Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: mFjgWfJcv7PtTQmoFzdA6Xb43+9L7t2EP/HfoykjjAg=
Subject key identifier: CE:B8:2B:C0:FF:24:85:71:6C:EE:AA:D2:25:82:75:D6:BC:C9:8B:0A
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019881D5317F426A38CC94814B1FB72436E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0698
Signing time: Thu 07 Aug 2025 00:01:29 +0000
Manifest this update: Thu 07 Aug 2025 00:01:29 +0000
Manifest next update: Fri 08 Aug 2025 00:01:29 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: Cpj9clYUpsuFGdINy4TBFDaobLfkECbxILSkr5fyyWA=)
2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:31:7f:42:6a:38:cc:94:81:4b:1f:b7:24:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Aug 7 00:01:29 2025 GMT
Not After : Aug 8 00:01:29 2025 GMT
Subject: CN=ceb82bc0ff2485716ceeaad2258275d6bcc98b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:b9:5e:5a:e1:b3:44:bb:0f:4c:2d:07:ac:
32:7d:cd:28:68:02:d4:f2:93:cb:5e:eb:94:81:97:
c9:2f:60:ad:a1:2f:c2:64:d5:d4:35:6b:76:30:e6:
34:50:c7:53:cf:50:6b:d3:10:00:23:57:cf:d2:62:
6d:9c:ab:46:53:26:44:9d:3f:b1:f1:b2:8c:c2:98:
91:7f:52:a6:f3:d7:4c:ae:0e:3a:9f:d6:3a:d1:31:
ae:a4:7b:6d:2c:29:04:63:b2:f7:21:db:a4:59:2f:
b8:72:6a:79:c2:c7:c8:98:13:57:d5:b1:95:a2:57:
f8:db:58:09:85:34:a7:5d:31:61:2d:37:37:5b:a9:
56:6e:e1:55:43:c3:ed:62:45:d4:9c:f4:87:d6:fe:
55:b5:f5:54:2e:0a:0f:8a:c9:6e:49:d5:b4:e3:d6:
01:25:6f:37:96:58:a1:39:bd:f4:66:66:9a:2f:76:
8c:a1:40:8c:e4:fd:4c:5b:44:0c:a2:0a:ed:a1:1a:
fd:92:45:0c:71:cf:a1:e7:d1:2d:16:6d:fe:ae:fc:
bf:7f:9a:ae:c8:69:5c:a9:b8:98:44:90:1c:cd:97:
41:07:e7:43:38:c5:8b:86:96:70:14:42:c5:ec:f2:
72:a3:4a:e0:73:a8:f5:ee:26:a0:43:2d:f4:6c:20:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:2B:C0:FF:24:85:71:6C:EE:AA:D2:25:82:75:D6:BC:C9:8B:0A
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:b4:d5:48:0b:e7:5a:4a:da:84:0a:5f:4a:2d:89:d5:76:
d4:c6:41:c8:15:dc:bb:09:0a:35:18:7f:af:e4:86:5b:cc:f5:
a1:04:ea:9f:d4:45:03:34:33:e6:40:87:13:c7:d1:8f:48:e5:
76:36:af:c8:98:1b:a8:27:11:73:1c:23:fc:26:6f:41:15:1a:
d5:09:1c:ae:08:cf:6a:1e:c7:eb:53:e8:40:95:a1:d0:7f:0b:
9e:7a:13:5d:0e:97:5a:d7:1f:5c:32:37:9d:9b:23:a9:5d:f7:
8b:e3:82:de:3d:b2:d8:ee:1a:a6:31:f7:c3:eb:d1:64:47:09:
4f:a5:9a:c7:63:05:cc:1f:ec:19:c9:18:6c:57:b7:be:c6:3f:
d6:dc:d0:fe:1d:af:99:30:11:ed:05:3c:d1:d7:02:cf:5d:6d:
a7:0b:ad:ff:ff:a8:7c:fc:4f:7f:7d:17:15:d3:b6:83:f9:49:
40:c4:06:d9:87:ef:3c:a2:87:ae:d6:4b:00:0f:aa:aa:68:60:
d3:52:7d:c1:06:8d:d7:51:d1:43:1f:13:bb:44:9a:6f:22:a7:
44:c3:0d:04:37:9c:fb:50:1b:35:6e:19:9f:80:e8:a9:be:6c:
38:91:df:40:b1:ef:6b:3a:6e:d8:b8:6e:18:31:98:68:0f:b2:
1c:16:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:18 2025 by rpki-client