Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: FkD6wyWSD1YcL2Tg7HOq+r7ngaMf7nDs/HeXahQVhr4=
Subject key identifier: D4:FA:C4:47:23:A1:D2:3E:4F:49:81:EB:2C:8F:B8:4B:50:FE:DF:65
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 01987A1B0526C49990D8A2995EE33B38912F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 12:00:47 +0000
Manifest this update: Tue 05 Aug 2025 12:00:47 +0000
Manifest next update: Wed 06 Aug 2025 12:00:47 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: 0ESGzO7ZMWS0Xj4FKbXXhb88DFKcH62cgvN0160qc5E=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:05:26:c4:99:90:d8:a2:99:5e:e3:3b:38:91:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Aug 5 12:00:47 2025 GMT
Not After : Aug 6 12:00:47 2025 GMT
Subject: CN=d4fac44723a1d23e4f4981eb2c8fb84b50fedf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:e1:04:eb:e4:00:a6:0c:55:56:16:21:92:
f0:a7:d8:70:ab:9d:c5:3a:a7:37:03:7b:ef:b3:fe:
0b:0a:82:d0:19:f6:a7:31:2a:6f:13:ba:fb:b6:36:
3b:a2:6d:e1:22:3e:39:36:1d:00:2b:4e:c9:33:a1:
1b:23:95:80:6f:6f:68:c2:f5:72:59:ce:e6:b2:63:
d1:bf:4e:3c:44:00:07:ff:fb:08:38:f1:61:3f:f6:
6f:2a:84:74:4c:f3:29:17:a2:6e:c6:2c:c0:98:73:
0e:12:db:7e:1f:34:79:cb:48:c4:fa:5e:08:a6:68:
d7:94:41:dc:7c:b8:0d:ae:3f:e6:ee:b5:21:bd:86:
0e:0d:77:10:c5:86:cd:bc:bc:2b:9d:f1:99:3d:05:
c2:f0:b0:a4:1d:5c:a9:a7:83:0e:ff:46:c5:74:ed:
c2:5c:23:e9:6b:71:9d:83:ae:30:5a:27:c6:63:40:
d5:c2:9a:5d:56:35:f6:31:57:00:ec:8f:a1:2b:47:
a4:f1:21:bb:fb:02:fa:0e:1f:f9:81:c7:5e:cf:c0:
b2:d7:5e:c4:d3:7c:dd:2a:c1:45:69:fc:86:44:ef:
f2:5f:a3:8a:04:60:92:6c:b6:36:67:0a:d6:ec:a5:
ea:58:f7:49:03:8e:bc:01:34:50:f5:c9:e5:03:e0:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FA:C4:47:23:A1:D2:3E:4F:49:81:EB:2C:8F:B8:4B:50:FE:DF:65
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:5d:6c:e6:3b:99:28:93:b1:d0:df:0f:a5:90:de:13:3e:
93:fa:82:a9:92:c4:05:26:80:08:5b:13:fc:1b:f9:9c:33:21:
c1:4f:af:d1:a0:75:cb:91:74:25:26:8c:5b:f8:f6:58:86:e4:
62:6c:6c:93:c6:78:40:21:a2:42:fb:8e:2d:24:07:7c:3e:3e:
d4:c0:98:33:33:12:ca:bf:e1:bb:32:a6:e0:d5:80:b2:4d:8a:
21:17:1d:4f:28:d8:6e:2c:7b:24:1d:fb:b1:2c:bd:44:48:39:
b7:2f:ba:b2:e3:f6:4d:fa:7c:66:f9:41:ff:43:ce:e3:45:0c:
51:44:00:6c:9b:89:8c:33:2e:26:3d:f4:91:b8:f2:99:06:ca:
01:a3:a8:ff:f0:80:c3:ce:1b:6e:d8:8f:24:ad:46:16:4d:84:
2e:49:b7:f9:17:28:ae:0f:e4:ee:cc:09:d5:e7:80:f8:7f:f2:
54:54:27:c4:fd:e7:0d:6e:22:40:b3:93:2b:54:56:4d:65:58:
7f:04:f0:19:d7:ff:09:fb:5b:8b:47:30:89:2c:36:ab:a0:ac:
91:ea:b8:94:f2:ce:39:23:6f:1e:77:e1:df:dd:06:d6:5b:12:
71:db:f7:72:46:27:80:04:db:d7:c5:5a:58:2b:9a:0d:46:97:
8a:47:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:29 2025 by rpki-client