Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: lZXHlsohxrZjxMgNxZIGQ30CxW+5o5F1TRxB6lMJdMY=
Subject key identifier: 99:E7:5F:D9:21:34:59:86:6A:63:5A:27:CB:35:12:41:4E:FA:03:D5
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 01984A7824697CDD310683EB61DFE73EFDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:44 +0000
Manifest this update: Sun 27 Jul 2025 06:00:44 +0000
Manifest next update: Mon 28 Jul 2025 06:00:44 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: SP+lQTvq3FPVaqAMqBx0dBLDbVRDVTJgWHQft3M596k=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:24:69:7c:dd:31:06:83:eb:61:df:e7:3e:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jul 27 06:00:44 2025 GMT
Not After : Jul 28 06:00:44 2025 GMT
Subject: CN=99e75fd9213459866a635a27cb3512414efa03d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:aa:67:d2:e1:c8:d5:fe:e4:97:91:9e:37:
10:95:66:80:a0:b7:c3:5e:ba:a3:b0:2a:ff:9f:5b:
74:86:a0:68:a2:8c:0d:ab:1a:cd:71:10:07:89:00:
5f:7a:8b:26:03:20:91:80:77:bf:77:57:08:db:27:
68:03:92:78:80:e7:89:eb:7b:51:44:dc:80:d0:c9:
c9:a4:bd:3b:e9:6f:5d:d7:e9:20:97:7b:7d:65:4d:
21:87:69:33:b1:5d:09:d3:c3:5c:2b:aa:b1:38:d4:
20:29:59:95:25:76:bd:5d:0d:24:d7:93:7a:cd:b6:
4c:69:02:1a:db:d4:e6:80:f6:d3:42:84:5a:5f:b7:
e3:f9:f2:1b:7b:52:1a:f9:e3:f1:d6:b7:bf:ee:44:
13:ec:b7:1a:7b:bd:1d:e1:cd:35:c6:52:72:99:94:
d7:0c:c4:09:46:1a:21:70:38:5b:04:16:b7:c7:fe:
1d:fb:89:05:78:79:a3:1f:b9:6c:50:8e:4b:ad:1b:
08:82:34:43:2d:62:87:9f:61:83:7f:1f:d2:bc:21:
fb:6a:9b:d7:0c:cb:0f:4f:35:7e:66:42:0a:61:45:
69:65:17:a8:4f:1b:fb:7d:56:61:a7:ad:ab:23:e5:
c6:e2:73:0d:3e:39:26:cc:44:38:0b:e0:e9:ea:b5:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:5F:D9:21:34:59:86:6A:63:5A:27:CB:35:12:41:4E:FA:03:D5
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:0e:85:ca:a6:a3:48:3a:5a:ff:e2:ae:99:5c:66:98:71:
83:23:fd:a9:74:b3:f4:d0:b3:99:9f:8c:87:92:1a:14:d4:ed:
26:2c:5f:2e:76:d6:2f:08:ca:25:9e:9e:68:fa:93:a1:42:94:
3e:84:24:61:72:21:0c:14:52:b8:cc:e3:78:28:08:a9:68:63:
bd:fd:04:45:36:cb:a8:65:4d:56:56:e7:dc:36:bb:9e:cc:79:
d6:92:bf:4a:55:af:55:b1:52:37:02:52:26:40:26:fc:fa:54:
48:a4:c4:b8:05:a0:12:d3:62:94:e4:fb:10:a8:5c:50:92:a4:
76:0c:1f:9d:fe:21:ca:c6:ae:e1:7d:29:1d:62:9f:f6:72:2c:
36:8e:d6:79:50:7b:e6:d6:05:ba:a4:32:c4:9f:2f:89:90:a2:
74:7e:f7:c0:97:97:f4:b6:ab:d0:4f:29:ba:e9:6b:db:e7:59:
cf:25:6c:92:12:59:e7:39:55:24:8e:21:16:3e:7c:d4:f6:55:
c6:86:f2:da:4e:cd:27:5e:6f:e0:18:35:72:b1:29:40:8e:d2:
73:00:73:3d:a6:77:44:d4:5a:b2:c4:b4:2e:bf:59:a7:89:0e:
e5:29:2f:dd:7c:d0:d9:f5:55:6b:04:e8:78:8a:6d:64:e4:96:
4b:1b:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:48 2025 by rpki-client