Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: lqLHNrYW/pI1vPo3Fz/JJ22H3mVHp0SVKBtn9gacw/M=
Subject key identifier: 76:8C:45:6E:29:8E:A3:B1:22:A5:05:17:40:30:8A:7D:CE:F7:F0:23
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01988AA09FC94D83A15B8CB18EC24EA971F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 17:00:39 +0000
Manifest this update: Fri 08 Aug 2025 17:00:39 +0000
Manifest next update: Sat 09 Aug 2025 17:00:39 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: hdDEbeqdl+s7+0NahFSlele6j1M+qyR4PvpX4DstBfc=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:9f:c9:4d:83:a1:5b:8c:b1:8e:c2:4e:a9:71:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Aug 8 17:00:39 2025 GMT
Not After : Aug 9 17:00:39 2025 GMT
Subject: CN=768c456e298ea3b122a5051740308a7dcef7f023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:b2:bd:2f:19:c1:56:f2:60:3c:20:1e:0e:
9b:e7:53:57:c5:d9:5c:91:c3:6b:82:16:cf:a8:45:
20:e9:78:7c:ce:6f:07:d6:44:3c:03:88:5f:a4:ee:
72:b2:9b:1c:ab:d1:02:af:48:a9:87:61:82:d9:7a:
fb:f0:e3:17:88:df:f6:45:c0:eb:e0:38:39:aa:b6:
b7:2c:0d:af:81:99:22:7c:06:c7:a5:5b:a6:eb:13:
9e:14:af:20:85:7d:27:ac:c4:43:50:7b:da:0a:37:
1a:72:62:51:c5:be:bd:af:30:0f:56:da:d8:18:30:
9d:fd:18:bb:75:1a:e5:e9:75:45:18:a4:c0:21:82:
c4:ab:5f:44:ff:90:1d:f1:04:7c:b3:0f:7f:d2:c2:
d4:2d:4e:9f:93:c3:ad:38:90:40:71:80:8c:f7:e3:
b2:37:b3:75:82:d9:65:85:f8:64:09:59:5f:a7:52:
9a:d2:70:68:2b:f4:7d:45:f8:ce:48:a6:e5:21:e4:
1d:88:f5:5d:9b:a2:5f:70:66:1b:3b:eb:bb:49:9e:
e7:a5:d9:6d:0c:76:0a:e3:49:9c:c2:59:aa:5c:44:
d7:53:39:dc:f7:74:6e:84:24:a7:a5:d0:2d:61:b1:
65:56:c9:f5:f3:79:14:be:15:8e:b4:b9:16:a3:87:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:45:6E:29:8E:A3:B1:22:A5:05:17:40:30:8A:7D:CE:F7:F0:23
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e4:f8:1a:ab:d5:90:a1:d3:01:04:e7:d3:7b:ad:8a:9d:63:
14:86:d0:5d:cb:5b:de:46:bc:83:88:90:88:c2:89:13:fe:e8:
f9:7d:ee:96:48:4c:70:02:b6:29:a9:f3:4d:f4:c4:d3:bb:86:
70:39:76:42:92:ff:d1:c7:42:f2:5d:6d:20:fc:5e:9a:b1:d2:
b1:14:e0:c2:f8:39:af:e7:35:fb:e0:00:89:df:bd:bb:83:d5:
4f:3f:5a:bb:09:1e:18:dd:e7:c6:22:87:e7:d2:06:95:2c:2f:
f4:82:a9:da:89:0d:f1:f4:03:db:50:21:1e:21:4f:29:7d:f4:
5d:fe:d4:c3:bc:b5:38:fc:01:29:aa:50:10:40:f2:71:b9:f4:
82:2c:ee:8d:e8:c4:53:ad:f8:1f:48:b3:76:96:05:83:c8:86:
cb:52:a2:22:d2:49:15:fd:f2:4f:b6:5e:27:3b:25:80:ed:a3:
a4:7c:88:e3:25:69:43:fd:5d:2e:2e:d2:cd:a3:3c:7a:69:b2:
c4:a2:00:60:a7:3b:83:6a:76:2f:d8:fb:da:b9:69:34:35:30:
be:c3:36:c9:d3:45:2b:83:de:f2:66:0e:ee:80:5c:96:ad:99:
5b:d1:56:2a:bb:ff:31:a7:1f:3c:e5:a8:d3:bd:a0:58:3b:26:
a5:6c:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:53 2025 by rpki-client