Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: Vj2m0idKg+YDwT3Vji3Ygu2mnK63rbvdRaZrfx4Hm3M=
Subject key identifier: EE:94:9C:A5:92:45:C2:BB:51:2B:06:33:53:7F:53:80:DF:EE:98:8C
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 01989F39FB2D8AD8C6DC32BBD1CDDA0C2FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 04F4
Signing time: Tue 12 Aug 2025 17:00:33 +0000
Manifest this update: Tue 12 Aug 2025 17:00:33 +0000
Manifest next update: Wed 13 Aug 2025 17:00:33 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: Zbmjau38hp3Tw5gI3AugABbDa5EGZt/8+8rWIwnKAv8=)
2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:39:fb:2d:8a:d8:c6:dc:32:bb:d1:cd:da:0c:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Aug 12 17:00:33 2025 GMT
Not After : Aug 13 17:00:33 2025 GMT
Subject: CN=ee949ca59245c2bb512b0633537f5380dfee988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:9c:90:fd:07:21:5f:80:fc:35:44:0b:02:
3b:4e:b0:b5:b2:5b:aa:86:49:d4:93:a6:12:1f:8a:
8f:94:7a:30:86:b8:bc:12:cc:0a:cb:35:d2:1c:9b:
35:03:1b:24:cb:72:f8:94:44:ab:8f:40:07:4a:80:
47:f7:ed:bd:9e:b3:e3:fe:77:5e:a8:52:60:bc:d3:
15:ae:60:32:84:60:0b:9f:6f:fe:d7:0b:3f:24:dd:
fc:f0:b0:15:fa:3b:1a:5f:ef:83:4a:c2:3d:fc:21:
40:aa:39:f0:8c:40:eb:19:2c:a0:a7:d8:6a:da:6c:
4e:02:53:13:ec:73:3d:97:e3:f7:a9:42:3a:b4:da:
2c:6a:bb:5d:83:27:dd:31:f3:c5:06:26:56:7a:94:
13:fd:8d:eb:03:dd:91:65:00:3b:5e:d2:ac:38:4b:
a4:cf:d1:25:45:05:2d:df:8a:79:94:98:73:c1:34:
ad:47:a2:18:0c:24:db:70:7d:e1:85:e1:e8:f5:ed:
b7:23:97:a8:b5:d4:b1:0a:20:a4:5f:dc:e4:11:39:
ce:72:69:16:3f:98:50:fc:31:47:ae:62:43:52:14:
0f:9f:c3:54:ed:05:d5:14:8e:e3:8f:c1:6a:41:57:
57:2e:33:63:9b:a9:ed:8d:a3:20:94:ea:45:f0:9a:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:9C:A5:92:45:C2:BB:51:2B:06:33:53:7F:53:80:DF:EE:98:8C
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:0c:94:42:b4:75:36:d8:59:dd:f8:31:5e:a0:44:48:a0:
c0:d0:2c:08:b4:ef:75:1a:ad:9f:9d:23:bd:39:da:02:27:92:
c9:9b:10:41:7c:79:b0:6f:fd:e9:9f:a1:b4:cc:27:fa:f3:5a:
e2:41:86:48:58:cd:0c:f7:c1:e0:b2:ee:09:31:ed:d1:00:f6:
eb:e5:34:f5:91:f8:6a:ae:a4:90:cc:a1:8f:c8:c6:cb:af:70:
a9:03:4c:c1:01:be:6d:bc:f4:d1:23:81:33:9f:1d:3d:66:33:
9e:0a:00:aa:03:7e:50:b9:8b:23:64:b5:4f:d3:8b:10:21:9a:
a2:4b:76:a9:36:fa:5a:23:38:04:0a:f7:99:d9:97:89:01:ed:
17:d0:05:c0:9f:35:c5:0d:75:3a:0b:73:43:75:09:7b:2b:d8:
79:3a:b5:f7:09:b0:57:ba:97:2b:89:9e:a3:13:0b:99:3b:7a:
0e:05:eb:67:9b:e9:0f:b6:d1:d2:45:8e:e5:68:b2:21:e9:e9:
cd:dd:9a:37:2a:5a:dc:4a:cf:81:f9:20:49:6d:ac:d0:43:cd:
fe:c8:75:18:aa:e1:d5:ee:a9:2a:60:70:e3:55:17:d7:bb:71:
88:55:9c:18:79:0f:29:90:df:93:10:ff:c8:ae:e1:e7:5f:81:
35:57:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:05 2025 by rpki-client