Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: G3AplNROMnR+oOG3DcLjEV1LOVpGBcp86gHnQ31Mo/w=
Subject key identifier: 78:43:F9:43:48:49:C1:B5:51:3B:18:0A:87:38:7E:58:8D:3E:71:E8
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019847776416D54E07E769AC7940862A024B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0484
Signing time: Sat 26 Jul 2025 16:01:03 +0000
Manifest this update: Sat 26 Jul 2025 16:01:03 +0000
Manifest next update: Sun 27 Jul 2025 16:01:03 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: uKm5hm6zU36CVU4+5gUDzHrJ2B/vNgWsj3BJWfH+8R0=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:64:16:d5:4e:07:e7:69:ac:79:40:86:2a:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jul 26 16:01:03 2025 GMT
Not After : Jul 27 16:01:03 2025 GMT
Subject: CN=7843f9434849c1b5513b180a87387e588d3e71e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:31:21:ec:91:3d:9b:fb:72:b8:2e:78:54:
98:1c:51:a4:9c:b6:22:f4:a8:50:e0:4d:e9:fb:21:
9c:ac:7c:78:36:8a:fb:86:0e:6b:14:96:90:3d:df:
5a:1b:e2:02:95:c7:80:bf:c6:3e:d4:3f:96:87:74:
d4:a4:2f:96:00:c3:09:11:2e:be:d3:6e:ef:f4:98:
f9:4a:9f:a8:19:f3:db:29:ac:14:f8:ca:b5:97:2c:
aa:b9:4e:7d:dc:f4:e7:e2:86:f7:ca:b9:4b:bd:66:
3d:01:02:54:12:a2:f7:8f:7b:91:80:19:92:86:ab:
46:04:f1:98:c6:ff:3f:04:a1:8c:04:ae:94:12:e9:
39:34:09:76:86:b2:95:79:0c:6f:7d:ee:ed:9d:57:
88:89:64:ce:ca:46:79:05:b2:ba:d3:91:44:13:5f:
e9:9e:40:f3:ea:21:7f:0c:0e:55:cb:8c:89:e4:82:
a7:3c:af:dc:4b:b1:66:a1:4b:06:b9:28:fa:d3:a1:
4a:ab:05:f2:19:55:dc:5e:e1:63:e0:c4:36:58:24:
c0:04:b8:7c:9b:79:00:d2:8f:39:02:b5:a4:fc:d0:
65:76:dd:78:55:4b:b5:8a:0e:4e:b7:c5:3c:f2:75:
b3:8f:63:66:43:48:42:9f:48:4f:20:50:7d:d1:e1:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:F9:43:48:49:C1:B5:51:3B:18:0A:87:38:7E:58:8D:3E:71:E8
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5e:29:db:c3:28:b1:5e:bb:a7:8b:59:5e:86:1a:74:3e:f3:
1f:01:9f:8a:e8:1c:cd:47:2f:c7:14:2c:1f:a1:1f:40:c7:ff:
28:34:5d:38:67:87:b8:91:b5:7d:28:db:5e:07:da:9f:2c:fd:
86:40:f6:e3:99:16:45:f2:c1:5c:89:f4:ca:64:cb:3a:5f:15:
6c:1c:c4:a3:c4:ba:cc:de:f0:00:6e:b3:ab:f0:ef:9a:91:a3:
9a:22:5e:ad:9f:39:50:6e:36:6e:51:2a:03:65:ee:8a:5d:c2:
18:d5:1b:cc:63:18:7e:9e:7e:09:ed:29:e9:24:5a:32:b7:8d:
1c:81:ab:75:92:4c:bf:4e:55:8d:26:35:65:a9:72:0e:c9:37:
dc:eb:e5:cf:d3:66:e7:78:d9:1c:c7:34:34:88:a7:1d:34:e1:
5e:bc:83:f2:a7:ce:ce:37:ab:75:09:79:d5:8e:47:82:d4:1b:
d3:09:89:dc:3b:7a:fc:b6:74:b3:7e:0b:fd:20:a2:ad:55:67:
83:84:13:b4:37:cc:b2:a1:8a:01:11:92:66:03:bd:a6:96:54:
14:b1:ed:92:cc:38:b8:1c:61:81:96:fe:dd:90:84:a7:63:f2:
8d:ed:5a:91:67:c3:ac:5b:8e:52:5a:57:e9:51:0c:fc:0e:8f:
d1:34:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:03 2025 by rpki-client