Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: rzO93zSDsuEaI1i7K63LLgCiPciKSML5we8HzVDqLow=
Subject key identifier: B0:3B:95:A8:86:A7:C2:40:BA:B2:53:8F:9A:C0:8F:07:E1:3E:EA:65
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 01974A0CFE0C94C76EDDD41EF207312886BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0C86
Signing time: Sat 07 Jun 2025 11:00:54 +0000
Manifest this update: Sat 07 Jun 2025 11:00:54 +0000
Manifest next update: Sun 08 Jun 2025 11:00:54 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: v5u/FaVBxsjoPwHVdvveP8LZdGnEd3DnABtHnXLqD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:fe:0c:94:c7:6e:dd:d4:1e:f2:07:31:28:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jun 7 11:00:54 2025 GMT
Not After : Jun 8 11:00:54 2025 GMT
Subject: CN=b03b95a886a7c240bab2538f9ac08f07e13eea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:02:7e:c5:d9:b0:d9:ff:80:58:35:6b:f0:
21:26:2b:27:f3:cc:e0:89:50:68:dd:33:b9:66:71:
ff:8d:56:a2:94:12:a0:58:9e:da:1a:39:29:8f:3d:
cd:f0:ac:ab:45:8a:c5:bf:9c:bc:36:4c:c8:be:d8:
2e:79:e3:6f:3c:23:3d:67:3e:92:af:78:4e:b4:da:
91:e6:de:15:b8:84:68:10:cf:1e:9a:db:96:96:f1:
cb:e9:e3:8f:31:f0:f7:9e:23:cf:c9:1b:37:a5:35:
ed:82:e6:00:45:a9:02:eb:0b:44:93:f3:d7:7e:dd:
67:3d:68:f7:5b:95:f0:9d:f7:4f:a7:13:54:65:c5:
be:52:0c:bf:9b:ee:33:55:84:09:2c:f2:8d:cc:4c:
7b:61:42:33:b9:6d:bf:8b:47:15:13:01:32:4f:c7:
93:37:e5:5f:08:97:3d:56:9c:1e:85:6d:81:9f:0c:
7b:92:cd:11:24:58:17:a9:35:1d:36:e6:d4:36:d9:
82:c8:14:05:11:76:48:ec:8c:ee:02:3f:23:6f:f7:
91:c5:24:33:8d:16:3b:a1:1e:fb:18:eb:90:a4:00:
79:16:9c:b3:0a:42:d0:ef:c2:2e:f5:30:48:40:ab:
79:4c:f4:59:4b:de:d2:40:82:14:5e:b2:4f:ba:04:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:95:A8:86:A7:C2:40:BA:B2:53:8F:9A:C0:8F:07:E1:3E:EA:65
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:af:d4:77:eb:48:89:0a:6b:92:75:8f:ba:77:50:fa:36:e2:
f9:3c:eb:b0:93:f0:15:1b:0a:0d:bd:58:6e:d8:a6:15:24:9b:
b3:62:ee:0d:c3:92:ce:ba:42:10:16:86:c1:cf:a9:21:24:90:
5d:ac:02:5b:b4:5f:ed:88:f1:47:ab:5f:eb:63:38:e1:a1:6e:
f0:e9:fb:c7:77:3d:7f:78:f9:4d:79:19:84:5a:3d:b2:0e:21:
c3:2e:74:2a:b8:52:5d:74:a6:d5:8a:2e:87:cb:37:93:c2:2f:
ac:3f:61:20:05:a7:ae:2b:0d:0c:fc:f5:25:fe:86:7a:00:a2:
60:b4:26:6c:64:84:08:a5:76:af:f4:27:31:c8:5f:10:f1:ff:
66:d1:62:f3:09:72:bc:9e:26:ab:2f:8d:4c:9d:9e:b9:ec:46:
64:69:46:6d:0a:40:c6:55:6d:1b:a6:da:5e:62:72:14:8a:a2:
b7:a5:8f:e8:fe:a8:60:64:be:82:a7:89:14:32:cd:01:12:bb:
13:b3:06:61:76:77:7a:07:89:9e:75:ed:f0:0b:26:93:03:85:
93:b4:28:f7:9e:ec:e8:74:c2:ac:24:df:97:c8:b0:77:40:16:
79:68:c0:53:de:c7:42:be:82:ef:08:31:0c:5a:93:3e:34:b5:
8d:30:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:34 2025 by rpki-client