Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: uKprq/EdZBQQqt696posoxIDeUa8dFVqpgFjNQmjdog=
Subject key identifier: 42:5C:E5:86:96:5E:36:C9:D3:E4:B3:4B:E9:50:11:95:4E:BE:E3:CC
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019922FAC2550D9A920AF183080DD9F67A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0B76
Signing time: Sun 07 Sep 2025 07:01:23 +0000
Manifest this update: Sun 07 Sep 2025 07:01:23 +0000
Manifest next update: Mon 08 Sep 2025 07:01:23 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: 60GIUjGeNsz4uU41u/M6Mzf+gCeFBZnucEwAcqjmw/M=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c2:55:0d:9a:92:0a:f1:83:08:0d:d9:f6:7a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Sep 7 07:01:23 2025 GMT
Not After : Sep 8 07:01:23 2025 GMT
Subject: CN=425ce586965e36c9d3e4b34be95011954ebee3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:c1:bc:1e:04:2a:94:4c:08:36:94:16:0a:
70:26:0e:f2:d9:d6:bc:ed:fc:13:bd:33:8f:f9:f5:
fc:c1:6c:6f:9a:a5:bd:70:65:a8:da:61:8c:91:1f:
f4:07:87:e7:b6:5e:c4:66:da:94:fc:8c:74:79:db:
9d:e0:ca:82:2d:14:81:12:a9:54:1e:bb:62:29:fc:
94:6b:b4:c6:c7:e7:ca:94:62:b9:4e:5d:62:e6:8a:
b0:5c:7a:4e:4b:37:c2:69:91:7f:5e:a7:35:dc:9d:
49:52:3e:3b:2f:c6:1f:16:a7:15:b3:99:d9:b4:dc:
e1:86:00:3b:c1:a7:2b:17:8c:43:7f:cb:f6:4f:40:
b2:5a:03:51:32:e4:1a:2f:54:67:ab:15:80:e2:83:
b2:89:d6:4d:fc:f7:1a:87:ad:41:a9:4e:17:5f:16:
93:c8:ce:44:58:c6:fe:a4:5f:b8:5d:e2:4e:d6:9f:
fb:80:aa:45:9f:61:85:57:f9:14:92:7a:2d:ac:2b:
34:8e:bc:f6:b1:ef:b8:c1:1f:92:5b:56:63:b8:2b:
69:80:4b:7a:5d:47:a9:29:5d:2b:39:b3:68:8d:a1:
3e:95:35:8d:23:39:a6:e3:1a:10:30:6f:89:e1:a0:
91:0c:fa:42:5d:6c:97:b9:c6:01:2e:e1:48:fd:16:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:E5:86:96:5E:36:C9:D3:E4:B3:4B:E9:50:11:95:4E:BE:E3:CC
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2c:16:29:14:cd:72:5c:c5:7e:e8:d2:11:90:a8:a9:26:19:
c8:16:0d:8a:fc:56:02:2f:f4:dc:97:4f:32:1f:34:24:0d:b1:
e7:39:d9:b8:3e:5c:29:b4:b8:c6:bd:14:7e:95:1a:9a:7f:04:
b8:c9:a8:92:d2:61:e8:db:f2:71:c9:03:e9:c4:6c:65:ef:97:
d5:9f:2d:15:08:9d:64:a1:db:a9:e1:93:2e:22:7f:41:d1:ae:
76:7c:65:c7:51:e6:3d:34:91:f6:02:49:71:49:a1:e2:93:6d:
43:18:42:0a:dd:9e:dd:8e:8a:c3:50:93:24:d2:4e:a5:42:ba:
cc:91:e8:33:9d:96:f5:61:76:6d:bd:c3:c0:2a:9b:d3:ba:7d:
45:a9:dd:92:6f:5a:9a:8d:49:48:b1:11:a4:56:2d:30:46:ab:
0d:cf:ad:ed:67:24:f2:5f:0d:73:21:84:60:e1:a3:43:89:fe:
82:06:ee:0a:cf:80:9e:e7:d1:b5:35:4a:a9:78:3f:c2:7a:d5:
8e:dd:a1:65:09:24:9c:08:27:b7:70:e3:bb:f0:79:11:97:2e:
f5:80:0f:66:68:bd:da:64:52:e6:af:fb:c5:58:38:ea:ae:c0:
25:f3:49:8c:35:f3:e9:e7:d9:54:ce:2a:62:f6:f2:15:a9:fb:
fb:09:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:02 2025 by rpki-client