Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: FaR31WFe5AOOPjBm43kPbyG9KOIWJFgHUOzvlJm0OPM=
Subject key identifier: 2C:49:60:81:FA:83:9C:8F:06:24:95:1C:5E:D9:C1:43:A8:E2:AA:13
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0198808B4F9115753380166C35391C4AA3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0D0F
Signing time: Wed 06 Aug 2025 18:01:10 +0000
Manifest this update: Wed 06 Aug 2025 18:01:10 +0000
Manifest next update: Thu 07 Aug 2025 18:01:10 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: Yxu4rAiC/XRGYkDdkPYs7OJbJXDATr0vHSVc+QYNuPM=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:4f:91:15:75:33:80:16:6c:35:39:1c:4a:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Aug 6 18:01:10 2025 GMT
Not After : Aug 7 18:01:10 2025 GMT
Subject: CN=2c496081fa839c8f0624951c5ed9c143a8e2aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:3d:2d:9e:1c:09:98:39:df:49:fa:c8:45:
e0:81:c6:45:7c:37:58:06:cd:9d:e5:46:7d:cc:c7:
c3:47:e3:12:bd:1c:74:e9:e5:f9:f0:4d:16:a3:fe:
35:20:f8:ed:13:c1:96:db:ec:df:af:b6:b4:d0:57:
97:a3:a0:0f:6f:96:fa:a9:53:90:c8:d2:6d:fd:25:
89:7b:69:0c:bb:ce:76:cc:96:d4:ce:60:5f:39:06:
ff:79:cc:64:17:d5:5f:31:32:d6:cf:c2:bf:15:f3:
79:bc:ff:57:57:be:59:bd:7d:9f:b3:9d:ab:04:26:
35:f4:4f:6d:8b:1a:26:83:cd:1f:b7:48:a2:c7:15:
9f:e3:38:93:e9:d8:9a:b1:8a:8f:1c:11:c6:a6:c6:
bb:7b:9d:76:0b:5d:ac:ac:8c:19:f4:94:3b:f4:dd:
93:98:47:62:a1:d8:b4:59:fc:31:4b:66:8d:13:6d:
99:00:b0:08:43:12:3b:3c:40:c7:37:aa:61:c2:50:
5f:72:90:c3:e9:5a:34:a9:a7:ad:9d:3b:33:ab:be:
4c:2f:d7:77:9b:45:fd:e8:a1:b6:87:e9:c6:db:bb:
0e:50:84:2f:6b:b8:63:e4:66:62:e8:b7:13:c3:8e:
57:af:22:ac:2b:02:12:fd:a5:e2:06:05:44:1c:9f:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:60:81:FA:83:9C:8F:06:24:95:1C:5E:D9:C1:43:A8:E2:AA:13
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:e2:62:6a:41:2e:1f:cc:e0:f5:17:cd:d8:50:44:1d:0b:
9e:6d:43:89:3f:37:49:25:8b:ee:c5:de:d5:d1:0b:76:84:32:
2c:7a:f3:fd:1e:65:37:44:cf:90:34:ff:86:bb:11:a4:65:72:
a4:06:27:ce:80:2e:40:2e:04:c6:ca:0b:c9:fc:94:3c:4d:2c:
88:ee:f3:69:f9:c3:88:af:b8:96:01:40:e6:2a:5b:a9:56:7d:
06:42:f7:a0:31:fa:8d:e8:85:5a:83:0c:79:a8:e0:76:ff:84:
88:6e:34:cc:62:59:f8:c0:76:1d:e1:c3:bc:9c:40:76:24:12:
c7:2e:ff:1f:d0:0e:01:59:cb:bb:ab:2a:ec:a7:72:9f:dc:73:
03:5b:52:72:00:c1:27:2b:c8:9f:f9:ea:b4:3d:bc:42:85:24:
72:0d:c2:86:3c:79:12:6f:77:a0:5b:fb:78:df:15:ec:00:34:
2d:80:c9:63:e3:cf:a7:e1:87:ce:b5:a0:1f:61:a1:c0:3a:e9:
7b:a1:91:32:90:af:94:3a:26:38:9f:f9:df:b9:ac:ab:35:9f:
c3:c5:71:ef:bd:ec:5a:cb:dd:af:16:13:3d:e9:43:36:5a:49:
4e:04:00:a0:4a:08:cc:b3:81:9b:27:7c:1c:97:7a:73:8c:fe:
af:d5:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:27 2025 by rpki-client