Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: UDVQuNjEZVtzBkr9A3DY2HNCwS1hJGfi1BZVsexEQDI=
Subject key identifier: 5A:4B:82:6D:C3:A7:EB:64:8A:55:28:FA:9C:99:D5:27:0B:FB:E5:A0
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 019768BC40F8BC1655E2B5AB5263BFB40A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0AE5
Signing time: Fri 13 Jun 2025 10:00:57 +0000
Manifest this update: Fri 13 Jun 2025 10:00:57 +0000
Manifest next update: Sat 14 Jun 2025 10:00:57 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: lsaNkbnIMKnKA2fitDG5pBVxfppcVCiWU1YRKWtqWm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:40:f8:bc:16:55:e2:b5:ab:52:63:bf:b4:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Jun 13 10:00:57 2025 GMT
Not After : Jun 14 10:00:57 2025 GMT
Subject: CN=5a4b826dc3a7eb648a5528fa9c99d5270bfbe5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:50:d1:12:ef:d8:90:fe:43:13:73:8f:51:
19:01:ff:44:d5:5c:e4:05:e6:5a:1a:b1:77:b2:d3:
92:bc:71:fa:65:7d:be:ae:95:b3:0a:7c:cd:2d:a2:
50:35:01:a5:f9:91:3c:5d:bc:59:02:d0:99:9c:c4:
4e:23:8b:c2:04:6b:24:f1:e8:4e:ed:8a:60:10:d1:
19:4b:eb:22:9f:2b:dc:77:60:05:67:2b:58:f7:a5:
6d:4a:32:e3:ee:74:84:b1:00:b7:5d:7c:b1:92:e5:
46:33:85:98:16:ff:a5:66:bf:87:44:57:83:23:a8:
92:9d:6e:41:bc:2b:3a:56:3d:c2:0c:8b:92:3e:f6:
08:7d:41:08:27:82:6b:82:97:b2:20:c7:14:06:6e:
1f:49:fd:4d:26:31:de:30:a6:4a:1a:bb:50:e3:bc:
49:d6:b1:a1:37:97:67:f3:1e:ff:e3:62:1a:e1:c0:
de:e3:17:60:43:94:66:e6:7c:ba:4a:27:7d:96:12:
4c:23:f0:54:ab:d0:10:81:1a:d2:c5:a3:99:06:86:
9c:e0:52:c8:40:2c:ea:da:b9:3f:0c:3f:d2:2f:2b:
26:d8:25:c9:67:6b:e5:2e:e1:59:10:54:1d:b8:ad:
ad:27:c2:2e:f5:23:af:60:94:28:0e:52:c4:9d:d6:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:82:6D:C3:A7:EB:64:8A:55:28:FA:9C:99:D5:27:0B:FB:E5:A0
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:73:1d:30:87:f3:b4:fe:9a:17:ac:c5:cf:86:1e:d1:63:
ab:ae:ce:47:65:c1:ac:77:69:f1:19:ec:0a:55:00:06:b0:5d:
8c:c9:ec:9e:d3:31:52:df:d4:d8:7e:fd:20:94:79:cc:de:88:
c4:14:b5:9a:c1:d7:44:e7:fd:16:ca:da:f6:27:ae:8a:a6:c7:
4e:e4:b7:49:86:a5:5b:77:32:97:a6:6c:d8:55:83:6c:d2:bf:
76:21:65:33:ab:94:96:fc:4a:d9:4f:40:31:3b:90:70:6a:5a:
45:48:84:72:49:29:c1:d1:57:99:d8:04:45:ce:a2:43:38:3e:
f4:e1:85:30:5b:a6:d6:93:e7:e6:23:e0:b7:a8:91:b7:14:7b:
17:c0:ea:db:2a:c0:83:f9:b0:41:a3:f1:d0:a2:f0:89:6f:81:
19:dd:a4:45:a3:1e:a3:3e:c0:9a:0f:a8:bf:1e:ce:e6:29:7f:
d9:54:d7:d3:89:18:1a:3b:b9:1e:78:2a:f8:3c:4d:01:bc:9c:
0c:d7:18:e1:25:25:5c:d5:ef:24:a9:d7:63:0c:be:9c:67:e1:
e7:0f:34:84:00:37:ed:2b:94:71:40:96:4c:51:60:3e:84:6c:
6d:94:55:bd:d3:e1:28:8d:f2:7d:46:aa:5d:09:89:cf:19:b1:
9b:53:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:48 2025 by rpki-client