Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: 31iRpSlmSkY0/O3jeVMq0/cMkKRZVgpBEm+TnfPaOJk=
Subject key identifier: D9:5C:22:2A:3C:71:D3:F6:D6:78:6C:CB:66:6C:7A:4D:B8:36:5F:22
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 01987FE6D718EF318F6507D3D5BDCFC6E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 15:01:31 +0000
Manifest this update: Wed 06 Aug 2025 15:01:31 +0000
Manifest next update: Thu 07 Aug 2025 15:01:31 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: 9JcUjVUgdrhZdxbDovE6qJ9yEDh3Gldqj5ZKMI1fO0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:d7:18:ef:31:8f:65:07:d3:d5:bd:cf:c6:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Aug 6 15:01:31 2025 GMT
Not After : Aug 7 15:01:31 2025 GMT
Subject: CN=d95c222a3c71d3f6d6786ccb666c7a4db8365f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:a8:28:6d:29:30:6e:09:96:7a:96:ea:75:
ca:73:53:58:ae:6f:34:e5:14:b4:7d:7d:a4:2c:e7:
f9:19:29:33:60:fb:b0:59:bb:81:63:e1:f9:a0:3a:
e3:1c:52:b6:88:68:0c:62:5e:95:dc:93:85:f5:82:
e2:dc:17:c0:1b:35:2f:c8:e1:2a:41:9b:d2:f0:51:
95:e7:6a:55:a0:5b:fa:0a:3e:27:dd:5a:f8:9a:54:
7e:f0:cd:8f:e4:05:7a:12:ad:f3:24:55:cb:05:82:
90:59:04:74:7d:96:7f:54:91:ab:4e:e5:89:26:27:
c6:f6:4f:2c:e0:27:dd:8f:0b:2f:49:e2:20:71:07:
16:5c:2e:11:dc:91:5f:82:f2:36:12:9c:53:15:e7:
85:ee:f9:6d:98:c6:58:af:01:d5:9c:10:62:71:94:
7c:4e:57:0b:bc:d3:8f:f6:12:09:47:44:41:d2:9f:
d3:ee:70:f6:35:e7:28:96:d1:7b:2a:3b:ef:38:80:
77:86:e2:49:7e:90:ef:12:04:92:4e:d6:38:2e:c8:
e9:52:5c:82:3e:05:c6:0b:e0:e4:fc:ad:49:69:60:
72:f8:51:d3:39:9f:2b:fe:a8:3f:6d:97:0e:46:4f:
25:76:19:a7:a9:95:05:4b:5c:49:5a:ee:1b:fd:bb:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:22:2A:3C:71:D3:F6:D6:78:6C:CB:66:6C:7A:4D:B8:36:5F:22
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:8f:2c:f8:26:ec:2f:23:34:31:a1:34:ec:d6:6b:dc:f0:
26:e9:fb:c8:ff:40:58:1d:ed:93:77:90:72:7e:a1:03:ae:18:
85:34:bd:b8:ea:0f:f9:9e:a3:14:ab:0d:b9:0f:04:29:33:db:
2f:9a:e9:a9:7d:29:ce:a1:92:95:eb:6c:e5:e5:eb:78:d3:4f:
e0:2a:8c:0d:e4:0f:da:75:c0:2d:bc:fc:33:a1:d4:5a:e6:ce:
a0:93:96:7b:cb:78:71:48:69:b9:b4:fb:bc:4a:28:d4:06:b2:
a2:67:e5:02:ed:3c:a3:09:99:8a:11:9c:3d:b5:ab:26:cd:34:
08:97:47:df:35:56:34:6c:27:c0:bd:e5:b4:c6:5a:ef:5e:eb:
43:fc:a3:63:93:81:ae:a9:b5:41:1b:79:cb:56:18:1c:17:82:
66:05:3d:37:9c:ca:8d:0e:b1:76:b4:6d:75:83:9c:9e:2a:0d:
97:f8:3d:cc:26:26:db:08:49:9b:c8:fb:24:02:ae:b7:6d:b6:
db:9c:40:b0:e0:70:46:1a:5f:d7:c7:26:8d:dc:67:58:f9:e6:
b5:4f:eb:62:dd:44:5d:f7:43:6e:6b:f2:f4:27:45:fe:71:2c:
4c:10:48:2a:6d:28:b8:b0:51:96:7a:e9:8c:ce:87:bf:52:2b:
dc:f1:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:18:50 2025 by rpki-client