Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: 6gli++MGdScebtOQq/QvDHamR7pmtD0JWawoWqnPo1U=
Subject key identifier: 83:6A:3F:0B:DB:09:44:42:F2:81:CC:9B:5F:72:38:7D:FE:F7:B8:31
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 0198733D5D7B017F85311F79EB8CB6BAB100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:00:58 +0000
Manifest this update: Mon 04 Aug 2025 04:00:58 +0000
Manifest next update: Tue 05 Aug 2025 04:00:58 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: Gq4inY/UjEdN4vt61kFH7/r5k6DPvnvkFWgKxRVC2dQ=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:5d:7b:01:7f:85:31:1f:79:eb:8c:b6:ba:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Aug 4 04:00:58 2025 GMT
Not After : Aug 5 04:00:58 2025 GMT
Subject: CN=836a3f0bdb094442f281cc9b5f72387dfef7b831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:59:24:7a:15:9b:16:e9:91:23:cc:e9:ad:
03:4d:77:c7:e6:fc:83:fb:00:41:72:7e:be:f4:03:
5e:d9:57:ec:bf:a5:1f:0c:5a:bb:03:11:1c:00:3a:
82:24:ea:e3:5e:64:88:27:ed:39:7c:69:8a:93:f2:
87:c9:23:96:da:52:7b:04:56:0c:17:be:bf:05:9b:
9d:39:48:2d:fb:f3:a7:cd:25:38:e5:47:2b:c1:49:
7b:08:e4:4c:ae:ce:7f:5d:dd:24:bb:98:3c:58:33:
24:8c:c3:35:18:3b:72:06:e3:de:79:e4:b0:68:3d:
8d:a9:26:94:ba:1b:c4:23:f6:75:e1:62:f2:88:0b:
df:e3:69:c0:52:15:7d:c3:3d:39:9d:78:da:57:bc:
e5:f7:b3:9d:4c:f5:2f:14:a6:a0:2a:30:e7:ce:62:
c9:9d:03:2c:8f:69:cc:7f:19:70:d0:6a:60:b7:20:
e3:37:08:01:c1:00:a9:88:e5:ac:b3:27:a9:35:5f:
73:d0:e4:1c:be:00:51:54:f2:ad:9f:68:0d:e1:b7:
f1:09:46:52:88:cc:eb:1d:55:5c:7c:cc:67:f7:46:
9d:05:b5:da:fa:85:29:f7:65:8a:34:44:ee:11:da:
4e:73:b4:e2:87:70:8c:60:ed:56:dc:03:ba:48:48:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:3F:0B:DB:09:44:42:F2:81:CC:9B:5F:72:38:7D:FE:F7:B8:31
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b5:e0:7d:73:05:47:29:86:22:f6:3c:22:45:40:7d:57:e4:
d0:8b:21:84:c3:e3:d8:da:74:54:c0:08:47:cb:a4:42:37:ca:
b0:6b:34:d9:d4:95:20:66:fe:1d:34:96:15:d1:e9:f5:f2:90:
a4:27:10:e3:23:52:05:e9:1c:18:fe:96:de:e7:75:bd:54:82:
33:bd:fe:bf:1a:66:97:e3:f3:f9:db:94:a6:d1:39:77:7c:d4:
4d:75:a1:5d:84:3d:7b:cc:c5:c9:1d:20:3a:4d:e8:7d:b5:02:
67:f6:aa:62:9e:28:65:eb:6c:08:9d:01:2b:45:35:d3:bb:8f:
54:ff:ad:4c:ff:96:4e:20:a6:a4:fa:00:b7:3c:c6:80:da:d3:
38:34:b3:76:66:36:ef:57:b4:d4:43:f9:e6:9c:f2:0b:bc:2a:
77:fb:55:5d:78:04:63:9f:1d:3d:f3:ab:5f:90:ec:96:35:1c:
b9:5c:e9:56:e0:ec:9d:db:04:69:a6:18:02:70:8f:2d:1b:82:
b8:b2:49:db:7a:95:b1:86:e9:9a:01:11:a9:ba:56:f6:54:1d:
52:05:83:2d:10:7a:f4:04:4e:48:68:ef:d5:d5:28:ba:2d:16:
b3:2a:2f:1d:75:01:3f:00:d1:6a:f3:f2:d9:3b:4c:c8:b7:bb:
ed:a1:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:20 2025 by rpki-client