Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: LHLwxXfPLV3/AJn3v6w2NasFuHasAlnSqgrS5/RlYQA=
Subject key identifier: A4:EA:46:6E:5F:F3:2D:AD:A3:3C:F2:7C:0C:A2:E5:88:91:D4:B9:A1
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 019874195672EA679B886AA2274115B74B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: 3zdo2v/nfrzxL88F2WoqqcRbPyWAO1UoJkbYWZhVokI=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:56:72:ea:67:9b:88:6a:a2:27:41:15:b7:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=a4ea466e5ff32dada33cf27c0ca2e58891d4b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:df:9c:1b:25:78:ae:ca:b1:e2:5c:3d:4b:
66:7b:38:83:7f:5e:a3:ae:b2:b8:7c:ea:e5:17:b1:
ea:8c:68:19:6b:41:2c:d2:a3:bd:97:ca:95:9a:ce:
ef:12:e6:56:79:72:06:5e:d8:f7:97:f7:19:7b:09:
6c:f9:fa:b9:3d:b4:2a:87:ec:5f:b9:28:5f:53:20:
b6:0c:09:09:bd:39:73:6e:6f:06:51:11:1f:24:08:
64:d6:7f:1c:18:9f:1e:57:78:1d:7f:9d:5d:e2:66:
56:ad:03:c9:be:0b:ca:39:cc:14:b6:2c:42:de:01:
6a:7a:62:87:5a:84:5c:4c:33:be:4e:df:6a:44:6f:
27:7e:ff:da:8a:70:d8:7b:8d:94:82:c3:51:52:7e:
53:6c:eb:d6:94:d6:84:89:ac:b9:e3:7b:4e:4e:7f:
15:b0:84:ff:70:3f:45:97:05:2c:77:eb:2c:80:0a:
3a:8c:da:09:55:0c:3f:a3:fd:39:4a:8e:13:d7:f1:
b4:16:54:82:10:f0:a9:a8:a8:72:80:e6:3c:c7:76:
a5:3e:b8:c7:83:a9:10:f0:08:90:b4:7f:84:ef:df:
0e:21:19:27:b0:93:b7:76:55:fa:f7:a6:1f:92:59:
8d:2a:2b:c3:86:b7:a4:70:4d:2b:e1:4e:60:58:ed:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EA:46:6E:5F:F3:2D:AD:A3:3C:F2:7C:0C:A2:E5:88:91:D4:B9:A1
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:81:b8:bb:d1:8f:cb:40:c0:8e:92:c3:e3:cf:cc:76:1f:3f:
e6:59:e2:58:d6:bf:af:16:ee:e9:79:68:23:5b:8b:80:7e:b0:
ee:36:91:be:ab:99:1b:e0:a4:dd:b9:9b:cd:82:c0:da:62:f9:
3f:6d:90:ec:08:2a:bc:3b:4d:19:d0:b5:f6:b1:3f:67:75:ce:
4f:a7:38:67:fb:7d:df:69:07:33:6f:09:28:36:31:73:0d:04:
02:89:6e:5b:2e:35:2c:87:be:f3:09:f1:02:85:37:e9:11:1c:
da:24:81:f9:fe:00:1c:34:b6:8c:67:90:82:3a:28:50:56:24:
f7:b8:39:2b:56:e9:08:5d:c6:6e:d8:74:bb:f9:21:ea:88:f4:
73:72:1a:80:15:91:41:d1:40:39:f8:20:f7:aa:33:73:3b:60:
d1:d7:f3:2e:0e:86:aa:c4:4c:e5:8a:f2:01:67:cb:f1:3c:01:
a4:7f:ba:b9:f7:e8:54:bc:a7:06:a6:fb:d0:ab:30:28:9d:a7:
b6:3f:f3:8b:7c:5e:ef:bc:c0:ad:1d:da:fd:21:10:5d:9f:a9:
df:7f:62:18:98:51:0a:e8:f4:8e:57:0d:ee:10:4c:32:b7:08:
97:a7:a6:59:b5:50:66:52:e1:74:0a:d2:c3:c9:bf:2c:cd:90:
7d:4c:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:17 2025 by rpki-client