Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: d5B5Qtr8glkwL4rWMe7SJM8NGrs2NZ/G4O/MBQFuQ3Y=
Subject key identifier: C5:28:03:C2:75:C4:7F:4A:C5:70:68:37:4F:37:1C:FC:49:5F:46:A8
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 0198733D228939C22BC2909BF7BA46D85CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 1461
Signing time: Mon 04 Aug 2025 04:00:42 +0000
Manifest this update: Mon 04 Aug 2025 04:00:42 +0000
Manifest next update: Tue 05 Aug 2025 04:00:42 +0000
Files and hashes: 1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: krIAcbkWSq1GiTcc9PyCNFkG7LFc8LixHhERhvdzUKM=)
2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:22:89:39:c2:2b:c2:90:9b:f7:ba:46:d8:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Aug 4 04:00:42 2025 GMT
Not After : Aug 5 04:00:42 2025 GMT
Subject: CN=c52803c275c47f4ac57068374f371cfc495f46a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:08:e8:f7:c8:9f:e3:be:b1:c5:45:09:d9:
74:ec:b2:13:cc:47:5e:d5:0c:16:9f:e7:ef:15:9e:
5c:90:44:1a:70:9c:38:51:74:ab:23:98:01:40:39:
94:29:77:64:e7:cd:da:fa:55:8d:ca:42:ad:94:2f:
cd:64:a0:e0:0b:09:ff:87:25:b0:8e:ff:ca:c5:c8:
bf:83:ad:ab:73:1d:f6:65:83:6d:c4:f4:71:7d:7c:
52:a5:ec:f7:5a:d3:c8:fa:cf:81:4d:49:33:9b:a1:
b4:17:6b:45:b9:77:70:f7:17:e9:f2:51:5a:f7:9a:
b1:c5:d9:10:ba:91:8b:c5:97:b1:3e:be:ab:f1:c6:
65:7b:01:ea:55:7e:6f:06:44:a8:76:d4:78:59:57:
51:68:8f:3f:a5:fe:92:25:32:b8:b9:e5:78:66:38:
05:e4:aa:fa:d7:b9:0d:92:d4:7c:08:fe:b0:51:0d:
6c:0b:75:4c:d1:bc:a6:56:c2:45:a8:dd:44:86:b0:
c6:96:a7:ec:c8:4c:73:92:cb:51:fc:a1:8f:c2:88:
20:87:36:4c:c9:80:54:85:8d:24:76:35:a5:e4:58:
b4:47:0f:d6:5b:d1:fd:f3:85:3f:70:e2:36:29:29:
e5:25:df:ce:00:22:13:dc:74:eb:fc:27:58:9f:c9:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:03:C2:75:C4:7F:4A:C5:70:68:37:4F:37:1C:FC:49:5F:46:A8
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:96:e5:3e:55:47:c9:bc:66:9d:b0:7c:1e:c2:c2:50:6c:
3d:f0:f0:75:3d:f7:06:bc:2b:f0:a1:02:26:53:e3:ec:ea:f1:
10:da:f2:39:0e:7a:79:89:e2:9d:f2:6f:d1:4e:1e:8b:af:c0:
0f:04:9c:c9:f9:94:0e:35:34:d3:fc:03:92:e8:52:25:7a:63:
a3:79:5c:0e:20:fa:44:56:4c:63:17:b7:d2:db:ec:1f:de:cb:
bc:7b:0e:c3:ca:81:1a:ef:14:41:5a:4d:e0:2f:16:3f:35:c9:
b7:8a:ac:2f:bf:bb:20:a8:8d:62:ab:51:f2:df:40:9d:ca:6c:
00:90:77:25:04:ad:ef:d1:e8:33:da:68:3e:5e:71:ab:6f:fd:
94:ab:f1:30:37:bf:4a:79:16:f1:d6:0a:cc:8b:ff:65:69:c6:
ff:aa:56:fe:cc:eb:fd:ac:af:e2:10:91:c3:af:ec:94:b1:78:
ed:d7:11:55:39:27:bf:21:30:ba:d1:21:0d:01:27:73:39:c9:
12:38:1d:9f:ad:4e:c0:8f:0f:96:60:42:eb:98:0f:02:0e:d4:
de:3b:0b:bf:95:db:5e:af:df:ef:16:d4:34:75:10:a6:39:40:
71:59:fe:3e:85:a1:db:a7:20:86:a0:8e:b9:61:50:c9:71:96:
d6:13:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:25 2025 by rpki-client