Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: jsFPJY+/tnkj0kiahre5LElvKyYj9iT1RRt/HeF1thc=
Subject key identifier: 91:AD:6E:60:E1:F3:65:71:12:E7:51:FF:5F:DA:83:2C:B3:72:A1:29
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 01984AAEEBA30EB26D28C6B35722B9653156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0B5A
Signing time: Sun 27 Jul 2025 07:00:34 +0000
Manifest this update: Sun 27 Jul 2025 07:00:34 +0000
Manifest next update: Mon 28 Jul 2025 07:00:34 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: aMMxdDEIdFD6i4bU0RU1Xapxq52jQU7UCMcdBUKc1Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:eb:a3:0e:b2:6d:28:c6:b3:57:22:b9:65:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Jul 27 07:00:34 2025 GMT
Not After : Jul 28 07:00:34 2025 GMT
Subject: CN=91ad6e60e1f3657112e751ff5fda832cb372a129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:92:6b:64:f4:c0:54:09:05:d4:a0:59:b5:
31:fe:d1:84:75:07:a1:3a:ff:c3:7d:18:d8:ec:0d:
fb:0b:dc:76:18:5d:bb:bb:89:c9:a2:5b:22:06:55:
0b:21:f0:5c:ea:22:3c:1d:b1:d7:b3:a8:ec:96:18:
db:a8:76:ae:7d:a9:f3:12:7b:14:8c:a0:c5:c0:a8:
78:54:05:66:b9:15:d6:2b:9a:94:c5:a7:99:a6:18:
0c:30:c6:0e:cc:a0:5a:7c:06:2c:d2:77:66:84:16:
e6:28:f7:94:73:61:80:bc:28:42:71:6f:26:44:e9:
9c:cd:70:fb:88:39:7e:a9:67:11:35:99:09:83:41:
e2:3d:e4:17:7c:20:4f:b6:58:7b:f1:cb:74:77:db:
5d:de:9f:75:b7:2f:00:74:12:0a:7d:21:fe:88:bf:
44:50:04:e7:59:4f:86:2e:5b:88:e0:0a:69:cc:4c:
2a:80:25:a2:46:a7:7e:cf:32:14:d1:67:36:4e:73:
44:ed:12:ce:3f:c9:bc:de:79:af:1c:dd:b8:64:a2:
9c:46:fd:ab:a7:06:6b:b7:28:14:32:7b:f8:a7:c0:
70:01:40:b9:b8:c8:94:5d:f0:30:c1:a1:b7:4f:9f:
98:7a:f2:0f:ee:3a:a9:e8:6a:28:2a:30:35:52:90:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:6E:60:E1:F3:65:71:12:E7:51:FF:5F:DA:83:2C:B3:72:A1:29
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:d8:fa:bd:7e:3a:1d:9b:b8:c4:2b:28:9f:03:8f:b0:8f:
73:99:36:a4:a2:d5:2d:f5:24:d5:95:8a:b5:29:0b:38:24:ad:
00:57:3d:af:d8:93:84:f8:2f:32:4a:08:94:d7:72:88:ee:45:
05:33:a2:86:d2:90:b6:39:f6:1a:86:cd:00:f9:99:d9:e3:64:
41:71:d1:f9:75:ec:8c:13:4b:c6:d0:92:e5:2d:1d:8f:b0:17:
8d:1c:79:38:09:40:4a:95:49:ab:47:d9:0d:02:97:25:c6:e4:
26:70:6d:19:fe:bf:62:16:27:6a:09:f6:7f:ec:fa:9b:9d:b3:
51:45:95:aa:82:3e:76:cf:7f:4d:79:7e:82:0c:20:4d:83:6b:
4f:7c:c8:fd:37:59:1e:29:48:e5:b3:aa:ce:a7:46:91:71:63:
05:b3:79:4b:4f:77:26:fa:a7:6e:7f:8e:70:d9:37:fb:c7:7c:
a0:e8:cf:6e:dc:87:09:e2:b3:40:7a:e4:cf:1b:b4:6b:15:e6:
ea:16:b5:72:b8:af:f2:15:07:c7:9c:16:8f:af:d8:ae:d0:7b:
1b:80:04:a9:39:87:ed:cc:ad:ff:43:5e:5b:b5:75:87:c5:6d:
61:2b:fa:92:17:cc:0b:91:d9:e3:9a:fa:b3:e4:23:45:da:16:
0b:fc:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:31:27 2025 by rpki-client