Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: gyCz+qvUxBrYdmVpIw2D1CYdjM+BKo/22UXkjeQo/Jw=
Subject key identifier: 5D:79:24:FC:75:73:94:26:53:9F:91:CD:5D:6C:0E:84:8E:46:75:A1
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 0198A0F226B305C03F7D91B42EB3413B4E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1585
Signing time: Wed 13 Aug 2025 01:01:20 +0000
Manifest this update: Wed 13 Aug 2025 01:01:20 +0000
Manifest next update: Thu 14 Aug 2025 01:01:20 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: OkuNmpn6TOpMz0a42L1/qVlN3Cs0brSC+Hq2WfUEfp4=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f2:26:b3:05:c0:3f:7d:91:b4:2e:b3:41:3b:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Aug 13 01:01:20 2025 GMT
Not After : Aug 14 01:01:20 2025 GMT
Subject: CN=5d7924fc75739426539f91cd5d6c0e848e4675a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:dd:71:7d:08:c6:c2:ee:6e:48:1e:f6:05:
bc:15:c8:b0:c3:6f:aa:14:3c:50:1b:3b:b9:71:00:
52:65:f7:0e:9f:9a:df:b3:fc:e4:c1:e6:c4:ee:64:
1d:d2:22:c7:30:11:b4:f8:ff:8b:f7:da:6d:0c:2f:
63:96:aa:77:22:ce:c9:aa:ec:25:0b:ff:ac:8e:d1:
ac:9f:62:ef:4c:0a:bf:ef:1a:7b:23:26:51:e1:d8:
90:9d:eb:ff:c8:e3:8c:24:cb:83:fb:1a:40:65:71:
e9:49:7b:b7:0a:e8:74:8e:27:79:4d:93:aa:e0:1e:
dd:14:8f:59:a2:65:1c:ca:7e:7c:aa:c2:df:ea:d9:
5a:14:30:0c:cb:d6:f8:7b:50:9f:15:c6:8d:80:b9:
ba:c6:d3:20:33:51:be:6f:ff:fd:74:7b:5a:0f:02:
cd:fd:cb:75:3e:3e:03:ec:16:86:41:63:09:df:42:
90:f1:bb:88:52:2d:34:5b:95:68:58:cc:c9:5b:ac:
83:bd:e9:f3:f2:b7:9a:a1:01:33:f3:fd:78:b5:0d:
45:11:d0:2c:7e:d5:2e:3d:01:30:af:3f:81:0f:a8:
79:5e:96:a8:05:e6:32:a4:c1:71:a0:c1:65:43:cc:
6e:c2:aa:c3:2d:a8:3e:4d:83:b6:99:61:cc:84:30:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:24:FC:75:73:94:26:53:9F:91:CD:5D:6C:0E:84:8E:46:75:A1
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:be:7a:29:32:80:61:4b:cb:4f:d9:99:52:bc:5d:18:77:
b6:f8:fd:f4:23:2b:d5:b0:2a:5e:8e:ff:01:3a:ee:44:bd:54:
77:2a:41:38:e2:b0:d2:ad:d1:a3:2d:d4:9f:c0:30:f2:4a:0d:
d2:2d:29:98:56:1c:03:9c:b1:82:5a:a1:f6:c6:04:16:ce:ff:
ec:4b:c5:8f:49:8a:a1:70:2a:2f:c2:99:0a:ee:8f:89:2f:7e:
06:07:c3:3f:32:78:db:48:27:c2:7b:cf:c7:77:6f:7f:d3:5b:
7b:67:60:d9:d2:00:8d:fd:cd:e8:94:57:3c:35:da:98:0a:ed:
d1:df:6c:bd:52:49:e0:ae:9c:e9:a1:88:ea:c9:e4:49:10:cf:
66:7f:7e:06:7b:ac:41:61:2f:b2:4e:58:76:eb:ae:5c:9a:41:
8c:86:b5:c3:e0:cb:64:f3:ec:d3:5b:8e:d2:4e:e0:ac:1a:95:
5c:01:3b:b9:57:e6:0c:e1:68:07:5b:3e:b4:b1:ce:ec:27:4f:
de:16:66:77:31:38:e8:81:7a:03:2b:df:b3:aa:cc:66:26:55:
e8:7a:57:4c:f5:f1:3a:4b:7e:b5:fd:50:07:29:4f:fe:3c:00:
e8:ac:8e:86:81:a8:3b:0e:41:49:af:2a:4e:1a:89:06:f8:c7:
29:84:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:36 2025 by rpki-client