Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: VUaHnhuCZrJwCdxNK65XJQkTUIwIwhKcMehxcKI17B4=
Subject key identifier: 8C:F4:B8:EE:68:71:65:18:A9:36:EE:0D:24:80:A2:1E:98:0D:43:9D
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019849D360499F201FE05F9D62695707FC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 12AC
Signing time: Sun 27 Jul 2025 03:00:46 +0000
Manifest this update: Sun 27 Jul 2025 03:00:46 +0000
Manifest next update: Mon 28 Jul 2025 03:00:46 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: BcltY/xBcwdiFX4Bvixk1ZWOhDQ01Kz6/UHaFW51TLA=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:60:49:9f:20:1f:e0:5f:9d:62:69:57:07:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Jul 27 03:00:46 2025 GMT
Not After : Jul 28 03:00:46 2025 GMT
Subject: CN=8cf4b8ee68716518a936ee0d2480a21e980d439d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:06:64:b9:7f:b8:d2:69:0c:55:a0:9c:40:
21:96:6f:0c:fb:96:9c:d2:9f:fc:64:c2:43:52:b0:
4d:62:a9:80:a7:ba:a0:f1:b9:80:99:53:e1:ae:ba:
03:6f:3b:fa:69:00:ba:b6:63:c0:f7:a5:75:5e:cd:
b9:39:7a:51:e0:38:6d:ff:3e:17:d9:3f:53:26:04:
74:e9:3a:85:bc:6e:29:7a:44:9d:c7:40:4c:04:61:
d8:d9:78:a8:0c:a5:33:f8:c7:db:aa:4d:d5:8d:f7:
1b:26:61:72:88:0e:01:d8:4d:0e:3c:f8:f5:1e:ea:
f3:6e:ba:6f:3f:11:24:11:bd:5f:27:ee:6d:d4:40:
da:94:06:42:21:37:98:41:54:32:f0:42:82:77:80:
f7:f3:bc:72:68:c0:94:a3:f5:44:64:c5:84:15:4b:
cc:b5:d7:02:04:87:70:ac:8e:a4:40:c0:07:03:9b:
81:0e:da:7a:52:68:1f:43:65:44:e1:a9:26:a0:4f:
39:62:bd:c4:e2:cc:9b:fb:59:a2:4e:0a:a4:43:74:
3f:47:2a:f9:27:fc:41:e1:fd:ee:56:d6:5d:28:ba:
40:60:14:33:94:d5:17:84:0a:90:4b:19:a4:bf:74:
e9:f8:23:bd:b8:28:bf:03:30:bd:a8:b3:bb:f6:31:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:B8:EE:68:71:65:18:A9:36:EE:0D:24:80:A2:1E:98:0D:43:9D
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:b0:90:c7:83:19:b3:34:d9:b0:43:5f:cf:75:b1:7d:f8:
11:b2:f8:34:07:03:11:dd:3c:eb:cf:df:34:5e:a7:d6:3a:cc:
10:4e:98:18:df:d1:a9:23:8c:2a:ca:6a:e4:fe:95:0d:fc:2d:
99:df:ef:95:99:2c:06:53:28:f1:14:52:00:58:08:0a:97:c1:
3d:2f:fe:65:c1:3b:d4:55:c9:92:47:2d:e7:04:cb:78:02:e2:
98:62:21:0f:69:3b:83:1e:24:32:39:e6:28:b6:f8:7c:dc:93:
c6:4d:ff:ad:7e:fd:bf:02:94:f4:ba:b7:44:91:5b:2e:24:5e:
29:32:f7:23:e6:13:c8:74:cd:66:d5:ba:7d:7b:59:e5:f7:c2:
b8:f0:a0:b4:dd:12:a0:28:18:c7:21:a5:47:b4:56:5a:09:aa:
2d:23:8e:ca:02:9c:7c:45:42:01:46:44:74:58:a6:b1:97:72:
a1:08:35:8f:3f:8d:7c:09:51:cd:86:9f:85:e8:0c:1f:a6:e7:
73:b7:04:b8:fb:38:4e:db:af:8b:96:42:03:32:de:6f:cb:0a:
31:7c:f1:b5:7f:64:8e:4d:27:85:39:45:71:66:55:7a:6f:25:
5c:9e:a1:72:00:41:5a:e8:dd:aa:95:a4:a6:27:a4:d3:d6:96:
5c:47:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:21 2025 by rpki-client