
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: nq+d9uEPKm9c3VEQF51Ngz7nFFkw+aM5wcIf31/tdT8=
Subject key identifier: 8A:A8:59:35:1B:B3:B4:91:DE:12:F8:A0:27:80:E6:06:E6:73:55:86
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019898259DCD310B61684B2DAC0B5EEEFC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 08:00:58 +0000
Manifest this update: Mon 11 Aug 2025 08:00:58 +0000
Manifest next update: Tue 12 Aug 2025 08:00:58 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: viifTJsvGkw/LZ2eVAxQDpQLCmUF+XTRyvMEAk1Wtic=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:9d:cd:31:0b:61:68:4b:2d:ac:0b:5e:ee:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Aug 11 08:00:58 2025 GMT
Not After : Aug 12 08:00:58 2025 GMT
Subject: CN=8aa859351bb3b491de12f8a02780e606e6735586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:aa:7d:b7:68:2c:96:eb:f1:23:44:64:ae:
02:ab:23:d7:87:29:30:a7:bc:61:d8:03:1b:c6:f5:
61:81:ce:1e:6a:13:ca:ce:70:10:e9:56:96:4c:3b:
95:78:ed:05:4e:30:16:82:90:96:33:b5:21:d2:08:
99:67:01:28:97:92:87:dc:c0:14:6c:7e:74:ff:66:
04:43:c2:dc:2e:6d:fc:19:f2:60:eb:68:80:04:e2:
7e:af:2c:11:1c:ff:f5:8a:46:71:2c:98:be:31:09:
09:12:80:b0:8c:06:f1:c1:45:f2:bf:8f:a4:f5:ed:
d5:1e:1b:72:fa:67:b1:a3:be:2c:ef:c0:14:96:b3:
23:44:f0:9a:50:87:c0:1a:7a:ad:7d:32:7e:cd:11:
ff:af:af:01:4d:63:32:e6:2f:5e:3f:31:a2:c9:f2:
6c:13:78:b4:20:ef:4f:d4:40:67:77:ac:39:13:63:
67:27:78:ec:13:e6:73:b3:cc:07:1e:a7:f9:f3:c0:
1a:eb:1c:b5:a4:9f:9c:8c:18:5c:e6:69:0b:65:9b:
39:3b:30:77:8e:44:0e:55:83:df:11:f1:d6:9a:42:
66:3f:42:b9:ad:99:1f:c8:72:0f:2e:10:7f:0d:30:
76:12:b1:2d:fc:96:75:c4:77:4e:78:31:4b:c3:0a:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:59:35:1B:B3:B4:91:DE:12:F8:A0:27:80:E6:06:E6:73:55:86
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:c8:a4:2c:ce:d5:72:10:a5:12:4d:ad:17:c4:9d:f0:66:
24:aa:fd:20:50:d6:55:28:8f:de:4d:69:0a:ed:4a:11:61:09:
e6:d5:39:ec:8a:a2:c5:fa:7e:28:2c:98:79:19:ab:83:ad:27:
67:c6:d0:43:77:61:4e:12:e9:8b:a5:89:ea:c1:e2:7c:f3:f5:
08:d1:26:63:ff:8c:45:17:6d:5c:ef:d5:16:37:0d:67:8e:69:
82:32:55:9c:ce:f8:f1:fe:6f:34:d3:e1:53:5d:ab:c7:7b:00:
3b:9b:61:6d:90:5a:b5:42:e8:bf:13:60:f1:27:04:c6:14:43:
9a:1f:a8:1a:c7:6c:f8:6f:d5:c0:e0:ab:84:60:ca:b7:ff:2d:
47:8a:68:ab:f3:d8:1f:7a:a5:7e:db:84:71:fe:e2:90:b5:1d:
8e:87:60:bf:6c:c1:b3:a4:ee:74:76:f7:8e:53:c5:3f:00:48:
61:d2:34:df:a2:1e:1a:33:85:2b:36:3f:fb:a0:f7:2d:82:65:
92:ad:9d:e9:17:1e:bd:2a:8d:13:52:d8:eb:03:b2:5e:6f:d6:
c1:93:91:fb:c1:38:f0:f1:52:b7:6c:d9:ed:b8:4f:03:67:e8:
40:4b:cc:3a:df:26:17:84:44:38:64:a9:e3:dd:d3:1a:53:98:
1d:0b:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:54 2025 by rpki-client