Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: iRPfVmX3itqRIM1JPMJgXzwt9UBUKnSMul0fk1aeXk4=
Subject key identifier: 13:96:6A:09:DF:24:FF:D1:A1:2C:F1:5C:91:1D:C3:50:6F:F7:AE:3A
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 01988BEA5765F74D3AB13535CEEDC4288D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 050B
Signing time: Fri 08 Aug 2025 23:00:47 +0000
Manifest this update: Fri 08 Aug 2025 23:00:47 +0000
Manifest next update: Sat 09 Aug 2025 23:00:47 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: hP5ItMkocG7cKNuYg7R+1qGUxD457z/aP1LG341+iA4=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:57:65:f7:4d:3a:b1:35:35:ce:ed:c4:28:8d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Aug 8 23:00:47 2025 GMT
Not After : Aug 9 23:00:47 2025 GMT
Subject: CN=13966a09df24ffd1a12cf15c911dc3506ff7ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:a9:cd:50:d5:29:63:91:66:50:10:c4:c9:
ed:c4:60:bb:b5:f7:ef:54:c8:a2:09:4c:1a:00:10:
74:4a:25:da:c2:94:16:9d:71:e0:80:21:f9:cc:22:
c0:09:e8:c7:e3:c3:bc:94:0d:1b:fc:bc:cb:f8:56:
b9:53:51:3a:e6:f8:a8:a8:29:25:37:34:a6:5b:10:
32:35:78:75:52:e8:c6:c0:e1:09:95:4b:72:f4:49:
a0:6b:06:f8:27:7b:79:83:05:f1:7b:37:81:8b:a9:
9e:78:72:a7:11:c4:38:27:d1:f9:db:0b:0f:76:d2:
63:57:a9:39:ff:db:8e:09:68:13:34:95:21:cc:c5:
4f:ec:3d:c9:8a:a8:76:07:63:d4:6a:5b:ad:49:6f:
af:d5:b3:4a:ff:c7:ab:1c:23:15:7b:a1:a2:8e:0f:
4d:ee:90:d3:3d:14:bf:f8:60:91:15:85:2d:f4:43:
aa:2c:61:fe:eb:19:6e:fd:27:61:7a:e4:6a:cd:c4:
ee:3a:4d:e5:33:ae:39:15:9e:ac:f9:3a:e9:e7:f0:
6f:7d:a2:8d:96:38:9a:5c:ea:53:bf:c0:c0:04:9e:
da:73:7f:74:fd:ea:8b:55:3e:df:47:9c:42:ad:26:
11:47:31:97:79:9a:cd:28:9b:d4:51:59:a8:23:d3:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:6A:09:DF:24:FF:D1:A1:2C:F1:5C:91:1D:C3:50:6F:F7:AE:3A
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:70:d0:a6:a9:df:a6:a3:e2:2b:51:7c:dc:f6:b9:c4:f0:73:
1c:b3:de:79:dd:dd:25:aa:9c:00:df:7f:3d:dc:1f:88:b2:2f:
09:10:eb:96:b4:6a:3f:73:8e:bc:22:33:59:17:12:d8:69:0e:
1d:5b:55:d1:8b:de:41:c3:b6:20:fe:9b:a5:e9:e0:1a:d0:50:
27:4c:8e:24:6d:5d:44:25:f8:8d:a1:9a:92:8e:d3:1e:60:74:
58:8b:34:91:4c:ed:62:c8:89:26:c7:43:eb:b0:e8:cb:34:8a:
34:e6:6f:b8:ea:22:f1:ca:28:4a:8b:cd:cb:fc:d8:af:b7:0f:
8f:5e:46:08:94:50:c9:d3:81:e4:70:40:35:84:de:87:1c:7f:
c9:ca:33:c0:8b:75:c1:b6:6c:b1:a5:3a:75:ed:ab:16:ee:84:
54:79:ae:d0:1b:65:7e:5f:c0:cf:39:a3:82:b3:9f:2d:72:f8:
f3:81:47:28:85:bb:4f:25:43:60:d4:d0:d5:d0:ae:e8:35:f9:
8c:a0:8d:02:cd:a2:a3:39:4f:d0:bd:dc:8e:ee:98:9e:fa:a5:
2b:e0:e2:04:d7:5a:44:f6:3d:cb:13:a4:c1:e1:12:b8:59:f8:
70:ed:63:4d:64:40:ff:8c:2a:42:b6:66:62:dc:9f:fd:4a:da:
b5:66:a2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:44 2025 by rpki-client