Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: IVcjeJN+HEd2ZEqhy77hEd1DuY8jEpAHNsEkZ1gnFq0=
Subject key identifier: 48:A4:52:C6:03:A0:08:AC:DB:BC:3A:B9:A1:1D:13:1C:18:FC:75:FA
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 01989223E77F410F8D0CDF2E4890563CB890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0B7F
Signing time: Sun 10 Aug 2025 04:01:23 +0000
Manifest this update: Sun 10 Aug 2025 04:01:23 +0000
Manifest next update: Mon 11 Aug 2025 04:01:23 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: QiR0MfuqoyVJFhQZ9MUf7qtfbMQvcQW6Qk0ItwxxtXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:e7:7f:41:0f:8d:0c:df:2e:48:90:56:3c:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Aug 10 04:01:23 2025 GMT
Not After : Aug 11 04:01:23 2025 GMT
Subject: CN=48a452c603a008acdbbc3ab9a11d131c18fc75fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:6d:b0:d9:59:b1:e1:88:5d:c8:59:36:1a:
03:4f:d9:4a:da:47:d0:9f:e5:64:4e:40:c0:eb:af:
39:1b:7e:9f:bb:7d:97:3e:72:9b:95:2e:a3:71:3f:
b6:ca:18:ad:5a:f7:eb:b8:d9:b0:a7:42:92:a4:bd:
15:c7:55:20:49:6a:37:d5:85:dc:7b:60:d3:03:b0:
ab:ab:db:c4:53:64:f4:88:33:5f:8c:be:22:b1:3c:
ae:e2:d1:6c:cb:c5:49:5c:1d:15:cc:8f:37:3e:d3:
3e:8a:3e:3c:cb:71:6f:b0:10:4b:fc:fe:08:69:be:
c4:2d:51:3c:ec:08:da:52:69:db:1d:ad:0c:97:3e:
4e:6b:24:6b:8b:7c:c7:bc:57:1e:75:7e:79:23:e7:
ca:ce:dc:e5:7f:0c:9b:a6:ba:18:fe:ac:4a:6d:dd:
4e:6f:78:c2:00:32:5b:67:11:71:8f:59:f0:c2:2f:
d6:18:53:76:03:65:99:df:8e:02:58:3b:1e:ed:89:
91:db:a0:da:c7:99:fa:0d:ec:1c:17:d1:94:0a:81:
4c:42:1a:ca:ac:23:7a:48:3a:91:e8:02:70:d2:b0:
d6:e1:12:0f:2a:dc:3a:31:95:b6:2d:32:b0:2c:75:
a1:16:11:b2:cd:e2:89:6d:7c:a9:2e:e4:82:95:36:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:52:C6:03:A0:08:AC:DB:BC:3A:B9:A1:1D:13:1C:18:FC:75:FA
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:86:f6:7b:e3:a8:7f:3a:99:ca:2c:03:5f:f1:92:52:03:
c8:68:5c:e7:66:87:aa:49:d2:5c:97:98:26:b8:ad:65:52:5d:
a4:45:5f:5d:0e:ef:9e:ee:cc:6e:bf:2a:ab:97:e5:b8:4d:5c:
17:58:89:a9:b3:a0:4e:92:09:a7:70:60:81:dd:1f:e8:9b:70:
80:38:f9:37:fe:3b:e6:26:68:89:67:a7:a0:2a:24:0c:a8:81:
9a:a0:a7:2a:28:18:93:d0:6b:d3:42:9d:7b:f5:b2:66:9d:c7:
4a:cd:17:af:c0:90:0e:83:38:2e:23:2e:77:9f:d8:70:78:4e:
f5:b8:87:33:22:9d:16:75:60:7f:bc:0d:9a:ef:91:f8:d0:d3:
d1:75:51:0b:4a:55:6f:d0:a5:ca:f3:ed:6c:12:5d:31:ef:f2:
e7:32:f8:3d:3b:15:2b:e7:cc:f2:76:74:82:e4:83:d6:0a:01:
9e:89:6b:9e:50:60:98:ae:5c:ba:b7:8f:81:dd:7c:5e:6a:5d:
e3:14:70:ff:88:55:9e:d9:26:0b:23:6c:af:61:ab:16:8a:ab:
2e:36:d8:81:55:d1:46:41:d3:b8:00:37:59:43:68:d9:72:e9:
76:17:bb:24:bb:3f:5f:5e:0d:a0:66:b5:ed:53:7e:3b:cd:79:
42:0a:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:16 2025 by rpki-client