Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: FWOAY1Q9psibVHBNvqUkMoTTItMWjVsDMf6GzoEjgUY=
Subject key identifier: 35:74:52:44:A3:D3:E6:9D:4C:17:11:04:88:F6:51:E4:23:18:AA:D5
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 01984852F445C4E99780426DAF56C50F2169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0E35
Signing time: Sat 26 Jul 2025 20:00:52 +0000
Manifest this update: Sat 26 Jul 2025 20:00:52 +0000
Manifest next update: Sun 27 Jul 2025 20:00:52 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: 8FPELbVxw6g7nFqz9aRRPcBzalE1uLB7+O0m31zQXP8=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:f4:45:c4:e9:97:80:42:6d:af:56:c5:0f:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Jul 26 20:00:52 2025 GMT
Not After : Jul 27 20:00:52 2025 GMT
Subject: CN=35745244a3d3e69d4c17110488f651e42318aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:63:3f:fc:03:6b:c3:68:af:79:15:6f:84:
fe:ad:47:2b:1a:e1:1f:c2:8a:96:b9:e0:31:8d:88:
c2:de:f9:24:d4:2d:6b:a1:0a:fa:6f:5a:46:0f:58:
34:53:c6:07:9e:5a:6f:c6:c8:e2:96:57:ae:1c:8a:
c5:53:4b:2c:73:9b:46:4a:5a:2f:20:65:75:f7:e8:
cf:5a:88:f6:4b:1c:a5:6d:6b:1f:8a:5b:b3:0c:b3:
6d:38:48:46:61:fa:78:80:ea:7d:7c:9b:5a:59:d5:
30:41:d0:fc:06:97:0f:d2:af:bf:23:8e:4e:4f:8b:
fd:2e:9d:77:59:0c:4d:0a:21:af:0b:b6:2f:d4:d9:
88:50:9a:8f:7a:8f:d4:05:d3:d5:26:7c:d6:54:9f:
a5:64:11:7a:c8:5b:15:9b:a9:18:d2:9e:9e:96:14:
25:50:57:9c:ef:77:13:47:50:07:a5:19:3f:6c:af:
b7:17:82:b7:6d:57:5a:22:7d:c0:1a:b8:f1:a3:8f:
1d:3d:ac:6f:04:33:8e:19:ca:84:ed:61:ca:d9:44:
ad:e5:66:21:89:a1:de:9e:03:52:da:d6:c2:cd:cd:
2a:94:94:95:66:eb:05:c7:1c:9c:a5:f0:ea:0d:eb:
99:9f:0f:cb:5f:94:16:73:f0:70:36:4d:8a:3c:82:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:52:44:A3:D3:E6:9D:4C:17:11:04:88:F6:51:E4:23:18:AA:D5
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:0d:7e:e5:2b:2f:f0:3e:e3:53:c8:61:63:99:cb:26:bf:
9a:bb:56:cf:13:4b:48:32:bf:0c:4e:7e:b7:ba:6d:51:d3:0e:
ab:19:14:4e:0a:4a:c2:cd:b4:1c:63:b3:9e:c3:17:88:b0:e2:
5d:29:88:84:7c:1e:1a:74:28:30:bb:85:59:76:e2:e1:f6:e5:
58:21:99:90:d1:85:0b:9d:6b:a6:b8:f3:6d:c9:05:1d:07:08:
61:8c:51:ad:40:6b:2f:30:2a:62:9f:37:47:b5:ee:48:e9:28:
73:71:7a:71:c5:53:23:8b:0d:a1:10:c5:bd:78:e0:71:b8:cd:
e5:5b:f8:7f:4b:64:35:e9:cb:8c:7f:86:d4:4f:5c:2e:7a:91:
df:72:40:cd:25:1b:f0:61:9d:3d:04:dd:3a:0d:ac:4f:3c:10:
27:ce:0f:80:d3:97:6a:b2:e3:eb:84:8f:79:6b:76:d0:7b:16:
13:69:f1:3a:fa:dc:65:22:70:84:06:a0:20:03:70:14:b8:f7:
0b:d5:d5:62:fe:50:fa:41:3c:2a:32:6c:9e:aa:62:fb:d0:c4:
c9:d8:dc:74:ef:d9:7b:6b:c3:3d:09:7a:e3:22:15:58:3c:97:
22:bf:79:4d:35:33:70:40:03:67:fe:73:a3:d7:60:da:89:4f:
6e:04:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:32 2025 by rpki-client