
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: zOH0964rAqIGCMbaFWHBWUf7JO9LiPLcK4QFaxT4TZ4=
Subject key identifier: 97:63:AC:05:4C:3A:A4:31:A4:5F:6B:41:9E:4C:D6:2D:B5:EE:D0:F4
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 0199172C9EBB57510FD289684E803D61A68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 0729
Signing time: Fri 05 Sep 2025 00:00:24 +0000
Manifest this update: Fri 05 Sep 2025 00:00:24 +0000
Manifest next update: Sat 06 Sep 2025 00:00:24 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: dU7pdi37Mal3Hj/ZEc7AF8rqRmrS7lEyL7iBImZPaBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:9e:bb:57:51:0f:d2:89:68:4e:80:3d:61:a6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Sep 5 00:00:24 2025 GMT
Not After : Sep 6 00:00:24 2025 GMT
Subject: CN=9763ac054c3aa431a45f6b419e4cd62db5eed0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:d5:62:15:07:65:5a:1d:c8:e2:9a:d3:ed:
f1:7d:de:47:c7:ab:15:41:c4:3b:8b:db:1d:68:1a:
26:ca:22:2c:6f:6f:bf:1a:29:9b:37:3c:3a:59:2c:
12:64:93:f0:a5:ac:f8:51:94:35:3a:0c:a5:4c:66:
4f:29:75:5f:e4:53:c6:eb:ef:95:b0:d3:ee:f8:cc:
ea:04:bc:86:82:e8:96:a8:af:d0:48:ce:57:2f:3a:
f5:98:ca:83:66:75:42:30:3a:7a:dd:24:cd:55:4d:
d1:54:f2:11:a9:76:ff:fb:00:74:27:08:85:86:d0:
46:c0:9d:69:3b:18:4e:94:c1:76:ef:56:6a:26:79:
48:51:14:0e:56:41:94:09:a0:7f:c1:65:11:58:f3:
ab:32:58:b6:25:38:18:c2:07:cf:96:4e:fe:ab:d0:
79:42:f4:f8:74:bf:61:7f:aa:9f:96:24:a8:fe:1f:
6f:ff:42:e1:08:86:f7:1e:1f:8b:5c:2d:c3:67:2a:
a4:86:ca:9f:10:0c:6f:e0:ef:49:69:39:d6:5a:39:
61:1f:fb:6d:75:cd:2b:1f:11:d0:69:ab:69:aa:9b:
24:8a:93:3c:9f:31:57:58:0f:b7:ca:9b:9e:5f:4f:
b9:35:d1:b4:06:1b:bb:b2:73:83:79:33:a6:d8:6e:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:AC:05:4C:3A:A4:31:A4:5F:6B:41:9E:4C:D6:2D:B5:EE:D0:F4
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:e1:7c:3c:12:76:ab:83:b3:57:33:96:59:ba:5b:a8:b0:
df:7e:73:24:98:74:e8:13:05:50:85:e8:94:f2:ef:4b:5a:5f:
1f:46:f6:d5:fa:e6:de:76:48:65:d4:2b:c2:88:7e:6b:a5:14:
57:13:50:99:c4:eb:e8:a0:b3:36:24:ca:cc:41:72:5e:3c:51:
85:09:41:44:46:7e:da:7b:84:b3:7e:1f:96:8b:15:e2:71:29:
41:75:88:08:3c:96:8e:be:a0:91:90:08:57:58:d4:01:e1:a8:
3d:bf:3e:cd:dc:be:1f:ac:25:18:9c:8d:49:b9:c6:c3:c0:c6:
9d:70:3f:31:8a:e3:e7:c0:48:6d:28:a7:79:2e:08:14:6a:47:
97:74:c3:77:06:44:34:19:41:62:cd:7d:59:d8:50:87:42:f1:
c5:25:40:46:cd:ac:62:ec:e5:b3:c8:4f:26:c9:a2:14:79:4c:
07:55:2a:dc:fd:b8:1b:3f:5e:28:d3:34:82:da:5f:bb:29:66:
49:24:e2:49:5d:eb:d9:eb:f2:39:ff:d9:5f:78:2a:c3:de:01:
0c:ed:4a:bf:bf:78:30:84:82:f6:51:e7:5d:72:9b:9e:00:b0:
bc:4a:7d:01:69:80:39:5c:8e:5b:4a:11:0e:53:c1:27:c0:2b:
cd:ce:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:32 2025 by rpki-client