Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: 9G/kF67JV7HEqtf1KiL0IvjtxUtnuoXVts8HrX6Ih6o=
Subject key identifier: AC:8C:6E:DD:70:96:D5:0A:C7:7C:06:3E:59:BB:B1:39:E8:56:7C:73
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 0198835570D4F93D27FE67B47A512BF8BAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 07:01:11 +0000
Manifest this update: Thu 07 Aug 2025 07:01:11 +0000
Manifest next update: Fri 08 Aug 2025 07:01:11 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: SeNUFop+dLWQCyMqa5DX5ZXsRf7Sd2G4Y+U6QTNHpC4=)
2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=)
3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=)
4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:70:d4:f9:3d:27:fe:67:b4:7a:51:2b:f8:ba:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Aug 7 07:01:11 2025 GMT
Not After : Aug 8 07:01:11 2025 GMT
Subject: CN=ac8c6edd7096d50ac77c063e59bbb139e8567c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:a0:9c:47:92:34:46:20:f9:b5:0e:ac:ba:
52:a5:55:ee:f0:90:86:1a:66:ef:f2:94:b5:08:c5:
c9:df:3a:0f:78:67:22:b1:a5:8c:2f:3b:27:8f:b9:
93:6f:4d:f3:88:f4:13:e8:40:19:2c:9e:27:32:e9:
2c:28:f6:1e:0b:65:0e:a5:79:1f:48:13:9d:44:b6:
b4:92:ca:fe:35:39:a9:e2:d9:86:42:46:ab:12:37:
50:d9:4e:85:0d:98:8c:b6:2a:fc:5c:a2:f9:4d:b0:
eb:33:c2:95:de:b4:96:22:df:b2:bf:70:7e:0d:54:
7d:5f:4c:d2:b9:a7:b2:d6:45:87:e4:ed:86:d9:b4:
d7:fe:34:71:7c:69:aa:83:2d:f1:31:37:1a:b1:d0:
fc:d3:ae:b7:c7:32:ff:ec:54:fd:e5:90:7b:be:30:
1f:b0:4e:37:8a:e3:37:1e:f3:68:85:25:00:0f:38:
70:f6:7a:8e:9a:a6:23:26:0a:0c:93:9f:07:8b:34:
15:49:2d:7d:1f:4b:a8:a6:0c:c8:70:92:ef:8d:6d:
25:d9:38:ac:3a:1a:51:8f:1a:91:68:93:f9:13:08:
de:74:7b:31:e2:10:fe:13:71:57:c0:1a:2f:bd:90:
a7:32:17:fd:6f:5e:0d:86:9d:c1:0f:65:e1:3e:2e:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8C:6E:DD:70:96:D5:0A:C7:7C:06:3E:59:BB:B1:39:E8:56:7C:73
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:b3:f5:45:f2:e9:d5:5b:5a:91:db:a4:bf:2a:d3:12:71:
bd:3a:69:83:ad:e7:1c:a0:f9:ee:e3:cf:cf:ac:63:26:45:ee:
62:95:4d:e6:7f:75:75:cc:d2:ae:b8:66:f0:28:d0:af:7c:2c:
b6:75:89:31:cb:da:62:55:88:68:a4:e2:23:cd:5c:5c:d7:48:
eb:4b:e2:15:10:5d:16:16:70:1a:d4:ea:fa:3e:00:ba:9b:78:
e7:44:53:72:22:9f:13:ad:9f:41:45:68:19:8d:2e:27:65:1d:
bb:00:11:6e:0d:4c:d6:7b:c9:ee:69:ae:7f:4b:19:16:22:77:
03:70:9f:c5:ad:93:02:dc:4e:fc:2a:0b:de:ed:13:1b:23:4a:
c6:27:b5:13:8e:da:03:f6:35:cf:4b:be:94:27:20:87:3d:71:
cc:0c:db:46:4f:f4:cc:43:b3:ea:16:97:12:d6:45:6c:2f:cb:
e5:f6:b9:c1:f7:66:7a:98:10:6b:2a:34:20:e4:97:d1:63:42:
f3:19:7a:a1:53:8a:2d:84:c9:4b:22:29:42:d1:ef:eb:81:ea:
20:b3:45:f5:55:8e:5c:2c:14:1b:c5:90:28:42:71:44:61:bf:
b8:31:e8:a9:9c:c5:0f:63:7b:bb:7b:c0:2e:44:7b:ec:ef:3c:
07:9c:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:22 2025 by rpki-client