Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: 1j9sLUm69Vu0YOTToc1OFiP+DZCGWoSkTHJYhxoPdL4=
Subject key identifier: 08:33:30:04:C4:EA:C3:52:F7:A8:E5:01:7D:E3:C5:1F:D3:84:B4:D2
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019874BE007B7778DA7A461012F2C836F355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:01:05 +0000
Manifest this update: Mon 04 Aug 2025 11:01:05 +0000
Manifest next update: Tue 05 Aug 2025 11:01:05 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: MS1nLw8T495QhfKL8v5P1l6uqjAQIEaUu3JOXjkBk/g=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:00:7b:77:78:da:7a:46:10:12:f2:c8:36:f3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Aug 4 11:01:05 2025 GMT
Not After : Aug 5 11:01:05 2025 GMT
Subject: CN=08333004c4eac352f7a8e5017de3c51fd384b4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:4d:dc:92:5b:1b:65:81:e3:06:be:2f:33:
19:0a:97:fa:78:33:3c:23:b0:46:ef:7e:de:a2:6c:
9a:fe:91:08:f6:4f:71:dc:97:07:49:de:5d:30:ad:
4b:7f:61:5b:2f:27:ae:3b:5c:1c:35:3e:2c:b2:94:
10:98:a4:10:be:53:fb:ad:21:75:ef:4c:55:76:28:
e6:6b:46:50:d1:70:52:bb:26:2c:05:a8:d1:39:35:
84:0a:c7:72:21:ef:a5:84:fb:a9:a8:d2:49:26:5c:
48:e4:24:24:bd:7a:37:2f:cc:d7:f4:4a:5b:0f:a0:
83:9e:04:7e:e4:10:a4:7c:00:08:cc:f1:f8:c8:5a:
0f:21:3d:eb:0b:87:cf:7a:e3:74:c9:d9:94:21:90:
6f:c6:ba:6f:e6:fb:7e:e6:2d:9d:34:1c:f3:e9:4f:
cb:1c:32:ea:4c:ac:1f:67:b8:24:2b:70:f6:c7:be:
b8:9e:0e:3c:69:53:92:8f:70:8b:1d:10:f3:2d:ac:
f7:82:f8:e5:54:20:59:78:2b:5a:fe:b1:83:7a:ea:
1a:62:17:a7:04:97:6e:e4:28:63:82:95:aa:1f:d7:
04:b7:a1:54:91:d2:8a:49:20:70:a8:47:62:8f:40:
eb:e6:c3:d9:46:db:60:b3:eb:cf:88:23:b2:f2:80:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:30:04:C4:EA:C3:52:F7:A8:E5:01:7D:E3:C5:1F:D3:84:B4:D2
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:09:4a:eb:26:d5:e1:11:a5:f7:d9:d3:c2:3f:9a:ce:85:19:
03:43:a7:17:b5:85:ac:28:98:1c:04:e1:f5:0a:83:51:4a:47:
0e:6f:ea:bb:97:92:39:f4:3f:dd:61:c0:8d:23:12:f9:59:bd:
af:22:cc:27:57:29:cb:43:48:92:83:28:09:1d:0d:61:98:c6:
55:ea:3a:78:41:84:2d:b2:e5:3a:88:2d:42:3a:36:45:a1:60:
59:81:33:64:b6:34:16:b3:2b:1a:c2:b2:59:c7:58:70:e1:71:
41:09:ef:41:81:2e:1d:15:4f:71:04:d7:71:65:ae:33:83:1a:
9a:2a:36:b4:95:58:23:00:d3:4d:03:1e:db:ab:2c:33:77:d3:
74:99:11:04:a8:47:b6:de:e6:da:d9:1f:49:61:81:73:09:2e:
5d:f9:20:49:68:73:e8:54:5e:b2:cb:52:56:40:ef:6f:98:48:
8f:61:9d:48:d7:cd:95:66:2c:04:1a:9e:5f:97:41:dd:fd:1c:
45:72:bd:71:36:0a:32:aa:ac:14:d8:d5:16:39:18:69:ec:ed:
56:3d:da:f7:6f:6d:7b:14:09:e2:af:4a:8b:3f:20:b6:49:f9:
24:50:cc:bd:46:09:16:fd:5c:ff:3e:54:c5:70:92:a7:b9:15:
b8:01:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:55:18 2025 by rpki-client