Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: IS5UUp3FhP5dHfu7z72XWZXnyjgfmv8PDseNg8+x1d8=
Subject key identifier: 37:3D:B1:0D:63:90:FF:9C:C5:95:40:F0:8B:82:B3:82:C3:4B:A2:A8
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 0199221ED9041BDF74CEB6784B3165EAE207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: 5ryfRzX1m86PxfHRTZfjX4bono39ze+EMtRJyW0cUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d9:04:1b:df:74:ce:b6:78:4b:31:65:ea:e2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=373db10d6390ff9cc59540f08b82b382c34ba2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:63:de:fa:11:1e:ed:1e:48:57:7d:5e:4b:
d3:53:66:b3:38:bf:92:37:b7:2e:2a:05:e6:25:4f:
69:7f:ed:86:db:9e:02:a8:dc:f1:11:fe:0d:43:3f:
47:40:53:98:fa:5d:e7:4a:61:61:05:d2:b0:fa:f3:
d6:cf:04:79:a5:f0:ee:a1:e9:62:96:77:12:af:9b:
d9:34:f7:b9:5a:06:34:f6:e5:24:5d:c8:33:ca:9e:
38:e1:da:28:61:2d:84:5f:04:17:c0:03:c8:71:87:
95:6e:7c:32:fb:92:8f:c9:fc:72:cf:b0:d1:36:b1:
1b:1e:1f:70:66:3f:ec:18:42:6a:9b:10:95:23:6f:
55:0c:b4:79:7c:f7:62:d6:69:65:1d:cb:b2:07:b4:
d8:29:2d:ec:61:a1:3a:d7:6f:5f:00:c3:f8:49:c6:
32:24:89:ce:03:3c:64:23:3f:8e:1c:ae:c9:5b:bb:
ba:ad:8e:37:a5:fd:97:e8:09:58:58:1c:23:86:a4:
d4:b1:e3:7a:87:98:fb:13:b8:38:d8:00:d5:be:48:
a3:3c:cd:f1:c8:78:6f:0a:99:02:7c:e3:45:1f:47:
50:bb:1f:c9:93:7e:24:c5:0e:28:ca:cd:9a:ae:4b:
35:3f:0d:ee:62:2c:2f:ec:e7:62:6e:d2:e5:91:e6:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:B1:0D:63:90:FF:9C:C5:95:40:F0:8B:82:B3:82:C3:4B:A2:A8
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7f:7d:35:85:79:d6:a2:16:cc:b6:83:d3:3c:10:de:0a:7e:
de:33:90:5f:a6:9d:84:88:18:f8:e0:d3:9e:5e:71:18:68:ad:
e7:c9:38:ba:3b:f4:30:c7:eb:bd:1a:95:55:33:45:e1:10:dc:
45:1d:1b:0d:40:29:5f:f7:33:ec:de:12:dd:c5:63:4c:66:a1:
e8:cd:27:13:05:8f:8b:f5:90:f4:db:2c:98:11:4b:82:b4:26:
05:39:ec:8e:b2:23:48:16:ec:c1:0a:50:e3:b9:cc:6b:90:a7:
2f:07:0b:45:db:5b:8e:f8:d8:6c:62:86:2d:0d:df:a6:49:c4:
42:91:65:a7:9c:3c:b0:5c:c7:98:fa:4f:65:14:f4:ed:6e:e8:
bf:f7:11:ad:33:1e:04:ab:fe:b3:64:48:ca:0b:83:90:73:93:
24:5c:aa:84:00:da:73:65:27:a3:14:9a:5a:3b:73:ed:86:24:
c1:3b:8e:39:d1:3f:d1:79:cf:8c:17:56:9f:88:49:76:5b:8b:
a5:03:f8:5b:77:8e:cf:7f:b6:21:96:75:74:c7:8b:ae:fc:12:
d6:30:a6:13:02:90:fa:bf:0d:57:4d:ff:c3:46:30:8d:0e:c1:
18:38:81:d2:8e:ed:a6:28:19:a5:8a:2f:8c:af:40:77:e3:1e:
f4:51:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:58 2025 by rpki-client