:
50:f6:63:27:b7:56:bd:e4:61:4f:e2:3e:7d:5c:2a:ce:c8:e1:
65:dc:43:a9:d1:84:73:68:41:1d:5d:97:b2:93:32:74:19:23:
41:22:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:53 2025 by rpki-client