Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: IEMdhhgzioI9l6ybIB3HInbiwn8OD9Y0ae4orVlv7hU=
Subject key identifier: 1C:87:5D:5C:98:76:71:7F:E9:9F:AB:A0:6C:80:07:84:40:92:04:9A
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019853E919A5BD69D1B0CDE5D449FB3F5FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 05A4
Signing time: Tue 29 Jul 2025 02:00:42 +0000
Manifest this update: Tue 29 Jul 2025 02:00:42 +0000
Manifest next update: Wed 30 Jul 2025 02:00:42 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: IC3kj3FQ2xibKh+9hOWTGQZk2vi5sw6MbpKydxaLkaY=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:19:a5:bd:69:d1:b0:cd:e5:d4:49:fb:3f:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Jul 29 02:00:42 2025 GMT
Not After : Jul 30 02:00:42 2025 GMT
Subject: CN=1c875d5c9876717fe99faba06c8007844092049a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:a1:a3:0d:4d:d2:f8:04:9a:e2:f4:7e:99:
53:fe:2b:e8:a8:db:0f:b7:48:3b:50:7b:1f:08:f9:
3c:8f:58:bd:70:b1:8d:f6:05:a3:73:a7:8f:51:98:
db:ad:a2:55:b3:92:3f:c1:d2:f1:91:fd:e8:28:8c:
4c:3d:26:aa:96:c7:a5:a1:7e:04:8d:fa:63:62:09:
c8:a9:50:3a:ea:d4:81:63:12:0b:03:5d:c4:96:90:
93:23:16:b3:5b:b9:3b:d0:77:b6:cc:d1:e2:e0:2f:
3a:94:46:28:a6:16:cc:d2:86:f8:dc:3c:a6:23:49:
9b:36:04:c2:53:7a:d6:03:85:59:91:ce:b7:6b:05:
a2:87:94:fa:de:cf:45:f3:54:9b:19:6b:11:cf:9f:
ed:f1:2a:ec:d6:26:b5:86:18:d1:3b:a1:de:11:2e:
07:3d:03:fe:b8:11:d4:fe:58:bd:96:3a:c4:ac:a6:
98:ad:a2:9b:18:12:9a:7f:4a:5e:9d:7b:58:f6:5c:
8f:81:d2:b5:b1:c5:7b:e6:51:29:03:95:1d:52:26:
e1:d5:96:da:4c:e1:8d:8e:0e:30:82:6e:16:66:56:
c4:e0:97:ed:27:7a:4d:ea:b8:8c:23:94:b2:0c:c1:
e7:f9:3c:29:e3:6c:f3:27:9c:da:4a:86:d0:c6:86:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:5D:5C:98:76:71:7F:E9:9F:AB:A0:6C:80:07:84:40:92:04:9A
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:fc:93:27:f8:78:e5:98:be:84:a6:98:5f:13:ce:43:5c:
c1:f0:42:fe:6f:93:15:0d:06:30:2d:31:10:f0:54:52:83:02:
c2:a4:2d:7f:9c:03:a4:4a:91:36:01:c0:ee:77:47:30:ca:23:
e5:a2:56:32:15:b8:3a:31:e6:9e:bb:31:6f:e8:0f:c5:37:3e:
1a:3c:ab:5a:02:07:c0:7e:41:c6:54:91:87:89:47:94:23:12:
f4:e3:4e:db:11:2a:bd:1f:cf:d5:4a:7f:d3:e9:60:fa:91:75:
7a:c1:94:96:2b:c5:06:46:61:61:c6:5d:e5:07:ce:20:9d:ee:
21:eb:a9:41:3f:cc:80:ce:73:1a:b8:18:e9:66:be:00:00:fc:
77:29:5f:7a:3b:b7:14:39:51:00:83:bb:0b:72:96:05:8a:eb:
ad:e9:1a:cf:bd:3c:c7:c6:d2:69:0c:df:11:f5:79:d6:d0:4f:
af:92:73:c5:fe:a0:79:b3:6a:f1:8b:27:2b:c1:62:d5:28:45:
1c:a0:56:94:02:f5:22:f6:7f:e4:64:3d:ec:00:ee:51:79:83:
c2:17:d5:e7:02:4f:57:d9:59:0b:33:ae:9a:48:a1:d4:1f:48:
37:63:f3:11:17:51:1b:cb:72:2e:d8:f3:36:ee:25:1f:29:02:
bb:0a:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:29 2025 by rpki-client