Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: T4i5Mo6WcDOmLyqGlaMc3m+BObuiY4YlT5AN+1MXeEQ=
Subject key identifier: 29:1E:7E:E8:39:6E:5C:96:AE:57:3F:58:2B:EA:10:0C:3A:DC:B8:13
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 0198CB372A9A05E86850FD09566728FA7FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 12D6
Signing time: Thu 21 Aug 2025 06:00:46 +0000
Manifest this update: Thu 21 Aug 2025 06:00:46 +0000
Manifest next update: Fri 22 Aug 2025 06:00:46 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: CHz1u9Obs40l4Bk0NFJoNSUIZXnBSuexaZ+XMKmwxHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:2a:9a:05:e8:68:50:fd:09:56:67:28:fa:7f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Aug 21 06:00:46 2025 GMT
Not After : Aug 22 06:00:46 2025 GMT
Subject: CN=291e7ee8396e5c96ae573f582bea100c3adcb813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:19:d4:36:a8:f7:75:65:98:68:6d:d0:88:
fc:db:0b:95:13:27:8f:35:e6:18:dd:4c:3f:16:fb:
85:02:54:15:68:72:1b:18:c3:61:40:b5:de:15:4c:
b0:07:ca:37:e7:1d:ba:ee:1f:f9:d7:8e:d2:9e:c1:
aa:93:a8:aa:37:94:12:02:04:e0:55:79:32:f6:f7:
de:ab:44:24:86:34:b9:32:82:3e:31:e5:a7:10:7f:
e0:69:41:d3:67:99:26:12:85:39:41:c4:bf:a3:94:
fa:52:3d:40:fb:5d:b1:29:d6:49:84:5b:c5:c8:51:
aa:77:88:34:15:4a:c3:8a:a9:31:70:f9:7b:60:76:
a2:e9:99:54:bf:64:a7:19:4a:82:c5:95:9b:4e:91:
ce:5d:79:38:46:43:d5:ae:9e:64:c9:45:88:6e:b2:
ac:57:cb:b0:20:40:9e:b8:44:d3:8e:e8:ab:f1:b3:
17:98:dc:f8:66:9e:c8:04:58:18:f8:01:53:bf:e1:
22:d7:ac:96:e9:21:b3:61:fd:8d:f0:d0:fc:ab:fe:
19:49:d5:52:bf:82:89:ab:49:6e:e6:9c:ba:c0:5d:
c0:62:c5:1a:31:70:e9:72:a2:ac:59:6e:84:72:5a:
f4:71:fd:44:8e:1d:fe:67:3a:ae:bd:6b:93:00:0e:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:7E:E8:39:6E:5C:96:AE:57:3F:58:2B:EA:10:0C:3A:DC:B8:13
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:53:88:c7:8f:0f:24:3a:ad:51:32:90:45:25:29:96:56:
b8:45:d3:2e:3a:88:83:78:44:2f:1b:ed:34:f4:80:24:d0:fa:
6f:32:31:7c:ca:b9:ce:d1:03:2a:89:fd:1d:66:72:2f:21:9f:
45:b6:6b:30:2b:cb:be:45:c2:c2:fb:f4:95:7d:19:d2:e3:6e:
42:d5:51:3c:35:e6:84:86:43:2c:e7:03:c0:18:8a:24:fe:c8:
7a:7a:9b:16:64:74:07:6a:4f:27:46:08:ce:af:c8:d3:25:42:
fe:13:04:35:17:a6:d4:63:94:ea:be:e4:e9:31:54:03:ef:99:
83:38:31:86:31:fa:5b:af:67:37:a4:f0:d3:f8:ab:b4:2b:92:
f6:d0:30:ee:64:bd:cc:f9:d7:2f:c3:86:fe:c1:54:30:a4:14:
cf:c5:56:c8:8f:f1:c5:d9:ad:48:5d:e4:74:ca:3b:ee:3b:c6:
a9:c4:c7:be:94:91:64:ec:72:e9:65:3a:2f:77:6b:f3:b9:e0:
c4:0d:be:31:7e:7f:90:5c:21:ae:13:8d:c9:05:36:53:cb:46:
e9:03:f2:bd:8c:f8:41:de:1c:a7:1f:aa:00:87:4e:8d:38:18:
14:64:1b:1c:8d:67:ef:16:ad:67:7f:13:50:e8:2c:d9:47:e6:
d5:1f:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:30:55 2025 by rpki-client