Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: 9e5vqje4l7gcFRJBPZNff/WBQK7/EfH5miS9bkUil2U=
Subject key identifier: A0:E5:90:1F:13:48:29:12:2D:DB:4D:D3:0B:8B:C6:20:D8:59:15:75
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 019849663ACCCC34D924F678725163DACD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 0658
Signing time: Sun 27 Jul 2025 01:01:33 +0000
Manifest this update: Sun 27 Jul 2025 01:01:33 +0000
Manifest next update: Mon 28 Jul 2025 01:01:33 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: Qj9ouRexQ2rOrv2GDm/AU5U3duXePGsd/NKcmheHDmE=)
2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:3a:cc:cc:34:d9:24:f6:78:72:51:63:da:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Jul 27 01:01:33 2025 GMT
Not After : Jul 28 01:01:33 2025 GMT
Subject: CN=a0e5901f134829122ddb4dd30b8bc620d8591575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:c6:00:86:64:a2:2a:cd:a4:68:91:af:e8:
29:be:d9:24:cb:08:21:59:c3:3c:2b:69:c5:a2:5f:
7c:bd:e5:06:08:ed:51:73:fd:f5:aa:31:d6:d3:b8:
5f:44:9e:68:bf:63:b1:7a:49:37:fd:c3:74:c1:eb:
6a:70:de:0c:52:58:9a:a8:a6:cb:7b:8c:ae:34:4e:
cb:43:0f:10:35:3f:2e:2f:ca:68:37:d9:51:ee:a0:
23:d7:c0:77:96:19:5a:67:aa:06:be:b5:c3:96:da:
52:4a:02:b1:84:4e:76:d5:c2:bf:a3:fd:45:3d:b6:
12:f2:62:98:4d:8e:dd:8e:43:fe:7c:07:a3:8d:4d:
8b:e9:2c:16:38:2b:80:a0:67:23:9e:a6:64:52:00:
3b:5e:3b:e7:2d:35:ca:e4:34:09:3e:df:cd:1f:0d:
5d:6f:c2:cf:10:bf:31:19:51:46:dc:be:32:20:b9:
e4:30:a2:da:c9:1a:be:fe:4c:95:7b:e0:ee:02:f0:
c3:53:3a:47:9c:62:5d:6c:b1:73:86:26:f6:91:74:
7d:3b:75:16:82:80:2b:08:0a:d9:14:38:f6:2c:8f:
d9:17:f6:cd:52:7b:ba:c3:45:3a:f3:24:72:77:a5:
fb:2c:89:a2:ea:6d:be:2f:86:b7:99:c9:24:d1:3d:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:90:1F:13:48:29:12:2D:DB:4D:D3:0B:8B:C6:20:D8:59:15:75
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:29:42:1f:0d:be:f7:86:ed:84:0b:1d:66:ab:c2:41:f8:
f4:e9:33:7d:02:ce:f9:dd:aa:26:12:4d:cb:33:6a:e8:62:a8:
fc:9e:20:35:15:af:ea:2a:da:7d:ad:8c:2e:f3:52:31:91:86:
d4:2b:94:16:f4:6f:d9:e8:19:a2:ed:04:72:8a:2b:fe:30:9f:
f3:4c:f1:dd:1c:ac:76:95:28:27:25:e8:18:4f:4c:e2:9d:0a:
4d:d1:eb:b7:5b:f7:86:a7:89:8e:01:32:f7:1c:8b:c6:be:ba:
5d:c6:4e:04:69:a3:7d:0d:74:88:78:c3:51:23:4f:58:22:85:
7b:5e:d4:4a:0c:d9:9b:7e:11:ed:9d:7a:39:ea:55:7c:be:ab:
16:10:9e:bd:96:b2:97:4c:79:f2:c0:e6:90:0c:b7:f8:ef:ea:
62:18:bc:0a:b9:87:87:eb:db:a7:98:1f:9d:03:a9:72:32:1c:
5d:ab:39:bf:69:b2:a8:e8:da:56:70:06:8a:92:25:f2:7c:a6:
41:12:70:08:7d:3a:0d:4d:d9:c2:c4:eb:04:a3:ca:00:88:cb:
c2:87:11:af:42:75:e0:84:9b:d1:11:b0:26:ce:ac:e7:a2:36:
a5:d5:78:04:2c:1f:24:51:ea:e5:75:34:73:e9:a6:3f:89:69:
de:72:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:01 2025 by rpki-client