Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: 3y3fd8TKmbUAc5tFcaiIpDed/xCQFqA7amb19OhxgLA=
Subject key identifier: 7C:7F:8B:CC:6B:A6:38:60:B5:29:86:8D:61:BC:B3:95:36:FB:E5:57
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01983CBC691ED6FE702A2209185105C76C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 14:00:37 +0000
Manifest this update: Thu 24 Jul 2025 14:00:37 +0000
Manifest next update: Fri 25 Jul 2025 14:00:37 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: n+6uPkCzP4RJg/r92KPFP7KJHVMP3HF/OiBD6ALfx+U=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:69:1e:d6:fe:70:2a:22:09:18:51:05:c7:6c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jul 24 14:00:37 2025 GMT
Not After : Jul 25 14:00:37 2025 GMT
Subject: CN=7c7f8bcc6ba63860b529868d61bcb39536fbe557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:4b:eb:54:19:b0:35:fc:4d:cb:f3:a0:e8:
f9:d8:11:cf:5d:83:69:70:c2:a9:32:45:d3:d1:4f:
52:d4:eb:19:70:9d:0f:99:7f:a4:7e:16:ac:05:e9:
05:f1:da:6a:29:9b:b5:6c:73:ef:c0:f8:c1:51:d8:
45:83:de:45:f4:f4:97:7c:7f:96:7f:8e:34:f0:4b:
29:13:69:49:2e:8f:2c:a0:a3:f3:af:fb:e6:02:14:
c9:18:a4:3a:53:02:11:eb:96:da:96:44:1d:f2:df:
ac:f5:73:67:ea:59:39:80:05:00:30:7c:a7:24:e7:
23:6c:33:22:37:e0:f0:bb:0a:df:66:6b:8d:7a:d6:
6f:07:89:cf:40:c1:69:a3:8e:24:fc:33:8e:88:90:
96:8b:46:1a:0e:f4:2d:91:c0:41:c2:09:75:29:3b:
2e:9d:98:b5:a7:b9:c1:31:a2:39:9a:44:b0:1d:16:
78:73:7e:61:4b:10:a2:49:9a:00:f8:d0:94:73:4a:
bd:3c:1f:b5:0c:53:9f:10:fc:a0:c5:bf:50:56:d1:
89:0c:0d:9f:81:be:5b:ab:d6:de:6f:3d:14:c6:65:
1e:a4:43:c3:1d:e8:9c:47:e4:3d:db:e4:8a:db:f5:
59:d0:78:93:23:e5:57:58:95:7d:d9:b4:0f:c8:9d:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:8B:CC:6B:A6:38:60:B5:29:86:8D:61:BC:B3:95:36:FB:E5:57
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:8a:97:83:96:e4:bf:47:c5:b4:d3:39:69:59:f5:3e:cc:
c8:9b:92:d2:96:ea:32:01:f6:c7:62:eb:01:11:c4:db:75:4a:
92:45:57:58:07:e9:98:32:06:0f:67:b1:dc:2a:db:ff:17:e7:
5c:1e:4c:a2:27:a2:24:06:6a:65:de:f7:21:53:7e:d9:39:80:
cd:18:3d:af:b8:98:86:05:e5:2a:ec:2a:c7:08:3b:31:3e:3b:
f3:83:71:71:bb:d4:0d:0a:1c:12:d7:13:aa:8f:c4:25:15:90:
49:1e:db:56:e1:ba:57:3e:9d:1d:5b:f2:36:ab:83:a6:eb:dd:
19:39:98:01:66:48:8f:e6:fe:22:82:f3:98:23:bf:9e:a2:07:
55:c9:47:73:a3:cd:af:b7:cd:12:d0:19:14:34:38:ac:56:f3:
83:9d:d0:5b:12:e3:bb:73:1c:a8:5c:9c:5d:ff:6f:1f:61:f5:
a5:42:55:be:af:5f:24:06:9d:0a:14:fd:7c:b5:1e:53:b7:48:
2b:e3:dc:67:c6:a5:68:34:21:b6:98:f7:ce:9e:30:93:32:b7:
bd:ac:30:2d:39:25:bd:d8:a8:54:ae:d7:a5:b5:c3:14:71:fb:
eb:6b:9a:90:05:22:42:e3:c6:40:e4:a2:35:0b:9c:07:38:be:
85:e2:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:59:15 2025 by rpki-client