Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: cmewhzLU566lOIWR929TqyaHvlwQ1mOAKY0xYecegZo=
Subject key identifier: 05:2C:03:72:A8:2B:5A:0C:71:84:50:B5:33:6B:E1:DB:64:B4:27:F9
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 0198529F469E94DB70A6FF61DCA3C34B7C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 1597
Signing time: Mon 28 Jul 2025 20:00:26 +0000
Manifest this update: Mon 28 Jul 2025 20:00:26 +0000
Manifest next update: Tue 29 Jul 2025 20:00:26 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: zg1rmB6sXYa2DtW7DZT8fqEEMajnEzyeHvHqa6tPEUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:46:9e:94:db:70:a6:ff:61:dc:a3:c3:4b:7c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jul 28 20:00:26 2025 GMT
Not After : Jul 29 20:00:26 2025 GMT
Subject: CN=052c0372a82b5a0c718450b5336be1db64b427f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:fe:0b:22:d1:8c:8f:0b:ec:52:f1:56:10:
e5:b8:4d:d5:9d:89:f4:fd:9d:40:db:88:1d:4c:9c:
80:61:9f:56:22:c7:e7:0b:2a:4f:b5:b4:fd:b7:63:
27:ac:47:77:26:50:9f:b6:39:04:f1:6e:65:ec:6a:
88:2d:75:9b:83:31:96:1a:8b:cb:15:e7:d6:d4:e8:
03:60:fe:9c:41:1d:39:8e:97:98:7c:0c:3c:b0:87:
d0:29:9b:a7:b2:ed:13:15:ab:91:1c:f5:02:a5:28:
1a:26:1b:dd:76:cb:87:7a:27:ee:87:66:82:de:71:
d1:c6:6e:ae:a4:b8:f8:c6:79:31:03:b3:fd:40:12:
5d:46:3f:d2:da:3d:d0:88:3d:3d:57:ae:fc:96:b5:
74:af:fe:0d:8f:7c:f4:38:5b:9e:dd:24:2e:17:e4:
ab:4f:71:d9:43:93:8d:66:34:53:68:7b:5c:24:a1:
bf:24:51:fb:11:a1:53:e8:d1:06:e9:54:6e:73:6c:
77:91:d8:c8:f9:8c:19:aa:7c:b7:0d:a5:bb:ae:70:
2d:38:5c:af:19:41:af:15:b4:ce:fe:00:35:0a:3e:
a2:a6:a1:da:8b:0c:52:f5:c7:39:9e:10:ab:89:a8:
49:0f:38:ea:3b:2e:9f:9d:0d:23:52:b0:1e:be:b3:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:03:72:A8:2B:5A:0C:71:84:50:B5:33:6B:E1:DB:64:B4:27:F9
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:1e:6e:e6:50:00:79:5e:69:e9:33:de:d0:5f:e7:8c:77:
9d:47:81:5f:c3:c8:2a:14:82:f8:9b:2a:9a:96:99:55:ab:20:
55:0f:95:f9:fd:68:38:7b:fb:a8:6c:c9:46:d8:e8:0f:cf:38:
81:6c:c8:44:39:66:4d:8a:80:2b:f5:45:fd:45:e1:dd:7c:60:
fc:b3:97:7e:3a:4e:5b:cd:74:f1:43:ea:16:12:06:d4:38:c7:
05:63:fb:b8:87:b9:21:35:c5:ce:03:15:0e:5e:cb:12:a6:f8:
0f:51:7c:67:1e:fe:4d:05:2a:7c:c6:87:4e:f0:8d:bd:80:4c:
fd:ac:9d:cf:9d:db:f8:27:dc:f0:9e:01:f6:4c:a7:d4:39:62:
5d:fd:d0:c9:cb:7d:bc:d2:0a:17:21:29:30:e3:7f:1b:9b:db:
68:a1:11:9f:aa:dc:b7:12:20:6d:23:91:f0:1c:0e:4c:d7:52:
ea:64:d8:8a:71:e5:e5:3f:d8:83:e9:bc:97:ff:bd:2a:fe:15:
a8:18:35:28:7b:8c:45:f1:1f:d3:fc:10:15:30:f1:78:70:ef:
0c:d4:3b:25:26:26:c0:48:45:23:a5:d9:b7:3a:15:5b:76:2c:
37:0c:d1:ba:75:62:57:e2:7b:13:65:ac:00:30:70:c4:3d:dc:
35:a0:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:42 2025 by rpki-client