Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: Et6wfhyF5Wdr8uSOewtYU+uJlVhV1TrgYuNdcgZGVBg=
Subject key identifier: D9:18:98:98:AA:B8:7C:43:B3:9E:07:78:F9:8E:93:58:DF:50:56:FB
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 01987C09AFC4E0867C077C040EA4101601A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 12C6
Signing time: Tue 05 Aug 2025 21:01:06 +0000
Manifest this update: Tue 05 Aug 2025 21:01:06 +0000
Manifest next update: Wed 06 Aug 2025 21:01:06 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: 416F0bvUIi13t7wtq8zLv8Trbq7mYZO68mg0ppd6ws8=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:af:c4:e0:86:7c:07:7c:04:0e:a4:10:16:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Aug 5 21:01:06 2025 GMT
Not After : Aug 6 21:01:06 2025 GMT
Subject: CN=d9189898aab87c43b39e0778f98e9358df5056fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:db:39:63:91:e7:51:82:14:f4:41:df:e2:
69:ff:c1:af:e5:db:fc:80:0c:6b:d3:89:22:a4:84:
3e:3f:56:ec:d5:0e:dc:6a:d6:2b:70:03:bb:b6:58:
b0:15:11:da:28:dd:ee:b7:4a:52:3e:82:14:1c:0a:
03:79:96:a6:5e:d8:7e:47:ef:3a:12:58:97:cf:db:
9c:ff:27:37:97:36:24:c2:b2:a7:15:12:d9:00:2a:
b8:00:5d:64:0e:9d:9a:bc:de:53:94:bd:b3:92:f6:
48:95:3a:6a:45:15:06:8a:da:6a:5f:b9:6d:b2:88:
74:d6:95:6f:1b:d7:e1:1b:aa:cb:63:93:fa:26:a2:
05:2a:c7:2c:4a:6f:3e:24:41:80:25:4e:94:6b:df:
f7:f4:09:d8:e3:85:fe:85:39:21:3a:97:0a:1a:35:
87:99:65:7f:93:ae:f7:8e:d2:22:a4:79:d1:4f:65:
32:da:39:ea:30:9b:65:ca:23:bd:2b:d6:e4:56:92:
5d:ef:a6:68:58:24:6b:79:98:df:1c:be:2e:f6:3f:
3c:5d:88:06:35:16:8e:7f:8c:17:58:f6:3f:8b:26:
da:37:20:39:18:3d:fe:8c:2e:6d:0b:6b:7e:86:8d:
59:dc:ec:5d:ff:c5:07:ec:87:78:26:8b:df:a8:b4:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:98:98:AA:B8:7C:43:B3:9E:07:78:F9:8E:93:58:DF:50:56:FB
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:b0:74:b8:6f:53:2c:b6:f1:00:86:a0:4d:6d:20:89:62:
ae:24:50:41:b0:cf:8a:e8:b7:5b:7c:ab:25:38:5c:b0:3b:68:
ba:12:69:42:d3:5e:72:a5:f7:b5:31:94:52:64:63:34:be:44:
31:5e:45:5c:e1:24:f0:18:a2:2f:9c:4e:14:c6:21:ac:40:b4:
22:ed:d2:22:35:69:95:4a:7c:d5:5e:2c:cd:ac:e4:c2:af:37:
3d:d2:68:c2:05:18:fa:5b:2d:4c:9b:fa:51:90:e7:a0:07:ab:
df:42:6e:62:a0:6f:ec:86:eb:da:78:9a:a6:66:78:eb:95:51:
37:f1:3c:6b:f7:0e:e3:25:e2:37:7b:56:d8:68:b9:2e:ca:e6:
24:8e:a1:9a:74:e8:6b:aa:e2:5b:d3:69:1b:9c:2c:b1:0e:9b:
18:0e:5d:0f:2a:08:1f:ac:26:61:88:56:ab:61:6a:63:cf:93:
80:cc:01:88:a6:52:27:9a:d2:a6:dd:b9:bd:1b:ea:fe:51:25:
f9:23:ff:5d:79:c7:18:7f:a9:76:04:c8:e1:cc:46:ef:5d:10:
38:4d:7b:99:81:02:ae:21:f0:46:51:c4:c2:54:78:d0:1c:18:
b5:d0:35:20:12:3f:a7:04:3f:08:8c:b1:45:47:3c:0e:1b:fe:
d1:96:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:11 2025 by rpki-client