
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: D+IppBMFplpWK5IkSuqTXr77jkMIavrfrclCEarFd4A=
Subject key identifier: D9:BA:A9:AF:F6:40:F4:CC:4C:31:B1:88:80:31:5F:22:67:D7:10:EF
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019873744FDC8C75878950F5450793D4CA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0D20
Signing time: Mon 04 Aug 2025 05:00:59 +0000
Manifest this update: Mon 04 Aug 2025 05:00:59 +0000
Manifest next update: Tue 05 Aug 2025 05:00:59 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: X8CsfPLT9B8esKWyrikC6czZurpvN9RC7cNMys4jbSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:4f:dc:8c:75:87:89:50:f5:45:07:93:d4:ca:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Aug 4 05:00:59 2025 GMT
Not After : Aug 5 05:00:59 2025 GMT
Subject: CN=d9baa9aff640f4cc4c31b18880315f2267d710ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:fb:c6:8e:53:76:4e:3e:b0:f8:9a:af:1d:
c7:66:c4:f5:d0:d6:db:23:a9:4b:e4:aa:57:f8:1b:
86:ef:19:b5:ba:c0:8a:a6:39:4e:d8:56:c4:58:78:
ad:76:25:88:da:b3:5a:23:72:49:bc:df:79:31:51:
93:bd:11:e4:89:07:26:fb:d0:6c:0f:c4:2a:cc:79:
3c:06:9a:a7:c9:83:53:24:e1:f7:6b:50:b5:bb:79:
71:72:db:e3:ef:e4:43:3f:6a:5b:58:7b:c6:28:9c:
23:95:9f:e0:a5:39:d5:1c:db:32:1f:a9:12:fb:2f:
00:c2:36:e4:e5:4d:59:7d:05:ce:39:07:77:5d:5f:
7d:4a:c5:32:ee:7b:e3:91:e6:6c:da:cb:79:3a:4a:
d7:04:30:29:68:c5:e0:58:cc:9a:d4:45:19:68:dc:
ec:be:7a:22:08:d9:55:9d:99:fd:e4:5c:ea:a8:7c:
de:b1:1b:39:e2:0d:59:a4:e1:ec:bf:bf:89:e4:46:
8f:27:86:e4:b2:af:47:4f:58:9d:d4:fb:11:61:ba:
39:92:a2:40:13:e7:9d:49:43:40:6d:dd:63:b0:2f:
61:66:93:fc:69:eb:7c:02:a8:cd:b9:fc:40:ee:b6:
b1:e7:57:1c:4d:74:7d:1a:34:17:92:84:5b:18:ec:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:A9:AF:F6:40:F4:CC:4C:31:B1:88:80:31:5F:22:67:D7:10:EF
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:c6:ec:8d:df:51:3d:ba:d6:c6:cf:90:a5:58:10:94:94:
7c:c5:87:fd:e7:27:dc:a6:fb:a7:0e:9b:98:84:08:33:97:7a:
73:15:af:6d:0e:d1:ba:dc:e7:2a:3b:bf:34:7b:23:1c:08:29:
19:17:e8:e0:78:aa:c8:e6:16:45:b6:7d:1b:8f:51:4e:f5:1d:
2c:e1:0e:88:74:3d:b8:9e:ab:c0:72:33:25:33:d7:21:0f:cb:
fa:43:08:fb:be:41:85:df:4b:c7:6b:84:7b:97:a8:55:38:40:
d6:50:6f:bb:f2:a6:e2:bf:f4:99:55:24:3d:22:c0:ee:fe:fb:
12:bf:e1:bb:41:5a:f0:d2:fc:4f:5f:12:ea:0c:47:66:0b:3e:
89:17:7a:2b:c1:cc:ea:5a:88:24:d3:53:eb:d2:d8:b1:4a:82:
af:a8:d1:fc:4e:cb:3a:53:e7:04:da:e1:39:f2:36:dc:b4:86:
f5:fb:a3:27:d4:5d:c1:97:51:b1:a5:d6:61:15:ad:69:5a:8d:
05:af:53:03:9e:3e:89:54:a8:41:e8:0f:1a:17:0c:58:55:35:
35:8b:ae:7e:1f:61:83:d5:cc:c0:78:57:e0:3a:26:8e:81:74:
73:9d:aa:10:08:07:f0:3c:07:57:e3:83:d3:1c:b4:49:59:03:
4e:e6:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:38 2025 by rpki-client