
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: atsotQsx87m4T0ZVuoAEsZ/LfoVIfxrtGMCmEM+zSWY=
Subject key identifier: 24:FA:18:FE:4A:EB:24:AF:85:A1:2F:FA:E3:0B:A9:B9:A9:63:CC:F0
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019893A490AA8F06F9D748F5C884E33889D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 05C5
Signing time: Sun 10 Aug 2025 11:01:32 +0000
Manifest this update: Sun 10 Aug 2025 11:01:32 +0000
Manifest next update: Mon 11 Aug 2025 11:01:32 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: Ha8OMgvUzLs160EMmsKtVNZNvienbTb/vI5ovtKxiok=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:90:aa:8f:06:f9:d7:48:f5:c8:84:e3:38:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Aug 10 11:01:32 2025 GMT
Not After : Aug 11 11:01:32 2025 GMT
Subject: CN=24fa18fe4aeb24af85a12ffae30ba9b9a963ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:ed:5c:42:04:a5:4d:66:2d:96:30:26:25:
3d:73:98:e9:ee:f4:e5:4a:8a:86:f8:ca:7b:f0:96:
95:bd:2b:71:8d:61:54:f2:94:b2:a1:f6:a7:e9:ed:
29:94:0b:53:78:4c:b1:99:61:6e:74:dd:5d:be:67:
22:84:69:9c:22:09:5a:46:ae:79:f1:a4:96:99:ee:
e2:5a:a9:06:2e:be:22:5f:58:fe:d4:69:7c:b3:84:
62:33:61:1a:31:41:c9:60:3d:d8:70:df:02:8a:c1:
58:34:9c:7b:b8:56:f2:76:cb:09:26:f7:01:52:78:
96:e7:07:c6:85:93:16:15:77:bc:d3:64:5f:08:85:
4d:02:53:a5:db:a9:1a:2c:84:1f:70:92:e1:94:9f:
e7:63:ad:cc:72:4b:84:1b:fa:1f:bf:d8:41:49:fd:
30:4c:48:16:02:cf:e2:08:3a:2b:70:e7:dd:60:95:
ca:46:69:55:11:de:dd:1f:fd:c4:22:67:fe:d3:ea:
10:25:36:7d:22:cb:c2:08:c0:e0:99:8d:6b:bf:3c:
01:bb:cc:ab:44:ed:06:81:88:08:19:34:39:99:26:
3d:47:95:4e:ec:49:49:2f:d3:50:21:20:07:2b:fb:
49:e7:14:ac:90:cb:8e:99:0c:91:05:24:ae:10:03:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:18:FE:4A:EB:24:AF:85:A1:2F:FA:E3:0B:A9:B9:A9:63:CC:F0
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0d:4c:26:e4:73:60:b8:74:3a:14:6e:d9:f9:e8:8d:b7:b8:
84:7b:43:1a:33:ba:06:58:e5:27:a6:c7:1f:d9:e3:1c:c7:01:
b7:a2:2a:16:d5:50:4b:83:fd:df:e3:72:81:6a:08:83:81:59:
77:7c:fa:78:2c:35:db:47:6e:bf:f9:4e:53:be:04:83:2e:a5:
2f:80:93:37:cf:e5:2a:6a:10:7e:f7:3c:e3:6e:0c:15:e2:26:
a3:95:0c:2d:1d:a9:60:0a:e1:6a:74:2a:1b:bd:d8:4b:29:cb:
f5:75:86:00:7e:da:d0:df:ed:83:27:e2:26:47:9e:f8:5e:6a:
f9:4a:8b:80:35:da:c4:ab:7e:a1:2b:79:7d:45:00:19:4e:0e:
4f:6d:b4:b5:ab:27:51:21:db:7f:d3:52:14:01:32:05:fd:88:
1e:96:dc:13:c0:05:da:bf:53:5c:f2:52:06:ca:75:2e:2c:ac:
fb:91:f0:98:c4:70:15:54:5c:3e:8a:1b:c9:16:80:ac:9a:34:
1c:69:b5:7e:5c:1a:07:fb:b4:5b:39:4b:db:c4:e2:66:0f:ec:
9e:1f:85:04:c1:4c:26:26:16:57:38:7e:3c:f7:df:12:0b:36:
29:c8:4b:62:a6:f4:37:98:68:ea:b7:58:2a:4a:58:a6:ff:a2:
4a:87:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:23 2025 by rpki-client