Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: BCttOAEbioHwOj8qcCnrnqilAtwn1/2IFs7V3gvMHpY=
Subject key identifier: 84:17:36:E1:33:C1:55:EF:10:39:5A:18:5C:ED:A5:69:3C:28:09:AE
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019897139F988BF2E842AEF64D9D12AA42B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0DAD
Signing time: Mon 11 Aug 2025 03:01:42 +0000
Manifest this update: Mon 11 Aug 2025 03:01:42 +0000
Manifest next update: Tue 12 Aug 2025 03:01:42 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: IwDXpYmDtCUa/b1qswegxATerpzvm0gTuruUcA65v3A=)
2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:9f:98:8b:f2:e8:42:ae:f6:4d:9d:12:aa:42:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Aug 11 03:01:42 2025 GMT
Not After : Aug 12 03:01:42 2025 GMT
Subject: CN=841736e133c155ef10395a185ceda5693c2809ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:82:98:c2:9a:7b:7b:ea:1b:a4:75:cb:1c:
5d:75:82:e3:27:ed:85:b6:25:46:8b:02:44:d0:d5:
ea:93:54:1f:68:a3:c6:cd:cb:fb:70:d4:1d:05:54:
67:3f:7b:92:3c:4f:25:ef:30:32:e2:30:a6:73:3f:
3e:04:21:90:df:4d:30:f0:48:62:ad:b5:3f:ce:03:
db:da:2f:b8:58:a4:9f:66:35:2f:ed:c9:21:f1:d4:
8e:95:3e:86:42:bd:b6:3c:0c:96:86:76:c9:d8:11:
2d:21:0d:4c:73:d5:86:3f:60:cc:0f:15:62:6a:28:
ae:94:87:a4:cf:c3:cf:f3:85:bb:88:a3:26:0e:72:
be:44:3f:a9:bf:42:79:a6:d4:ad:8e:5f:69:1d:db:
0b:0c:60:26:70:24:09:14:dc:5f:29:44:e9:68:c7:
a6:8c:55:20:cd:fc:2b:57:9b:e7:db:f0:19:25:ba:
dd:e3:b1:96:38:bd:bd:ee:25:de:f6:97:e3:b3:ce:
aa:9d:60:65:cd:d6:6f:c3:8c:22:7f:44:dc:4d:57:
14:d4:c6:eb:16:60:0e:d8:c2:32:b6:ed:5f:6a:d0:
c6:a4:9c:8e:49:4e:35:60:0b:f1:66:a2:c7:34:3b:
99:9f:5f:12:a4:50:2e:b9:7f:50:8d:70:8e:67:1a:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:36:E1:33:C1:55:EF:10:39:5A:18:5C:ED:A5:69:3C:28:09:AE
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:41:6e:34:a6:29:31:da:c2:87:7a:40:91:39:64:0c:bc:
28:c8:01:36:56:92:db:47:a9:bc:3b:2d:13:c3:2a:e3:5a:25:
fc:f8:0f:88:88:b7:75:f9:9c:3f:b6:21:ef:ea:fa:8b:59:ee:
7f:34:f3:d0:c8:4f:e7:d3:a0:2d:d3:e6:79:05:18:9e:f7:73:
7d:56:0a:8a:39:ae:36:7a:0d:ff:48:b0:66:db:1f:0a:48:78:
48:65:9b:96:60:c2:f3:f3:14:af:e2:3d:32:db:45:7f:ab:01:
dc:97:48:ec:d1:f9:92:06:20:31:ff:b3:13:2a:70:14:1a:14:
0d:5f:d2:3b:f2:76:e9:84:94:f5:3f:f9:7c:68:bd:35:b1:52:
86:30:ae:ee:d3:05:bf:5d:16:87:f0:63:17:83:40:60:f9:b3:
e8:3a:8b:15:7f:62:76:3c:24:25:79:9d:28:bc:ed:36:5b:5c:
a1:c7:79:e5:19:24:a4:23:4f:6d:1a:84:ec:81:5d:b0:dc:df:
a3:fe:63:ef:1e:ca:b3:c4:f9:bf:2a:93:1c:3c:ab:41:19:69:
93:f0:a3:74:48:ba:3b:1f:30:7f:18:c2:fe:70:34:ce:cd:6a:
06:d3:ce:a1:a0:fe:d9:58:ba:a5:de:fb:1e:ec:59:79:c5:6f:
01:87:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:15 2025 by rpki-client