Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: ii0kQf/lFAz3UPY8ZP5KS/cu/fPcJA2PK+hD4+kORbM=
Subject key identifier: CA:FF:40:97:FE:08:D5:9A:7A:55:D3:22:2A:CB:39:21:48:17:C7:BC
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019873E2BF45BEA0DD5C3F53C84368E2A6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 049B
Signing time: Mon 04 Aug 2025 07:01:36 +0000
Manifest this update: Mon 04 Aug 2025 07:01:36 +0000
Manifest next update: Tue 05 Aug 2025 07:01:36 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: VdtHAZ7YjlgGWrHBWDPMS7b6RP9gohrTS9KYTOd6zS0=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:bf:45:be:a0:dd:5c:3f:53:c8:43:68:e2:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Aug 4 07:01:36 2025 GMT
Not After : Aug 5 07:01:36 2025 GMT
Subject: CN=caff4097fe08d59a7a55d3222acb39214817c7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b2:a0:fc:aa:50:06:92:9f:13:d6:b3:35:a8:
d6:09:26:35:cc:ea:28:19:ab:4d:48:04:b5:26:ed:
b4:72:32:81:bf:38:1c:19:97:9c:90:6d:3b:5e:15:
9a:51:37:7b:43:72:69:58:81:08:d0:0b:9b:8c:a7:
2a:ba:96:e6:0f:06:cc:e9:0e:58:eb:9c:4f:55:af:
1d:2d:84:39:84:6c:ce:88:8a:ae:89:90:2e:0a:fa:
ea:9f:f9:20:23:79:fc:20:5f:b4:a8:83:26:a6:53:
1c:3d:2c:5c:3b:28:28:c6:e6:ce:54:0c:27:3d:9d:
a1:f8:6e:21:f9:96:8f:3d:c5:59:79:c1:a1:22:ba:
0f:e7:7f:37:ae:59:1d:23:d6:ab:cb:20:e7:ba:e4:
1b:39:25:9c:a6:1d:2f:68:1e:30:1a:cd:32:e2:10:
09:c3:ae:33:2d:26:0e:10:92:e9:bd:07:5d:d4:77:
60:a6:af:98:1c:51:1b:99:94:0d:d4:9c:dc:ba:f9:
4c:65:c5:39:40:34:5e:c1:9e:91:33:9a:71:36:20:
d8:4a:11:80:01:01:12:61:cd:d9:d8:3f:fb:ee:6b:
37:9a:20:59:ed:59:09:70:00:47:76:d1:3b:b4:db:
79:80:89:4d:96:18:11:4f:46:a0:69:43:c3:09:ae:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:40:97:FE:08:D5:9A:7A:55:D3:22:2A:CB:39:21:48:17:C7:BC
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:29:f9:1f:2c:b9:ae:d6:a0:59:cc:60:50:bf:cb:db:51:
57:98:00:f1:08:e2:b8:7b:7d:c5:99:94:9f:e2:bc:e3:4a:cc:
a0:6c:65:8c:82:dd:ff:f8:aa:a7:e3:25:15:d0:11:f3:e7:f2:
76:75:df:46:1f:40:55:f3:3f:7b:34:f6:45:f0:0f:05:56:1d:
7f:73:be:0b:ba:9b:9f:66:18:b0:32:6a:18:ae:af:a8:bd:a6:
9b:6f:d3:da:84:c0:51:92:f7:0d:66:50:f0:e3:ad:84:4c:89:
be:e3:ea:57:ae:92:88:ef:d8:e1:97:18:03:02:7b:2a:bd:c4:
52:da:87:cb:93:95:b6:26:93:c4:ed:35:c1:0e:2b:70:43:3b:
e6:cc:b9:d9:e9:8f:1e:d6:42:41:6b:b9:aa:5b:0b:38:7a:f2:
96:e3:cb:7e:95:89:cc:94:5e:fd:d3:68:eb:c1:85:11:d8:87:
af:f8:11:51:0a:fc:d8:e0:bd:86:8a:b1:29:a0:fa:77:07:99:
ad:fb:e3:a4:5f:a9:82:80:1e:64:96:b1:69:d7:8c:13:b4:78:
28:20:6e:8d:d4:71:69:32:19:71:c3:4e:dd:61:20:32:f9:d6:
a9:29:61:de:ff:1a:92:fd:63:e4:37:d4:01:3e:b6:32:6b:c8:
9f:2e:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:30 2025 by rpki-client