Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: jyjh7fKNPV7EebquCMFY79/dKuJ5nOsGR009XDdIWhE=
Subject key identifier: 0E:09:53:F0:24:6E:7C:1A:61:A5:88:B2:77:19:7C:E5:27:49:3D:7F
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0198E60AB722B6F6773443F61D2A0EB3256B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 05F4
Signing time: Tue 26 Aug 2025 11:01:58 +0000
Manifest this update: Tue 26 Aug 2025 11:01:58 +0000
Manifest next update: Wed 27 Aug 2025 11:01:58 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: MXABA4MXJCMX56cwbMFd5KuncUZD5m/1ymSqYSo6dSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:0a:b7:22:b6:f6:77:34:43:f6:1d:2a:0e:b3:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Aug 26 11:01:58 2025 GMT
Not After : Aug 27 11:01:58 2025 GMT
Subject: CN=0e0953f0246e7c1a61a588b277197ce527493d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:27:43:49:43:e3:0f:0e:8d:bc:0f:d8:67:
89:05:7c:04:ff:c3:53:3c:71:37:25:01:32:5f:3b:
ef:2d:51:59:4b:dd:3e:61:38:ed:54:36:a5:37:df:
d6:46:52:fd:d6:7e:b9:7a:72:a5:70:a5:17:ea:df:
a4:03:7d:45:cd:45:94:ce:0d:0f:7a:37:4f:07:2a:
91:ee:f0:1f:97:7a:23:14:23:d1:5d:07:99:a2:07:
2b:61:f9:13:0a:0d:e7:ba:4c:12:47:bb:10:46:ed:
ad:83:f9:8d:32:fd:bb:0f:78:75:21:6d:7a:ea:9e:
b6:64:d2:a7:16:e7:08:58:ed:ae:18:7d:01:3d:0a:
5d:bc:a1:17:6d:e3:b0:e7:45:6c:77:83:ed:bd:4e:
23:14:f5:d3:1f:5b:d0:0d:54:f0:02:d0:c0:70:71:
39:2a:0d:2a:e9:f7:7f:28:86:ef:c7:d8:ad:fc:3e:
de:ae:35:e5:b1:4c:94:42:db:07:6e:3c:39:65:ce:
08:64:0e:f6:e7:34:1c:41:ec:cd:24:b3:af:7b:88:
1a:61:7a:81:bf:bf:73:47:06:22:d5:fd:10:02:db:
fb:85:e0:a2:65:bf:df:03:31:7c:74:d1:92:f1:fb:
5a:2b:6d:a6:13:37:5d:3f:1c:c2:cf:ee:14:75:96:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:53:F0:24:6E:7C:1A:61:A5:88:B2:77:19:7C:E5:27:49:3D:7F
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:95:81:ae:0b:99:a2:46:25:87:a3:ba:36:da:8e:66:3c:
0f:f2:fa:0d:9e:b3:da:ff:0a:1d:3b:0f:91:98:27:b6:6e:6f:
2c:40:d8:85:fd:ac:24:5d:a2:d8:c1:1f:35:27:a0:d2:96:c8:
d3:a5:ef:fc:fe:3f:5e:d9:1f:55:2d:96:af:f8:f1:b0:f6:3e:
9f:b3:2b:e9:e4:4c:b7:09:e0:3d:78:e6:1f:01:e6:d6:e8:99:
d7:fe:d2:16:38:82:88:1d:15:58:aa:03:05:58:85:f8:4a:36:
08:0b:5d:ca:77:2a:86:a2:f9:62:7e:50:df:89:5a:b8:e0:b8:
dc:af:f8:94:4f:76:98:24:10:3e:78:cd:df:ee:15:6e:db:00:
01:47:b8:43:6a:59:19:98:0b:18:96:78:0d:1a:ee:7d:3b:a3:
e5:f4:de:2e:8c:27:4c:bc:c4:4f:f5:40:85:b7:0e:a6:0f:b7:
fd:e2:b9:00:b6:af:0c:e9:a5:50:6f:95:9d:12:d8:9b:2d:a6:
bf:71:ea:bd:59:82:83:4e:6a:d5:be:cd:41:de:7e:23:eb:c5:
24:16:2e:6c:32:bf:96:57:70:9c:9f:3b:ed:f4:95:02:d8:05:
67:03:60:71:79:86:a0:98:54:4a:c3:df:e0:01:7f:98:fd:f4:
eb:95:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 13:05:05 2025 by rpki-client