Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: eOSloVb+GOg2NZY7V7NGDS/sCEy/Jeg2UgzRwIsdVv8=
Subject key identifier: 6D:EF:79:B2:6C:9F:F7:97:45:45:6B:E1:5E:D8:43:B7:44:27:EA:70
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 01987A1B64759E3140F53E55F53679F3EF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 05AD
Signing time: Tue 05 Aug 2025 12:01:12 +0000
Manifest this update: Tue 05 Aug 2025 12:01:12 +0000
Manifest next update: Wed 06 Aug 2025 12:01:12 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: s0trvvGWCN7hVh+d3n2w7mtyAP1R8FdRw57D5Ui2nBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:64:75:9e:31:40:f5:3e:55:f5:36:79:f3:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Aug 5 12:01:12 2025 GMT
Not After : Aug 6 12:01:12 2025 GMT
Subject: CN=6def79b26c9ff79745456be15ed843b74427ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:5d:f3:51:0b:e7:e4:b8:4c:9a:b0:ee:5d:
ae:a4:47:67:d9:40:5f:da:be:03:b4:c2:7b:b5:c5:
13:94:29:82:e2:2e:95:23:db:a9:66:de:76:ce:0b:
13:6b:63:ec:2c:de:30:90:20:5f:a6:93:a5:9d:a0:
5d:64:c3:3e:fe:88:a2:7c:14:b2:bd:fc:25:ae:4d:
7c:54:75:0f:ef:c8:2f:c5:d7:65:54:1c:6e:6f:80:
4f:c9:b6:70:02:05:af:55:d2:e0:c7:78:54:8b:9c:
7b:4f:dc:18:d8:a4:fa:a2:2f:a9:cf:14:1e:33:34:
87:b3:c7:46:14:3d:6b:b1:d2:7b:95:7a:39:5c:7f:
b1:b0:09:fd:c6:fe:d3:5d:92:30:fe:6d:cf:b8:bb:
69:ef:b2:78:e8:5d:dc:4d:1d:69:13:51:39:03:1c:
e6:86:4e:50:8a:e5:67:b0:49:02:9a:b2:86:25:e5:
d9:da:30:91:e6:98:02:88:f8:a5:a9:93:10:a3:49:
ca:00:e1:9c:99:70:f6:5e:e9:c3:a0:0f:9e:64:ab:
ff:a8:af:23:2e:5c:09:07:0c:87:44:26:e3:49:e0:
7c:77:10:89:60:69:89:95:24:95:3e:f7:a0:ba:3d:
d5:e2:50:b6:a5:96:ba:19:b1:4a:c9:be:b6:8a:4c:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:79:B2:6C:9F:F7:97:45:45:6B:E1:5E:D8:43:B7:44:27:EA:70
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:ff:d1:41:c9:18:bb:8b:9f:55:97:04:f6:43:8b:ec:e2:
a9:17:ec:b1:9c:80:c4:72:b1:da:5f:54:81:46:87:55:e2:8d:
59:7a:6a:92:6f:15:2b:b9:3b:af:c0:78:d0:7c:5b:c3:ef:27:
9d:8d:af:f6:c7:47:8a:2f:0a:fb:b5:aa:54:90:e4:89:c3:3d:
02:be:5b:79:97:c5:1d:df:c8:93:09:32:be:8f:76:9e:8c:89:
b3:bf:43:c6:3d:77:d8:a1:89:37:33:4a:97:a9:03:f7:35:ce:
45:f4:10:63:6f:e8:bd:ac:bb:46:07:92:3c:50:9d:19:61:20:
33:e5:5e:c7:da:41:36:7d:6a:e8:10:b5:af:dc:b8:e8:7f:ca:
73:50:20:ba:b6:9a:58:0e:79:27:6f:4c:ef:a9:bb:3a:fe:1e:
28:23:0c:1b:79:eb:69:72:e4:02:63:4d:2f:7d:c7:39:6a:7b:
e2:64:69:45:b2:61:a7:52:40:8f:bd:fb:17:bb:39:62:82:f2:
a3:33:83:7b:97:d5:a7:b4:05:ae:da:44:bf:e9:0a:35:bd:03:
68:21:f8:98:af:38:d3:fc:ce:34:d9:53:e1:b6:ab:f4:b1:36:
8e:76:2b:3d:7b:39:7e:bb:fe:97:75:02:91:41:e9:4f:c2:e2:
fd:62:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:43 2025 by rpki-client